From Black Hat to Bug Bounties [Pt. 2] with Thomas DeVoss

From Black Hat to Bug Bounties [Pt. 2] with Thomas DeVoss

We’re joined again by the hacker’s hacker, Tommy DeVoss, aka dawgyg. Bug bounty hunter and reformed black hat, Tommy dives back into a great conversation with us about his journey in hacking and his advice to future red team offensive hackers. We cover everything we couldn’t get to from part 1 of our interview, including his struggles with burnout, his past hacking foreign countries on a bold quest to stop terrorism, and his future in Twitch streaming to teach you how to be a better bug bounty hunter.

Timecoded Guide:

[02:57] Fixating on hacking because of the endless possibilities and iterations to learn

[09:54] Giving advice to the next generation of hackers

[17:17] Contacting Tommy and keeping up with him on Twitter

[21:43] Planning a Twitch course to teach hackers about bug bounties using real bugs and real-world examples

[24:57] Hacking in the early 2000s and understanding the freedom Tommy has to talk about any and all illegal hacking he’s done now that he’s gone to prison

Sponsor Links:

Thank you to our sponsors Axonius and PlexTrac for bringing this season of HVR to life!

Life is complex. But it’s not about avoiding challenges or fearing failure. Just ask Simone Biles — the greatest gymnast of all time. Want to learn more about how Simone controls complexity? Watch her video at axonius.com/simone

PlexTrac is pleased to offer an exclusivecRed Team Content Bundle for Hacker Valley listeners. This bundle contains both our "Writing a Killer Penetration Test Report" and "Effective Purple Teaming" white papers in ONE awesome package. Head to PlexTrac.com/HackerValley to learn more about the platform and get your copy today!

Do you ever struggle with burnout when it comes to hacking?

Hacking has maintained Tommy’s interest longer than anything else because of the constant changes in technology and the ever-evolving issues in the online world. However, just because hacking is his passion, doesn’t mean that burnout or frustration never happens. Currently, Tommy is taking more of a break with hacking, letting his current day job and his passion for gaming have a front seat. However, he’s still firmly in the industry, passionately developing learning opportunities for future hackers and answering questions from cyber professionals of all backgrounds.

“I do get burned out sometimes…When it comes to bug bounty hunting, I try and make it so it averages out to where I make at least $1,000 an hour for my effort. It doesn't always work. Sometimes I'm more, sometimes I'm less, but I try and get it so it averages out to about that.”

What hacking advice would you give the younger version of yourself?

Although his black hat ways resulted in prison time for Tommy, he doesn’t regret his past and instead seeks to teach others the lessons he’s learned. When we asked Tommy for advice for new hackers, he was clear that success is a longer journey than people assume it is. Tommy’s success was not a fluke, it took years of hands-on learning and patience with failures in order to develop his bug bounty skills. Nothing is actually automatic or easy with hacking, especially as the technology continues to change and evolve. Tommy wants hackers to take every opportunity to try out their skills, even if it's a complete failure.

“Don't expect success overnight. Also, don't let failure discourage you. When it comes to hacking, you're going to fail significantly more than you're going to succeed. And the people that are successful in bug bounties are the ones that don't let those failures discourage them.”

What do you think about the “media obsessed” stereotype many people have about black hat hackers?

Wrapping up today, Tommy tells us that he’d be happy to be back in the Hacker Valley Studio again some time. Although the stereotype of a black hat hacker wanting attention from the media is disproven, Tommy believes that he definitely has craved that media attention for a large majority of his hacking career. Starting in the early 2000s, after 9/11, Tommy had one of his first brushes with fame in an interview with CNN about hacking Middle Eastern companies. Although his hacking and his politics have changed since then, Tommy enjoys having in-depth conversations about hacking and explaining the intricacies of what he does.

“We loved the attention back then, and I still love the attention now, it's nice. The good thing about now is, because I already got in trouble for everything that I've done, I've done my prison time, I don't have anything that I did illegally on the computer anymore that I can't talk about, because I've already paid my debt to society.”

What are the best ways for people to keep up with what you’re doing?

Considering Tommy’s success, it’s understandable that a lot of cyber professionals and amateurs have tons of questions for him. When it comes to getting in contact with Tommy, he recommends tweeting him on Twitter publicly so that he can not only answer your question, but help others with the exact same questions. Education is key, and Tommy is so dedicated to teaching other hackers that he’s currently developing a recurring Twitch stream centered around helping others learn about bug bounty hunting.

“I don't know how successful we're going to be in finding the bugs, but I think it'll be fun to teach people [on Twitch] and do it that way, so that they can actually spend some time learning it. The best way to actually learn this stuff is to actually try and do the hacking.”

-----------

Links:

Stay in touch with Thomas DeVoss on LinkedIn and Twitter.

Check out the Bug Bounty Hunter website.

Keep up with Hacker Valley on our website, LinkedIn, Instagram, and Twitter.

Follow Ron Eddings on Twitter and LinkedIn

Catch up with Chris Cochran on Twitter and LinkedIn

Purchase a HVS t-shirt at our shop

Continue the conversation by joining our Discord

Jaksot(408)

Episode 168 - Asking the Right Cybersecurity Questions with Ganesh Pai

Episode 168 - Asking the Right Cybersecurity Questions with Ganesh Pai

Hacker Valley's Hosts, Ron and Chris are speaking with Ganesh Pai, the CEO and founder of Uptycs. What is it like to be an entrepreneur in the Cybersecurity field? While learning how Ganesh started Uptycs, learn of the techniques that he uses, such as asking the right questions and using different systems to further understand security software. Key Takeaways: 01:42 Introducing Ganesh Pai.  02:30 Learning Ganesh's Background and his journey in entrepreneurship. 06:20 The Query System.  07:00 What is your professional Superpower? What time was that Evident?  07:1 Understanding the technology, working and interacting with others in the field.  10:45 Proactive and Reactive security.  12:00 How to ask the right questions.  14:10 Where does artificial intelligence play a part in Cyber Security. 19:00 Challenges Ganesh has faced in the workplace during COVID and the challenges and changes it poses. 20:20 Adapting to the evolving businesses and communities in a changing environment.  24:00 Helpful Habits  27:11 Last Advice Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Ganesh Pai: LinkedIn | Uptycs Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon This episode is sponsored by Uptycs

9 Syys 202130min

Episode 167 - Fun Versus ”FUD” Security with Ashley Rose

Episode 167 - Fun Versus ”FUD” Security with Ashley Rose

In today's episode Ron and Chris talk to Living Security's CEO and Co-Founder Ashley Rose, speaking on breaking the mold in the workspace and how allowing your team to have fun with what they do will create a stronger, happier and healthier work environment. Tune in to find out why, and also to get a better understanding of why Living Security is a must-have resource.    01:10 Listeners are introduced to the topic of today's episode 02:10 We meet Ashley Rose and discover her role in cybersecurity 04:30 Ashley's background before cybersecurity  08:45 How she incorporated fun into training in the workplace  16:37 Training based off of an individual's unique learning technique 19:52 How the brain activity reacts when having fun, and why that matters 24:00 Interactive learning styles to keep someone captivated 27:52 Ashley speaks on what inspires her and her team to maintain a fun, healthy and inclusive environment for everyone 32:28 Discussing how to get out of the FUD: Fear, Uncertainty, and Doubt and to genuinely enjoy what you do.    Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Ashley Rose:  livingsecurity.com | LinkedIn | Twitter Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon This episode is sponsored by livingsecurity.com

7 Syys 202135min

Episode 166 - There is No Skills Gap with Andy Ellis

Episode 166 - There is No Skills Gap with Andy Ellis

Hosts Ron and Chris interview Andy Ellis, CISO for over two decades that recently started a startup. He is an operating partner at YL Ventures. Andy shares his perspective on whether there is really a skills gap or are we approaching this problem the wrong way?   0:57 – Intro  2:19 – Bio 3:12 – Andy’s personality that puts him in unique situations to win awards  4:29 – What other kind of things Andy experienced hacking in besides macro things 5:57 – The number one hack Andy did that spanned for a decade in his career 7:13 – Was Andy originally hired to do security for companies? 8:29 – Why Andy says there is no talent shortage 12:11 – If everyone started to go into security engineering team, would there be a gap to fill roles? 13:09 – Where did CISOS, managers, and recruiters go wrong in looking for security professionals? 19:55 – Andy’s number one tenet for leadership 22:42 –Andy’s philosophies on keeping the talent after investing on training programs, and having skills that can be used on other areas 24:49 – In what ways Andy is passing down knowledge 27:14 – Advice on the leadership journey that Andy gives to listeners 28::10 – Best ways to keep up with Andy   Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Follow Andy Ellis Twitter | LinkedIn Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon Visit our sponsor Panther Labs

31 Elo 202129min

Episode 165 - Living Your Values with Dean Sysman

Episode 165 - Living Your Values with Dean Sysman

On this episode, Hacker Valley Studio has a very big announcement! Hosts Ron and Chris interview guest Dean Sysman, CEO and co-founder of Axonius.  The values, and founder story of Dean are shared as Ron and Chris ask him very interesting questions. Dean started his journey years ago with a passion on how technology could impact the world. He has also brought many values to Axonius, helping people through growth to become a better version of themselves. Dean shares how he figured that the determining factor of success was realizing the problem that the organization needs to solve, and focusing on the customer’s experience.   0:21 – Intro  1:53 – Bio 3:24 – Ron and Chris talk about their role in Axonius and Dean Sysman shares the value he saw in them 7:26 – Dean’s founder story in Axonius 13:01 – The values that Dean has brought to Axonius and people’s lives 16:42 – Dean’s turning point where he could no longer go back from where he was 23:31 – Why Dean wants Ron and Chris to be the voice of Axonius 26:01 – Who are Dean’s inspiration for growth? 29:38 – What advice does Dean have to those that are looking for growth? 31:42 – How to stay up-to-date with Dean and all the great things at Axonius   Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Dean Sysman: Axonius Website | E-mail  Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon

26 Elo 202132min

Episode 164 - Demystifying Product Innovation with Erik Goldman

Episode 164 - Demystifying Product Innovation with Erik Goldman

Hosts Ron and Chris interview guest Erik Goldman, VP of Product at Panther Labs, a software engineer, expert in product and an entrepreneur.  Erik is great at asking questions, that is one of his superpowers. One of his strategies to build a product is to sit down with customers, ask them what they want him to do, deeply understand their persona, and gather data. Erik builds his thesis for success, and knows how to distinguish a good company from a great company by analyzing which one has a philosophy that goes beyond the software. Erik offers advice for listeners on how to operate better on their company.   1:03 - Intro 2:37 – Bio 6:18 – The difference between building a product and building a business 7:18 – What are Erik’s strengths based on his past experiences 9:20 – How Erik stays away from tinkering with the code, and more of the technical aspects 11:48 – Erik’s power of understanding the concepts by asking questions 13:19 – The difference between a good company and a great company 15:20 – What Erik thinks about the future of technology and the cyber security of the future 19:30 – Erik’s thoughts about automating security operation 26:07 – Erik’s advice for listeners to operate better in their company’s environment 27:50 – How to stay up to date with Panther Labs.   Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Erik Goldman: Panther Website Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon Visit our sponsor Panther Labs

24 Elo 202128min

Episode 163 - A Blueprint for Learning Cyber with Keith Wilson

Episode 163 - A Blueprint for Learning Cyber with Keith Wilson

Hosts Ron and Chris interview guest Keith Wilson, director of cyber security education at Attack IQ Academy. Keith is the perfect example on how to take years of experience in engineering and analysis, and turn it into something that is impactful for all people. Keith has created educational content for people in the industry and different types of learners. His trajectory is filled with success stories, and also invites people who want to get into cyber security.    1:11 - Intro 3:03 – Bio 6:13 – How Keith’s fascination with education started 9:09 – Blueprint for education: concepts, the structure of classes, and activities 12:33 – The approach to different types of learners  15:21 – Discussion about students who want to get into cyber security or transition into another aspect of it 16:51 – Keith’s creative process for building new content and sharing information 20:51 – Success story of when education is done right 22:41 – Advice to listeners about putting out educational content  24:16 – How to stay up to date with Keith and Attack Academy IQ   Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Keith C. Wilson: LinkedIn | Instagram | Twitter | Attack IQ Academy  Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon Visit our friends and sponsor Panther Labs.

17 Elo 202125min

Episode 162 - Security in Space with Frank Pound

Episode 162 - Security in Space with Frank Pound

What do you call cyberspace in space? What is the evolution of cyber security in space? The expert Frank Pound, computer scientist, entrepreneur, founder and president of Astro Sec is the guest to clarify all things related to cyberspace. Space traffic control is discussed. Frank advised the Air Force, Space Force, and their contractors to help build the Hack-A-Sat competition which attracted teams from around the world to demonstrate their prowess in this blended space and cyber competition challenging them in everything from orbital dynamics to radio communications.   1:00 – Intro  2:10 – Bio Frank Pound 11:10 - Frank Pound talks about the democratization of technology  12:03 – The explosion of IOTs on the market, sensors, and rapid advancements on space launch  12:54 – The open-source hardware movement 18:04 – General excitement about space in 2019 and investment in safety 20:56 – Potential for a cascading effect making space travel impossible  23:37 – Frank Pound talks about safety measures 24:50 – A summary of Hack-A-Sat’s latest works 27:22 – Alternatives to cyber security and safety in space  37:00 – Frank answers the question on how to do missions in space 40:16 – How to find out more about Frank Pound and Hack-A-Sat’s competition, interviews and resources    Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Frank Pound: Twitter | Website Support Hacker Valley Studio on Patreon Join our monthly mastermind group via Patreon Visit our friends and sponsor Panther Labs

10 Elo 202141min

QuickQ: What is Social Networking? Hacker Summer Camp FOMO

QuickQ: What is Social Networking? Hacker Summer Camp FOMO

In this episode of Hacker Valley, Chris and Ron tackle a quick question. The question of the day is, “what is social networking?” Together they discuss different aspects of social media and how it facilitates connections and careers. Ron’s perspective is that social networking empowers folks to find like minded people, learn new things, self advocate and learn about others. Chris shares how social networking on LinkedIn put him in a position to build a community in cybersecurity. Timecodes 01:53 - The difference between networking and social networking and polishing profiles. 04:00 - How Ron engages with social networking mindfully. 06:30 - How LinkedIn helped Chris and Ron find their community. 08:46 - How social networks can elevate cybersecurity practitioners, researchers and businesses. 10:00 - Threat intelligence, open source intelligence and finding family on social networks 13:00 - Perspectives on the future of social networks and digital interaction. 15:45 - Making the most of social networks   Links Hacker Valley Studio: Swag | LinkedIn | Twitter | Instagram | Email Ron & Chris | Website Support Hacker Valley Studio on Patreon. Join our monthly mastermind group via Patreon

8 Elo 202117min

Suosittua kategoriassa Koulutus

rss-murhan-anatomia
voi-hyvin-meditaatiot-2
psykopodiaa-podcast
psykologia
adhd-podi
rss-duodecim-lehti
rss-valo-minussa-2
rss-niinku-asia-on
rss-vapaudu-voimaasi
kesken
jari-sarasvuo-podcast
rss-ai-mita-siskopodcast
aamukahvilla
rss-luonnollinen-synnytys-podcast
rss-narsisti
rahapuhetta
rss-koira-haudattuna
rss-arkea-ja-aurinkoa-podcast-espanjasta
rss-rouva-keto
ensihoidon-ja-pelastustyoncast