Application Security Weekly (Audio)
Technology
Sometimes infosec problems can be summarized succinctly, like "patching is hard". Sometimes a succinct summary sounds convincing, but is based on old data, irrelevant data, or made up data. Adrian Sanabria walks through some of the archeological work he's done to dig up the source of some myths. We talk about some of our favorite (as in most disliked) myths to point out how oversimplified slogans and oversimplified threat models lead to bad advice -- and why bad advice can make users less secure.
Segment resources:
The OWASP Top 10 gets its first update after a year, Metasploit gets its first rewrite (but it's still in Perl), PHP adds support for prepared statements, RSA Conference puts passwords on notice while patching remains hard, and more!
Visit https://www.securityweekly.com/asw for all the latest episodes!
Show Notes: https://securityweekly.com/asw-279
ASW #220 - Daniel Krivelevich
ASW #219 - Karl Triebes
ASW #218 - Sandy Carielli, Martha Bennett
ASW #217 - Kong Yew Chan
ASW #216 - Jason Recla
ASW #215 - Akira Brand
ASW #214 - Dean Agron
ASW #213 - Janet Worthington
ASW #212 - Sam Placette
ASW #211 - Sonali Shah
ASW #210 - Doug Dooley
ASW #209 - Kiran Kamity
ASW #208 - Tanya Janca
ASW #207 - Chen Gour Arie
ASW #206 - Manish Gupta
ASW #199 - Nikhil Gupta
ASW #205 - Ferruh Mavituna
ASW #204 - Larry Maccherone
ASW #203 - Farshad Abasi
ASW #202 - Mike Benjamin
Create your
podcast in
minutes
It is Free
Insight Story: Tech Trends Unpacked
Zero-Shot
Fast Forward by Tomorrow Unlocked: Tech past, tech future
The Unbelivable Truth - Series 1 - 26 including specials and pilot
Lex Fridman Podcast