Open Source Security Podcast

Search This Blog

Episode 44 - Bug Bounties vs Pen Testing

Posted by Josh Bressers on April 25, 2017

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

Josh and Kurt discuss Lego, bug bounties, pen testing, thought leadership, cars, lemons, entropy, and CVE.

Show Notes

Josh's Blog on Bug Bounties
A Security Market for Lemons

Join our Facebook Group

Comment on Twitter with the #osspodcast hashtag

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

Episode 159 - Disclosing security issues is insanely complicated: Part 1

Josh and Kurt talk about disclosing security flaws. It's a topic that's come up a few times in the last few weeks and it's more complicated than it's ever been. We certainly ask more questions than we answer in this episode, there will be a part 2 that focuses on open source disclosure.

Show NotesLock Picking Lawyer Tavis' Windows flaw
Comment on Twitter with the #osspodcast hashtag

Episode 157 - Backdoors and snake oil in our cryptography

Josh and Kurt talk about snakeoil cryptography at Black Hat and the new backdoored cryptography fight. Both of these problems will be with us for a very long time. These are fights worth fighting because it's the right thing to do.

Show NotesTime AI video Kurt's Tweet about technical explanations Josh's blog post about bug training Schneier on Barr's encryption discussion
Comment on Twitter with the #osspodcast hashtag

Episode 158 - The mess that we call credit agencies in the US

Josh and Kurt talk about the current state of credit security freezes in the US. We recount a thrilling tale of all the things Josh had to do to get new Internet service. It was all quite silly really.

Show NotesWeak security freeze pins 'null' license plate
Comment on Twitter with the #osspodcast hashtag