Application Security Weekly (Audio)
Technology
Sometimes infosec problems can be summarized succinctly, like "patching is hard". Sometimes a succinct summary sounds convincing, but is based on old data, irrelevant data, or made up data. Adrian Sanabria walks through some of the archeological work he's done to dig up the source of some myths. We talk about some of our favorite (as in most disliked) myths to point out how oversimplified slogans and oversimplified threat models lead to bad advice -- and why bad advice can make users less secure.
Segment resources:
The OWASP Top 10 gets its first update after a year, Metasploit gets its first rewrite (but it's still in Perl), PHP adds support for prepared statements, RSA Conference puts passwords on notice while patching remains hard, and more!
Visit https://www.securityweekly.com/asw for all the latest episodes!
Show Notes: https://securityweekly.com/asw-279
Something For Everybody - ASW #180
Big Smiles - ASW #179
Fuzzing Like It's 1999 - ASW #178
Vulnerability Phone - ASW #177
Cyber Monday - ASW #176
Max Headroom - ASW #175
Eyes Open - ASW #174
Schools of Magic - ASW #173
Actual Secrets - ASW #172
Horror Stories - ASW #171
Highly Technical - ASW #170
Halloween Horror - ASW #169
Opposite Direction - ASW #168
Skills & Knowledge - ASW #167
Don't Hate the Player, Hate the Game - ASW #166
Drive - ASW #165
Magical Forest - ASW #164
Strange New Clouds - ASW #163
Time Traveling - ASW #162
Thinking Alike - ASW #161
Create your
podcast in
minutes
It is Free
Insight Story: Tech Trends Unpacked
Zero-Shot
Fast Forward by Tomorrow Unlocked: Tech past, tech future
The Unbelivable Truth - Series 1 - 26 including specials and pilot
Lex Fridman Podcast