loader from loading.io

SPECIAL INTERVIEW: John Aron and Jerod Brennen

BrakeSec Education Podcast

Release Date: 02/10/2023

Tanya Janca Talks secure coding, Semgrep Academy, and community building, and more! show art Tanya Janca Talks secure coding, Semgrep Academy, and community building, and more!

BrakeSec Education Podcast

Check out the BrakeSecEd Twitch at https://twitch.tv/brakesec Join the Discord! https://discord.gg/brakesec #youtube VOD (in 1440p):   Questions and topics: Bsides Vancouver discussion Semgrep Community and Academy Building communities What are ‘secure guardrails’ Reducing barriers between security and developers How to sell security to devs: “hey, if you want to see us less, buy/use this?” “Security is your barrier, but we have goals that we can’t reach without your help.” https://wehackpurple.com/devsecops-worst-practices-artificial-gates/  How are you seeing things...

info_outline
Josh Grossman - building Appsec programs, bridging security and developer gaps show art Josh Grossman - building Appsec programs, bridging security and developer gaps

BrakeSec Education Podcast

Youtube VOD:   #appsec, #owasp, #ASVS, #joshGrossman, #informationsecurity, #SBOM, #supplychain, #podcast, #twitch, #brakesec, #securecoding, #Codeanalysis Questions and topics: 1. The background to the topic, why is it something that interests you? How do you convince developers to take your course? 2. What do you think the root cause of the gap is? 3. Who is causing the gaps? (‘go fast’ culture, overzealous security, GRC requirements, basically everyone?) 4. Where do gaps begin? Is it the ‘need’ to ‘move fast’? 5. What can devs do to involve security in their process?...

info_outline
Managing messaging with management, becoming a CISO with Mary Gardner from Goldiknox show art Managing messaging with management, becoming a CISO with Mary Gardner from Goldiknox

BrakeSec Education Podcast

Disclaimer: The views, information, or opinions expressed on this program are solely the views of the individuals involved and by no means represent absolute facts. Opinions expressed by the host and guests can change at any time based on new information and experiences and do not represent views of past, present, or future employers.   Recorded: 08 Apr 2024 Youtube VOD: https://www.youtube.com/watch?v=K8qApvsFtqw   Show Topic Summary: If you want to get in the mind of a board member, I submit to you my discussion with we did last night on . Join Mary and I as we discuss...

info_outline
p2-accidentalCISO, building trust in new places show art p2-accidentalCISO, building trust in new places

BrakeSec Education Podcast

  Full Youtube VOD:       Questions and topics: Let’s talk about Mindful Business Podcast What’s the topics you cover? Topic #1: discuss your experiences when you were a new leader.  What worked? What didn't? What would you have done differently? Do you emulate your manager's style? What have been your go-to management resources?  What is a good piece of advice that you’ve been given or that you impart to others that relates to leadership? Topic #2: building/Operating SaaS products (we can discuss securing them, what functions...

info_outline
AccidentalCISO on BrakeSecEd, talking Leadership, SaaS development, and Appsec show art AccidentalCISO on BrakeSecEd, talking Leadership, SaaS development, and Appsec

BrakeSec Education Podcast

Disclaimer: The views, information, or opinions expressed on this program are solely the views of the individuals involved and by no means represent absolute facts. Opinions expressed by the host and guests can change at any time based on new information, and do not represent views of past, present, or future employers.   Recorded: 28 Jan 2024 Youtube VOD: https://youtube.com/live/uX7odQTBkyQ Questions and topics: Let’s talk about Mindful Business Podcast What’s the topics you cover? Topic #1: discuss your experiences when you were a new leader.  What...

info_outline
1st show of 2024! Our 10th Anniversary... show art 1st show of 2024! Our 10th Anniversary...

BrakeSec Education Podcast

It's our 10th anniversary and the first show of our 2024 season! Amanda was on "7 minute security"   Check out the complete VOD at Explicit language warning    

info_outline
Brakesec Call to Action 2023 show art Brakesec Call to Action 2023

BrakeSec Education Podcast

Youtube Video:      is the link to the survey. Your information (should you choose to identify yourself) will not be shared outside of the BrakeSec Team. Thank all of you for listening and for your input. RSS feed for the audio podcast is at   website:  

info_outline
How to get more headcount, BLUFFs Vulnerability, and Ranty Clause debuts! show art How to get more headcount, BLUFFs Vulnerability, and Ranty Clause debuts!

BrakeSec Education Podcast

Show Topic Summary: Ms. Berlin proposes a question of how to gather more headcount with metrics, we discuss the BLUFFS bluetooth vulnerability, and “Ranty Claus” talks about CISA’s remarks of putting the onus on device product makers to remove choice for customers and implement secure defaults. #youtube VOD:   Questions and topics: Additional information / pertinent LInks (Would you like to know more?):   Examples of companies forcing changes    - eBPF implementation in Rust      Show points of Contact: Amanda...

info_outline
25Oct - okta breached (again), Energy company hit by supply chain attack, and you can help hire the best people show art 25Oct - okta breached (again), Energy company hit by supply chain attack, and you can help hire the best people

BrakeSec Education Podcast

Subscribe on Twitch using Amazon Prime and watch us live: https://twitch.tv/brakesec Check out our VODs on Youtube:   Join the BrakeSecEd discord:     News:  

info_outline
Nicole Sundin - CPO at Axio - SEC compliance, usable security, setting up risk mgmt programs show art Nicole Sundin - CPO at Axio - SEC compliance, usable security, setting up risk mgmt programs

BrakeSec Education Podcast

Disclaimer: The views, information, or opinions expressed on this program are solely the views of the individuals involved and by no means represent absolute facts. Opinions expressed by the host and guests can change at any time, and do not represent views of past, present, or future employers.   Guest Bio: Nicole is the Chief Product Officer at Axio. Nicole has spent her career building awareness around the benefits of usable security and human-centered security as a way to increase company revenue and create a seamless user experience.  Youtube VOD Link:  Questions and...

info_outline
 
More Episodes

BrakeSec Show Outline (all links valid as of 27 Jan 2023, subject to change)

 

Is it scheduled? 

Yes || No|| Completed

 

Date: 

2023/01/26

 

Guest info

Name and Title:

John Aron, Founder/CEO of Aronetics

Email:

[email protected]

Time Zone (if other than Pacific):

Eastern Standard

 

Guest info

Name and Title:

Jerod Brennen

Email:

[email protected]

Time Zone (if other than Pacific):

EST

 

Show Topic Summary (less than 300 words)

Clear the fog of marketing truths and viable solutions that actually deter and defend adversarial action.

 

Questions and potential sub-topics (5 minimum):

  1. Edge devices everywhere

  1. A paradigm culture shift is necessary

  1. How/What kind of culture shift is needed? 

  1. In 2007, Steve Jobs unveiled the iPhone with no mention of how to keep it safe

  1. While DARPA that created GPS, shares a sorry - not sorry

      4. Working from Home or the office, how can you guarantee security with travel between both?

  1. This type of computing isn’t possible in government circles.

5. The New York Times 2019 Fall Special - So the internet didn’t turn out the way we hoped.

  1. How can we restore sanity and normalcy to using a computer when there is a persistent threat everywhere? 

  2. Who is under ‘persistent threat’? 

6. Jerod: decentralization of technologies and empowering makers and people 

 

Additional information / pertinent Links (would you like to know more?):

Even Nobodies Have Fans Now. (For Better or Worse.) - The New York Times.pdf(local copy)

(local copy defeats paywall)

)

So the Internet Didn’t Turn Out the Way We Hoped. Now What_ - The New York Times.pdf (local copy defeats paywall)

https://identity.foundation/ 

https://www.scmp.com/news/china/science/article/3206384/chinese-scientists-claims-new-quantum-code-breaking-algorithm-raise-eyebrows-us 

https://www.amazon.com/Fourth-Turning-American-Prophecy-Rendezvous/dp/0767900464  

https://www.investopedia.com/tech/what-dao/ 

https://www.jimcollins.com/books.html (“good to great”, and “Built to Last” were called out)

https://www.amazon.com/Tyranny-Twenty-Lessons-Twentieth-Century/dp/0804190119 

John’s Bsides San Diego slides: https://www.aronetics.com/wp-content/uploads/2023/01/Losing-Control-Aronetics-6-Oct-2022-FIN.pdf 

John’s WiCys talk slides: Pending - 

Sidechannel (Fractional CISO organization) https://sidechannel.com/ (Jerod’s organization)

https://www.aronetics.com/ - (John’s company)



Show Points of Contact:

Amanda Berlin: @infosystir @hackershealth 

Brian Boettcher: @boettcherpwned

Bryan Brake: @bryanbrake @[email protected]

Website: https://www.brakeingsecurity.com Twitch: https://twitch.tv/brakesec