Documentation Not Included - Episodes Tagged with “Security”

Bashing Bothersome Bugs & Chasing Chunks of Cash

Documentation Not Included — Fri, 28 Feb 2020 10:00:00 +0000

Chris and Josey discuss bug bounty programs, actions to take if randomly stumbling upon a security vulnerability, reporting pros/cons, and a lot more. Is the answer really black and white, or is it all grey?

TOPICS

What is a bug bounty program
When and how should you report discovered potential attack vectors or security vulnerabilities
Mental and moral exercises discussing the potential pros/cons of reporting or not
Is the answer to handling a report really a black and white issue? Or is it more grey?
...and so much more!

MUSIC FROM THE CCMIXTER COMMUNITY
Snazzy Intro: On Top of the World by texasradiofish (c) copyright 2015 Licensed under a Creative Commons Attribution Noncommercial (3.0) license. http://dig.ccmixter.org/files/texasradiofish/50478 Ft: John Fletcher, Patricia Edwards, ElRon XChile, Speck, alexplaysguitar
Live Show Starting Soon: cdk - Sunday by Analog By Nature (c) copyright 2016 Licensed under a Creative Commons Attribution (3.0) license. http://dig.ccmixter.org/files/cdk/53755
Live Show Outro: ＭＩＬＬＥＮＮＩＡＬＳ by Analog By Nature (c) copyright 2018 Licensed under a Creative Commons Attribution (3.0) license. http://dig.ccmixter.org/files/cdk/57150

Links:

We found 6 critical PayPal vulnerabilities - and PayPal punished us for it | CyberNews

12 Configuration Blues

Documentation Not Included — Fri, 29 Nov 2019 07:00:00 +0000

Chris is joined by Steve Collins to talk about the wonderful world of configuration files. What wonders do they hold? How many configuration files does it take to setup an application? How to handle secure connection information across environments? And is it really worth it?

TOPICS

How many configuration files does it take to setup an application?
And is it really worth it?
How to store passwords? Private API keys?
Configurations across environments (local, dev, staging, prod, etc)... ...and more!

Special Guest: Steve Collins.

Shifting Security

Documentation Not Included — Thu, 10 Jan 2019 19:00:00 +0000

The team start the year discussing security in the IT world and development and the impact they have on each other.

TOPICS

Have you ever been apart of the response team for a compromise?
Sharing tools internally as a company?
Password Management
Why you should always use a different password on every site.
Security Apathy / Fatigue
...and so much more!

LINKS
XKCD's Password Comic: http://xkcd.com/936/
A look at how XKCD's password comic is a bit out of date due to password crackers being onto this trick: https://www.schneier.com/blog/archives/2014/03/choosing_secure_1.html

Javascript

Documentation Not Included — Thu, 18 Oct 2018 19:00:00 +0100

Jay Cano joins the DNI team to discuss all things JavaScript.

TOPICS

Geocities
Catchphrases
JavaScript is old
Backbone
JQuery
Framework Fatigue / JavaScript Fatigue
React
JavaScript Framework Barrier to Entry
Security
PHP is still relevant?
TypeScript
Express, Node, Hapi

LINKS
Plotist

Special Guest: Jay Cano.