Hacker Valley Studio8 Syys 2022

From Black Hat to Bug Bounties [Pt. 2] with Thomas DeVoss

We’re joined again by the hacker’s hacker, Tommy DeVoss, aka dawgyg. Bug bounty hunter and reformed black hat, Tommy dives back into a great conversation with us about his journey in hacking and his advice to future red team offensive hackers. We cover everything we couldn’t get to from part 1 of our interview, including his struggles with burnout, his past hacking foreign countries on a bold quest to stop terrorism, and his future in Twitch streaming to teach you how to be a better bug bounty hunter.

Timecoded Guide:

[02:57] Fixating on hacking because of the endless possibilities and iterations to learn

[09:54] Giving advice to the next generation of hackers

[17:17] Contacting Tommy and keeping up with him on Twitter

[21:43] Planning a Twitch course to teach hackers about bug bounties using real bugs and real-world examples

[24:57] Hacking in the early 2000s and understanding the freedom Tommy has to talk about any and all illegal hacking he’s done now that he’s gone to prison

Sponsor Links:

Thank you to our sponsors Axonius and PlexTrac for bringing this season of HVR to life!

Life is complex. But it’s not about avoiding challenges or fearing failure. Just ask Simone Biles — the greatest gymnast of all time. Want to learn more about how Simone controls complexity? Watch her video at axonius.com/simone

PlexTrac is pleased to offer an exclusivecRed Team Content Bundle for Hacker Valley listeners. This bundle contains both our "Writing a Killer Penetration Test Report" and "Effective Purple Teaming" white papers in ONE awesome package. Head to PlexTrac.com/HackerValley to learn more about the platform and get your copy today!

Do you ever struggle with burnout when it comes to hacking?

Hacking has maintained Tommy’s interest longer than anything else because of the constant changes in technology and the ever-evolving issues in the online world. However, just because hacking is his passion, doesn’t mean that burnout or frustration never happens. Currently, Tommy is taking more of a break with hacking, letting his current day job and his passion for gaming have a front seat. However, he’s still firmly in the industry, passionately developing learning opportunities for future hackers and answering questions from cyber professionals of all backgrounds.

“I do get burned out sometimes…When it comes to bug bounty hunting, I try and make it so it averages out to where I make at least $1,000 an hour for my effort. It doesn't always work. Sometimes I'm more, sometimes I'm less, but I try and get it so it averages out to about that.”

What hacking advice would you give the younger version of yourself?

Although his black hat ways resulted in prison time for Tommy, he doesn’t regret his past and instead seeks to teach others the lessons he’s learned. When we asked Tommy for advice for new hackers, he was clear that success is a longer journey than people assume it is. Tommy’s success was not a fluke, it took years of hands-on learning and patience with failures in order to develop his bug bounty skills. Nothing is actually automatic or easy with hacking, especially as the technology continues to change and evolve. Tommy wants hackers to take every opportunity to try out their skills, even if it's a complete failure.

“Don't expect success overnight. Also, don't let failure discourage you. When it comes to hacking, you're going to fail significantly more than you're going to succeed. And the people that are successful in bug bounties are the ones that don't let those failures discourage them.”

What do you think about the “media obsessed” stereotype many people have about black hat hackers?

Wrapping up today, Tommy tells us that he’d be happy to be back in the Hacker Valley Studio again some time. Although the stereotype of a black hat hacker wanting attention from the media is disproven, Tommy believes that he definitely has craved that media attention for a large majority of his hacking career. Starting in the early 2000s, after 9/11, Tommy had one of his first brushes with fame in an interview with CNN about hacking Middle Eastern companies. Although his hacking and his politics have changed since then, Tommy enjoys having in-depth conversations about hacking and explaining the intricacies of what he does.

“We loved the attention back then, and I still love the attention now, it's nice. The good thing about now is, because I already got in trouble for everything that I've done, I've done my prison time, I don't have anything that I did illegally on the computer anymore that I can't talk about, because I've already paid my debt to society.”

What are the best ways for people to keep up with what you’re doing?

Considering Tommy’s success, it’s understandable that a lot of cyber professionals and amateurs have tons of questions for him. When it comes to getting in contact with Tommy, he recommends tweeting him on Twitter publicly so that he can not only answer your question, but help others with the exact same questions. Education is key, and Tommy is so dedicated to teaching other hackers that he’s currently developing a recurring Twitch stream centered around helping others learn about bug bounty hunting.

“I don't know how successful we're going to be in finding the bugs, but I think it'll be fun to teach people [on Twitch] and do it that way, so that they can actually spend some time learning it. The best way to actually learn this stuff is to actually try and do the hacking.”

-----------

Links:

Stay in touch with Thomas DeVoss on LinkedIn and Twitter.

Check out the Bug Bounty Hunter website.

Keep up with Hacker Valley on our website, LinkedIn, Instagram, and Twitter.

Follow Ron Eddings on Twitter and LinkedIn

Catch up with Chris Cochran on Twitter and LinkedIn

Purchase a HVS t-shirt at our shop

Continue the conversation by joining our Discord

Kokeile Premiumia

Nauti 14 päivää ilmaiseksi

Tilaa Premium

Jaksot(408)

Episode 192 - Wisdom and Celebrity with Clint Arthur

Today Chris and Ron are joined by Clint Arthur. Clint is an actor, public speaker and mentor to many. He has had the pleasure of meeting some of the most influential people in the world, and has decided to use this to help people all over the world discover their meaning and drive them to self-fulfillment and success. Tune in for experiences, stories and advice from one of the most well-traveled, well-written people they’ve ever met! Key Takeaways: 02:59 Bio and beginnings 06:07 No more Hollywood 09:37 20 books?! 12:57 Finding value, giving value and feeling valued 17:32 John Travolta said fly high. What does that really mean? 20:40 Matchstick secrets 22:54 Impactful moments 33:47 Get in touch Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Clint Arthur: Website | Book Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon This episode is presented to you by our good friends at CrowdStrike. Join the CrowdStrike team here.

14 Joulu 202134min

Episode 191 - Listen as I Fall Out of This Window with Tyler Foley

Sean Tyler Foley is an accomplished film and stage performer and has been acting in film and television since he was 6 years old. He has appeared in productions including Freddy Vs Jason, Door to Door, Carrie, and the musical Ragtime. Tyler is passionate about helping others confidently take the stage and impact an audience with their stories. He is currently the Managing Director of Total Buy-In and author of the #1 best-selling book The Power to Speak Naked. Join Chris, Ron and Tyler for a schooling in presenting yourself and engaging with others. Key Takeaways: 03:06 Bio 04:55 The journey to now; acting to public speaking 11:07 Making safety training engaging 14:38 Re-kindling the story for the listener 18:22 Engaging remotely 22:27 The driest safety subject – fall protection 24:49 Nobody likes getting should on 25:40 Tyler’s book – The Power to Speak Naked 28:24 Getting your story out 32:06 Get in touch Links: Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Tyler Foley: Total Buy In | Book | Website | LinkedIn | IMDb Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon This episode is presented to you by our good friends at CrowdStrike. Join the CrowdStrike team here.

7 Joulu 202134min

Episode 190 - Maintaining a Fuel for Life with Nate Palmer

Nate Palmer is a fitness and nutrition expert, coach, speaker, and writer who believes that being in incredible shape gives a massive advantage in business, focus, and relationships. He also happens to be a dad, husband, and the #1 bestselling author of The Million Dollar Body Method and Passport Fitness. Nate helps business owners and entrepreneurs improve their physique, finances, and family time using fitness and nutrition as force multipliers. Join Chris, Ron and Nate to change the way you approach your mind, body and soul in this episode of Hacker Valley Studio. Key Takeaways: 03:12 Bio 06:34 Controlling your diet and exercise 08:30 Maintaining energy / Chris’ journey in weight management 10:25 Maintaining a fuel for life 13:47 Tactics for exercise and nutrition 16:58 Nutrition and fitness for the mind 22:10 Nutrition and fitness for the soul 26:14 Architecting your day 30:00 Win the morning 31:15 Get in touch with Nate Links: Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Nate Palmer Book | LinkedIn | Twitter | Website Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon This episode is presented to you by our good friends at CrowdStrike. Join the CrowdStrike team here.

30 Marras 202132min

Episode 189 - Head in the Cloud with Maurice Grose Jr.

Maurice Grose Jr. is an experienced Security Engineer with a background in military RF exploitation and detection, Unix/Linux administration and threat mitigation, and hardware/software integration engineering. Join Chris, Ron and Maurice to hear how a career after the military blossomed into a learning, engaging time of constant challenge and inspiration. Key Takeaways: 03:31 Bio 07:29 What does legacy mean? 09:48 The appeal of cyber 12:10 Where do you draw inspiration from? 14:07 Does legacy experience help with cloud systems today? 17:42 A takeaway from Maurice’s military career 21:35 Advice for future leaders, getting kids involved 26:19 Future prediction in technology 27:59 Advice for anyone looking to go for the next step Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Maurice Grose Jr: LinkedIn | Twitter Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon This episode is sponsor by our friends at CrowdStrike. Join the CrowdStrike team here.

23 Marras 202129min

Episode 188 - Making Friends, Spies, and Traitors with James Lawler

James Lawler serves as a national security consultant and is the Senior Partner at MDO Group, which provides Human Intelligence training to the Intelligence Community and the commercial sector focused on WMD, CI, technical and cyber issues. Mr. Lawler is a noted speaker on the Insider Threat in government and industry. Prior to this, Mr. Lawler served for 25 years as a CIA operations officer in various international posts and as Chief of the Counterproliferation Division's Special Activities Unit. Join Chris, Ron and James for a riveting audio journey through stories and experiences from the inside of the C.I.A. Key Takeaways: 03:07 Bio 04:10 Finding a job after school – the CIA comes to campus 05:40 Clandestine Service 09:55 Can you start in two weeks? 12:40 A sociopath within lanes (laws) 14:00 Betraying company over country 17:37 Intensifying friendship development 19:54 Can you betray your country for $1k? 20:52 Why do people turn down a pitch? 27:53 Receiving overwhelming classified information 36:10 Book 40:05 Take away from Mr. Lawler Links Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website James Lawler: Book | Linkedin Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon This episode is sponsor by our friends at CrowdStrike. Join the CrowdStrike team here.

16 Marras 202146min

Episode 187 - Keep Your &#%! Authentic with Samara Williams

Samara Williams is a Manager of Threat Operations at Cardinal Health, focused on proactive action and defense-in-depth improvement. She specializes in threat intelligence, vulnerability management, technical risk communications as well as program design and development. Chris, Ron and Samara go deep into what it takes to be your authentic self, standing strong for what you believe and being aggressive in your thoughts and actions. Key Takeaways: 03:21 Bio 10:00 Ted talk: short, sweet and powerful 17:51 Knowing your superpower – Samara's? Authenticity 21:05 Being aggressive and using mentors & allies 25:26 Mentoring to help the future generation thrive 28:33 Advice for the person scared to be authentic 32:09 Get in touch Links: Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Samara Williams: LInkedIn | Ted Talk | Twitter Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon This episode is sponsored by our friends at CrowdStrike. Join the CrowdStrike team here.

12 Marras 202133min

We Are Here Finale: A Case Study of DEI at CrowdStrike

In the finale of We Are Here, Chris and Ron are joined by Emily Van Norden, branding and DE&I leader, and Nikki Thornton, Chief of Staff, both at CrowdStrike. The group talks about Diversity, equity and inclusion in this jam-packed episode. Emily and Nikki peel a layer off of the CrowdStrike brand to unveil a plethora of tips, tricks, and advice from their experience with people and standing up the DE&I function company-wide. Key Takeaways: 01:56 Bio – Nikki 02:48 Bio – Emily 04:58 The chronology of CrowdStrike 10:12 Standing up the DE&I program 15:44 From adversity comes opportunity 20:21 Executives promoting DE&I 23:23 The deeper meaning of DE&I and why it matters at CrowdStrike 34:25 Advice for new professionals; making allies 37:55 Get in touch Links: Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Emily Van Norden: LinkedIn | Website Nikki Thornton: LinkedIn Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon We Are Here is proudly presented by CrowdStrike. Join the CrowdStrike team here.

11 Marras 202139min

We Are Here Part 3: Allyship and Representation

On this episode of We Are Here, Ron and Chris join Dave Zawdie and Nina Padavil, two members of the team believe, CrowdStrike’s employee resource group for black professionals. The group dives deep into representation and allyship and how we can use the past to change the future for the good of the industry and its people. Key Takeaways: 01:54: Nina – Bio 03:36 David – Bio 05:25 Role models and influencers 11:24 How can the majority help the minority in the future? 14:33 Mentoring and impacting the future 17:38 Setbacks and advice for a discouraged cyber security professional 20:26 Committing to being an ally to another 22:52 The future of DE&I and how we contribute 25:14 Get in touch Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Nina Padavil: LinkedIn Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon We Are Here is proudly presented by CrowdStrike. Join the CrowdStrike team here.

10 Marras 202126min

Kaikki yhdessä sovelluksessa

Kuuntele kaikki suosikkipodcastisi ja -äänikirjasi yhdessä paikassa.

Sinulle valikoitua sisältöä

Podme-sovelluksessa kokoat suosikkisi helposti omaan kirjastoosi. Saat meiltä myös kuuntelusuosituksia!

Jatka kuuntelua koska tahansa

Voit jatkaa siitä mihin jäit, myös offline-tilassa.

Premium

9,99 €/kk

Kaikki premium-podcastit
Ei mainoksia
Ei sitoutumista, peruuta koska tahansa

Aloita 14 päivän kokeilu

Premium

13,99 €/kk

Kaikki premium-podcastit
Ei mainoksia
Ei sitoutumista, peruuta koska tahansa
Yksi lisäkäyttäjä

Kokeile 14 päivää maksutta

Suosittua kategoriassa Koulutus

rss-arkea-ja-aurinkoa-podcast-espanjasta

Tarinat ja äänet, joita rakastat kuunnella

Kuuntele kaikki suosikkipodcastisi ja -äänikirjasi

Lue lisää