Application Security Weekly (Audio)
Technology
Sometimes infosec problems can be summarized succinctly, like "patching is hard". Sometimes a succinct summary sounds convincing, but is based on old data, irrelevant data, or made up data. Adrian Sanabria walks through some of the archeological work he's done to dig up the source of some myths. We talk about some of our favorite (as in most disliked) myths to point out how oversimplified slogans and oversimplified threat models lead to bad advice -- and why bad advice can make users less secure.
Segment resources:
The OWASP Top 10 gets its first update after a year, Metasploit gets its first rewrite (but it's still in Perl), PHP adds support for prepared statements, RSA Conference puts passwords on notice while patching remains hard, and more!
Visit https://www.securityweekly.com/asw for all the latest episodes!
Show Notes: https://securityweekly.com/asw-279
Little Bit Too High - ASW #120
Heavy Pressure - ASW #119
Positive Drift - ASW #118
Maximum Isolation - ASW #117
It Makes No Sense - ASW #116
Back in the 90's - ASW #115
Absolutely Useless - ASW #114
Crunchy Crunchy! - ASW #113
Completely Forgotten - ASW #112
The Boy Who Cried Wolf - ASW #111
Full of Ideas - ASW #110
Prohibitively Expensive - ASW #109
Shake My Head - ASW #108
A Perfect Ten - ASW #107
Swiss Cheese - ASW #106
Blinky Lights - ASW #105
Crabby Code - ASW #104
Some Good Meatiness - ASW #103
The Sky Is Falling - ASW #102
Syncing of the Minds - ASW #101
Create your
podcast in
minutes
It is Free
Insight Story: Tech Trends Unpacked
Zero-Shot
Fast Forward by Tomorrow Unlocked: Tech past, tech future
The Unbelivable Truth - Series 1 - 26 including specials and pilot
Lex Fridman Podcast