Charles M Wood

Vzdělání

Byznys

Jak na to

Technika

JSJ 418: Security Scary Stories and How to Avoid Them with Kevin A McGrail

JavaScript Jabber

Stay current on JavaScript, Node, and Front-End development. Learn from experts in programming, careers, and technology every week. Become a supporter of this podcast: <a href="https://www.spreaker.com/podcast/javascript-jabber--6102064/support?utm_source=rss&utm_medium=rss&utm_campaign=rss">https://www.spreaker.com/podcast/javascript-jabber--6102064/support</a>.

In this episode of JavaScript Jabber the panel interviews security expert, Kevin A. McGrail. He starts by explaining what security frameworks and what they do. The panel wonders how to know if your developers are capable of self-auditing your security or if you need help. Kevin shares recommendations for companies to look at to answer that question. Aimee Knight explains the hell she has been in making changes to be compliant with CCPA. The panel considers how policies like this complicate security, are nearly impossible to be compliant with and how they can be weaponized. They discuss the need for technical people to be involved in writing these laws. Kevin explains how you can know how secure your systems actually are. He shares the culture of security first he tries to instill in the companies he trains. He also trains them on how to think like a bad guy and explains how this helps developers become security first developers. The panel discusses how scams have evolved and how the same scams are still being run. They consider the importance of automated training and teaching developers to do it right the first time.Finally, they consider the different ways of authentication, passwords, passphrases, sim card, biometrics. Kevin warns against oversharing or announcing vacations. The panel discusses real-world tactics bad guys use. Kevin explains what he trains people to do and look out for to increase security with both social engineering and technical expertise. Panelists<ul><li>Aimee Knight</li><li>AJ O’Neal</li><li>Charles Max Wood</li><li>Dan Shappir</li><li>Steve Edwards</li></ul>Guest<ul><li>Kevin A McGrail</li></ul>Sponsors<ul><li> ABOUT YOU |<a href="http://aboutyou.com/apply" target="_blank" rel="noreferrer noopener"> aboutyou.com/apply</a></li><li><a href="https://on.split.io/37M1fu2" target="_blank" rel="noreferrer noopener">Split</a></li><li><a href="https://www.cachefly.com/" target="_blank" rel="noreferrer noopener">CacheFly</a></li></ul>____________________________________________________________ "The MaxCoders Guide to Finding Your Dream Developer Job" by Charles Max Wood is now available on Amazon.<a href="https://www.amazon.com/gp/product/B081MBL5C9/ref=as_li_ss_tl?ie=UTF8&language=en_US&linkCode=sl1&linkId=9d61363241636e2546ef46abba198746&tag=devchattv-20" target="_blank" rel="noreferrer noopener"> Get Your Copy Today!</a> ____________________________________________________________Links<ul><li><a href="https://www.amazon.com/Ghost-Wires-Adventures-Worlds-Wanted/dp/0316037729/ref=sr_1_1?ie=UTF8&language=en_US&linkCode=ll1&linkId=f06bfe7482dca8bb751ed6d7cc86e2ab&qid=1548462018&sr=8-1&tag=devchattv-20" target="_blank" rel="noreferrer noopener">Ghost in the Wires</a></li><li><a href="https://www.infrashield.com/" target="_blank" rel="noreferrer noopener">https://www.infrashield.com/</a></li></ul> Follow DevChatTV on<a href="https://www.facebook.com/DevChattv/?__tn__=%2Cd%2CP-R&eid=ARDBDrBnK71PDmx_8gE_IeIEo5SnM7cyzylVBjAwfaOo1ck_6q3GXuRBfaUQZaWVvFGyEVjrhDwnS_tV" target="_blank" rel="noreferrer noopener"> Facebook</a> and<a href="https://twitter.com/devchattv?lang=en" target="_blank" rel="noreferrer noopener"> Twitter</a> PicksAimee Knight:<ul><li><a href="https://www.theatlantic.com/science/archive/2018/02/the-more-gender-equality-the-fewer-women-in-stem/553592/" target="_blank" rel="noreferrer noopener">The More Gender Equality, the Fewer Women in STEM</a>  </li></ul>AJ O’Neal:<ul><li><a href="https://www.youtube.com/watch?v=rnmcRTnTNC8" target="_blank" rel="noreferrer noopener">I'll Let Myself In: Tactics of Physical Pen Testers</a>  </li><li><a href="https://www.youtube.com/watch?v=AayXf5aRFTI" target="_blank" rel="noreferrer noopener">Copying Keys from Photos, Molds & More</a>  </li><li><a href="https://www.youtube.com/watch?v=GiYO1TObNz8" target="_blank" rel="noreferrer noopener">The LED Traffic Light and the Danger of "But Sometimes!"</a>  </li><li><a href="https://amzn.to/2YYXP43" target="_blank" rel="noreferrer noopener">Regina Spektor</a>  </li><li><a href="https://amzn.to/35wcztj" target="_blank" rel="noreferrer noopener">The Weepies</a>  </li></ul>Dan Shappir:<ul><li><a href="https://www.youtube.com/watch?v=_QdPW8JrYzQ" target="_blank" rel="noreferrer noopener">This is what happens when you reply to spam email</a>  </li><li><a href="https://www.youtube.com/watch?v=opRMrEfAIiI" target="_blank" rel="noreferrer noopener">What is Your Password?</a>  </li></ul>Kevin A McGrail:<ul><li><a href="https://xkcd.com/538/" target="_blank" rel="noreferrer noopener">XKCD Security</a>  </li><li><a href="https://www.imdb.com/title/tt0487831/" target="_blank" rel="noreferrer noopener">IT Crowd</a></li><li><a href="https://spamassassin.apache.org/" target="_blank" rel="noreferrer noopener">https://spamassassin.apache.org/</a></li></ul>Steve Edwards:<ul><li><a href="https://xkpasswd.net/s/" target="_blank" rel="noreferrer noopener">XKCD Password Generator</a>  </li><li><a href="https://xkcd.com/356/" target="_blank" rel="noreferrer noopener">Nerd Sniping</a></li></ul>Special Guest: Kevin A. McGrail. Support this podcast at — <a href="https://redcircle.com/javascript-jabber/donations" target="_blank" rel="noreferrer noopener">https://redcircle.com/javascript-jabber/donations</a> Privacy & Opt-Out: <a href="https://redcircle.com/privacy" target="_blank" rel="noreferrer noopener">https://redcircle.com/privacy</a> Become a supporter of this podcast: <a href="https://www.spreaker.com/podcast/javascript-jabber--6102064/support?utm_source=rss&utm_medium=rss&utm_campaign=rss">https://www.spreaker.com/podcast/javascript-jabber--6102064/support</a>.

In this episode of JavaScript Jabber the panel interviews security expert, Kevin A. McGrail. He starts by explaining what security frameworks and what they do. The panel wonders how to know if your developers are capable of self-auditing your security or if you need help. Kevin shares recommendations for companies to look at to answer that question. Aimee Knight explains the hell she has been in making changes to be compliant with CCPA. The panel considers how policies like this complicate security, are nearly impossible to be compliant with and how they can be weaponized. They discuss the need for technical people to be involved in writing these laws. Kevin explains how you can know how secure your systems actually are. He shares the culture of security first he tries to instill in the companies he trains. He also trains them on how to think like a bad guy and explains how this helps developers become security first developers. The panel discusses how scams have evolved and how the same scams are still being run. They consider the importance of automated training and teaching developers to do it right the first time.Finally, they consider the different ways of authentication, passwords, passphrases, sim card, biometrics. Kevin warns against oversharing or announcing vacations. The panel discusses real-world tactics bad guys use. Kevin explains what he trains people to do and look out for to increase security with both social engineering and technical expertise. Panelists<ul><li>Aimee Knight</li><li>AJ O’Neal</li><li>Charles Max Wood</li><li>Dan Shappir</li><li>Steve Edwards</li></ul>Guest<ul><li>Kevin A McGrail</li></ul>Sponsors<ul><li> ABOUT YOU |<a href="http://aboutyou.com/apply" target="_blank" rel="noreferrer noopener"> aboutyou.com/apply</a></li><li><a href="https://on.split.io/37M1fu2" target="_blank" rel="noreferrer noopener">Split</a></li><li><a href="https://www.cachefly.com/" target="_blank" rel="noreferrer noopener">CacheFly</a></li></ul>____________________________________________________________ "The MaxCoders Guide to Finding Your Dream Developer Job" by Charles Max Wood is now available on Amazon.<a href="https://www.amazon.com/gp/product/B081MBL5C9/ref=as_li_ss_tl?ie=UTF8&language=en_US&linkCode=sl1&linkId=9d61363241636e2546ef46abba198746&tag=devchattv-20" target="_blank" rel="noreferrer noopener"> Get Your Copy Today!</a> ____________________________________________________________Links<ul><li><a href="https://www.amazon.com/Ghost-Wires-Adventures-Worlds-Wanted/dp/0316037729/ref=sr_1_1?ie=UTF8&language=en_US&linkCode=ll1&linkId=f06bfe7482dca8bb751ed6d7cc86e2ab&qid=1548462018&sr=8-1&tag=devchattv-20" target="_blank" rel="noreferrer noopener">Ghost in the Wires</a></li><li><a href="https://www.infrashield.com/" target="_blank" rel="noreferrer noopener">https://www.infrashield.com/</a></li></ul> Follow DevChatTV on<a href="https://www.facebook.com/DevChattv/?__tn__=%2Cd%2CP-R&eid=ARDBDrBnK71PDmx_8gE_IeIEo5SnM7cyzylVBjAwfaOo1ck_6q3GXuRBfaUQZaWVvFGyEVjrhDwnS_tV" target="_blank" rel="noreferrer noopener"> Facebook</a> and<a href="https://twitter.com/devchattv?lang=en" target="_blank" rel="noreferrer noopener"> Twitter</a> PicksAimee Knight:<ul><li><a href="https://www.theatlantic.com/science/archive/2018/02/the-more-gender-equality-the-fewer-women-in-stem/553592/" target="_blank" rel="noreferrer noopener">The More Gender Equality, the Fewer Women in STEM</a>  </li></ul>AJ O’Neal:<ul><li><a href="https://www.youtube.com/watch?v=rnmcRTnTNC8" target="_blank" rel="noreferrer noopener">I'll Let Myself In: Tactics of Physical Pen Testers</a>  </li><li><a href="https://www.youtube.com/watch?v=AayXf5aRFTI" target="_blank" rel="noreferrer noopener">Copying Keys from Photos, Molds & More</a>  </li><li><a href="https://www.youtube.com/watch?v=GiYO1TObNz8" target="_blank" rel="noreferrer noopener">The LED Traffic Light and the Danger of "But Sometimes!"</a>  </li><li><a href="https://amzn.to/2YYXP43" target="_blank" rel="noreferrer noopener">Regina Spektor</a>  </li><li><a href="https://amzn.to/35wcztj" target="_blank" rel="noreferrer noopener">The Weepies</a>  </li></ul>Dan Shappir:<ul><li><a href="https://www.youtube.com/watch?v=_QdPW8JrYzQ" target="_blank" rel="noreferrer noopener">This is what happens when you reply to spam email</a>  </li><li><a href="https://www.youtube.com/watch?v=opRMrEfAIiI" target="_blank" rel="noreferrer noopener">What is Your Password?</a>  </li></ul>Kevin A McGrail:<ul><li><a href="https://xkcd.com/538/" target="_blank" rel="noreferrer noopener">XKCD Security</a>  </li><li><a href="https://www.imdb.com/title/tt0487831/" target="_blank" rel="noreferrer noopener">IT Crowd</a></li><li><a href="https://spamassassin.apache.org/" target="_blank" rel="noreferrer noopener">https://spamassassin.apache.org/</a></li></ul>Steve Edwards:<ul><li><a href="https://xkpasswd.net/s/" target="_blank" rel="noreferrer noopener">XKCD Password Generator</a>  </li><li><a href="https://xkcd.com/356/" target="_blank" rel="noreferrer noopener">Nerd Sniping</a></li></ul>Special Guest: Kevin A. McGrail. Support this podcast at — <a href="https://redcircle.com/javascript-jabber/donations" target="_blank" rel="noreferrer noopener">https://redcircle.com/javascript-jabber/donations</a> Privacy & Opt-Out: <a href="https://redcircle.com/privacy" target="_blank" rel="noreferrer noopener">https://redcircle.com/privacy</a> Become a supporter of this podcast: <a href="https://www.spreaker.com/podcast/javascript-jabber--6102064/support?utm_source=rss&utm_medium=rss&utm_campaign=rss">https://www.spreaker.com/podcast/javascript-jabber--6102064/support</a>.

Aplikace Youradio Talk

JSJ 418: Security Scary Stories and How to Avoid Them with Kevin A McGrail

Poslechněte si podcast