From Black Hat to Bug Bounties [Pt. 2] with Thomas DeVoss

From Black Hat to Bug Bounties [Pt. 2] with Thomas DeVoss

We’re joined again by the hacker’s hacker, Tommy DeVoss, aka dawgyg. Bug bounty hunter and reformed black hat, Tommy dives back into a great conversation with us about his journey in hacking and his advice to future red team offensive hackers. We cover everything we couldn’t get to from part 1 of our interview, including his struggles with burnout, his past hacking foreign countries on a bold quest to stop terrorism, and his future in Twitch streaming to teach you how to be a better bug bounty hunter.

Timecoded Guide:

[02:57] Fixating on hacking because of the endless possibilities and iterations to learn

[09:54] Giving advice to the next generation of hackers

[17:17] Contacting Tommy and keeping up with him on Twitter

[21:43] Planning a Twitch course to teach hackers about bug bounties using real bugs and real-world examples

[24:57] Hacking in the early 2000s and understanding the freedom Tommy has to talk about any and all illegal hacking he’s done now that he’s gone to prison

Sponsor Links:

Thank you to our sponsors Axonius and PlexTrac for bringing this season of HVR to life!

Life is complex. But it’s not about avoiding challenges or fearing failure. Just ask Simone Biles — the greatest gymnast of all time. Want to learn more about how Simone controls complexity? Watch her video at axonius.com/simone

PlexTrac is pleased to offer an exclusivecRed Team Content Bundle for Hacker Valley listeners. This bundle contains both our "Writing a Killer Penetration Test Report" and "Effective Purple Teaming" white papers in ONE awesome package. Head to PlexTrac.com/HackerValley to learn more about the platform and get your copy today!

Do you ever struggle with burnout when it comes to hacking?

Hacking has maintained Tommy’s interest longer than anything else because of the constant changes in technology and the ever-evolving issues in the online world. However, just because hacking is his passion, doesn’t mean that burnout or frustration never happens. Currently, Tommy is taking more of a break with hacking, letting his current day job and his passion for gaming have a front seat. However, he’s still firmly in the industry, passionately developing learning opportunities for future hackers and answering questions from cyber professionals of all backgrounds.

“I do get burned out sometimes…When it comes to bug bounty hunting, I try and make it so it averages out to where I make at least $1,000 an hour for my effort. It doesn't always work. Sometimes I'm more, sometimes I'm less, but I try and get it so it averages out to about that.”

What hacking advice would you give the younger version of yourself?

Although his black hat ways resulted in prison time for Tommy, he doesn’t regret his past and instead seeks to teach others the lessons he’s learned. When we asked Tommy for advice for new hackers, he was clear that success is a longer journey than people assume it is. Tommy’s success was not a fluke, it took years of hands-on learning and patience with failures in order to develop his bug bounty skills. Nothing is actually automatic or easy with hacking, especially as the technology continues to change and evolve. Tommy wants hackers to take every opportunity to try out their skills, even if it's a complete failure.

“Don't expect success overnight. Also, don't let failure discourage you. When it comes to hacking, you're going to fail significantly more than you're going to succeed. And the people that are successful in bug bounties are the ones that don't let those failures discourage them.”

What do you think about the “media obsessed” stereotype many people have about black hat hackers?

Wrapping up today, Tommy tells us that he’d be happy to be back in the Hacker Valley Studio again some time. Although the stereotype of a black hat hacker wanting attention from the media is disproven, Tommy believes that he definitely has craved that media attention for a large majority of his hacking career. Starting in the early 2000s, after 9/11, Tommy had one of his first brushes with fame in an interview with CNN about hacking Middle Eastern companies. Although his hacking and his politics have changed since then, Tommy enjoys having in-depth conversations about hacking and explaining the intricacies of what he does.

“We loved the attention back then, and I still love the attention now, it's nice. The good thing about now is, because I already got in trouble for everything that I've done, I've done my prison time, I don't have anything that I did illegally on the computer anymore that I can't talk about, because I've already paid my debt to society.”

What are the best ways for people to keep up with what you’re doing?

Considering Tommy’s success, it’s understandable that a lot of cyber professionals and amateurs have tons of questions for him. When it comes to getting in contact with Tommy, he recommends tweeting him on Twitter publicly so that he can not only answer your question, but help others with the exact same questions. Education is key, and Tommy is so dedicated to teaching other hackers that he’s currently developing a recurring Twitch stream centered around helping others learn about bug bounty hunting.

“I don't know how successful we're going to be in finding the bugs, but I think it'll be fun to teach people [on Twitch] and do it that way, so that they can actually spend some time learning it. The best way to actually learn this stuff is to actually try and do the hacking.”

-----------

Links:

Stay in touch with Thomas DeVoss on LinkedIn and Twitter.

Check out the Bug Bounty Hunter website.

Keep up with Hacker Valley on our website, LinkedIn, Instagram, and Twitter.

Follow Ron Eddings on Twitter and LinkedIn

Catch up with Chris Cochran on Twitter and LinkedIn

Purchase a HVS t-shirt at our shop

Continue the conversation by joining our Discord

Jaksot(408)

Episode 152 - Cancelling the Cold Call with Nikki Ivey

Episode 152 - Cancelling the Cold Call with Nikki Ivey

It has been way too long in the making. But it's finally here! We have Hacker Valley merchandise available!  We have shirts, we have hats, we have sweatshirts that you can purchase.  You are in the Hacker Valley Studio with your hosts Ron and Chris. Welcome back to the show.  Today in the studio, we've brought in Nikki Ivey. Nikki is a B2B revenue growth and startup culture leader. She's recognized as a 2020 LinkedIn top voice, and she is the co-founder of SDR Defenders community.  For those that want to get to know Nikki and understand where she come from and what she is up to today, Nikki shares she works with Fortune 500 companies to help them make their outsides match their insides. In short, she helps folks close a gap, so everybody has access to a greater sense of belonging and purpose in the work that they do.   Sadly, Nikki started down this path because she felt she often did not belong or was not often treated like she belonged. Her mom says her first full sentence was, “That's not fair.” She actually studied broadcasting and journalism but then discovered that tech sales was an outlet for all of those things that she cared about. Nikki cares deeply about culture and has experienced so many issues as she has gone through her career.  The one thing she would love to change is people not being the gatekeepers rather be stewards.   Nikki has a lot of advice on “cancelling the cold call” and making connections.  She is full of beautiful ideas to make everyone, from top to bottom in a company feel included, important and connected.   Key Takeaways:   :58 Episode starts with Ron and Chris 1:40 Nikki shares her background 2:55 Bringing people into the fold 5:18 Culture issues 7:57 Nikki’s superpower 10:00 Making connections 14:20 Doubling down 19:09 Being genuine 23:11 Building your brand 26:54 Final piece of advice from Nikki Links: Email Nikki Nikki on LinkedIn Nikki on Instagram Nikki on Twitter Support Hacker Valley Studio on Patreon.  Follow Hacker Valley Studio on Twitter. Follow hosts Ron Eddings and Chris Cochran on Twitter. Get your Hacker Valley Merch here!

29 Kesä 202130min

Episode 151 - Health is Wealth with Alexis Robertson

Episode 151 - Health is Wealth with Alexis Robertson

Today in the studio, we have Alexis Robertson, Director of Diversity and Inclusion at a large law firm and a recovering lawyer.  Alexis kicks in with a bit about herself, and shares “I am director of diversity inclusion at a large law firm but spent the first 10 years or so of my career dedicated to laws, going to law school and practicing as a lawyer for about seven and a half years before leaving legal practice closing in on six years ago, I grew up in the suburbs of Milwaukee, Wisconsin, spent most of my life in the Midwest, except for time spent in DC at American University for undergrad and then I went to the University of Michigan for law school. That's me in a nutshell.” Alexis shares throughout this episode how her health, exercise and food habits all became habit with some very big changes.  It isn’t about getting healthy; it is about a long journey of being healthy.  You will hear a little bit about her food choices and why she made them, the exercises she partakes in, and how she balances it all.     Key Takeaways:   1:27 Welcome 2:23 Alexis shares her background 3:25 Serendipity 5:33 Self-improvement journey 12:41 Healthy mentality with food 17:20 Next steps 21:12 Getting back on track 24:07 Fitness journey 28:16 Looking forward 31:13 Advice to others 33:17 Staying in touch with Alexis   Alexis on LinkedIn Alexis on Instagram The Path & The Practice Podcast Support Hacker Valley Studio on Patreon.  Follow Hacker Valley Studio on Twitter. Follow hosts Ron Eddings and Chris Cochran on Twitter. Learn more about our sponsor ByteChek.

22 Kesä 202134min

Episode 150 - Making a Difference Mindfully with Natasha Barnes

Episode 150 - Making a Difference Mindfully with Natasha Barnes

In this episode, we talk to our special guest, Natasha Barnes. Natasha is the Associate Director and the CEO Action for Racial Equity Fellow of Protiviti. She is a certified mindfulness workplace facilitator and mindfulness-based stress reduction.  Natasha is part of a movement to answer the question of does corporate America have a role to play in advancing racial equity within our nation, and essentially improving our overall societal well-being.  Technology serves as a way to propel the conversation forward, and recognizing global interconnectedness. Listen in for all of Natasha’s insights!   Key Takeaways:   1:02 Welcome back 2:16 Natasha shares her background 3:11 Natasha’s journey through wellness 4:23 Mindfulness purpose 6:28 Instructing others  10:27 Corporate role  10:52 Four pillars 15:06 Her journey 17:24 Creating solutions 19:24 Progress 21:39 Equity through mindfulness and technology 26:48 Impact   Natasha on LinkedIn CEO Action for Diversity & Inclusion Support Hacker Valley Studio on Patreon.  Follow Hacker Valley Studio on Twitter. Follow hosts Ron Eddings and Chris Cochran on Twitter. Sponsored by ByteChek

15 Kesä 202131min

Episode 149  - Permission to Launch with Kelsey Hightower

Episode 149 - Permission to Launch with Kelsey Hightower

In this episode, we've brought in a special guest, Kelsey Hightower.  Kelsey is Principal Engineer at Google, and also co-author of Kubernetes: Up and Running: Dive into the Future of Infrastructure.  To start the show, Kelsey shares he considers himself a self-taught engineer. He started his life out as a small business owner and then moved to a system administrator. Now, he is at Google. Kelsey’s fascination with cyber started post High School. Rather than go to college, he jumped into, tech support, consulting, dropping cat five cable, but about 2004ish he really digs into the world of open source and all the things that you can do with it as a user and as a contributor. When it comes to community and customers, Kelsey felt they were one in the same.  However, in the last five years or so, he has kind of changed that a little bit, thinking everyone is probably in your community. The willing the ones that are willing to pay you money, we call those customers. And then the conversation turns to comedy, and his journey through comedy management and performances.  Along with this comes discussion about acquiring skills.   Finally, Kelsey shares advice to listeners!   Key Takeaways:   1:00 Welcome back 2:18 Kelsey shares his background 3:31 Community and customers 4:40 Professional purpose 6:00 Retirement thoughts 10:31 Journey in comedy 14:35 Getting better 16:28 Propelling forward 20:12 Minimalism 22:18 Immersion journey 25:25 Don’t miss the moment 27:00 Exceeding expectations 37:56 It’s ok to start! 39:25 How to keep up to date with Kelsey Kelsey on Twitter Support Hacker Valley Studio on Patreon.  Follow Hacker Valley Studio on Twitter. Follow hosts Ron Eddings and Chris Cochran on Twitter. Sponsored by Attack IQ Attack IQ Academy

8 Kesä 202140min

Episode 148 - Immersed in Cybersecurity with James Hadley

Episode 148 - Immersed in Cybersecurity with James Hadley

In this episode, have James Hadley, CEO of Immersive Labs, and we talk about the best ways to learn in cybersecurity.  James starts the show with his background and what he is doing today, which is Immersive Labs.  But, he spent a lot of time in different organizations prior to that.   When it came to education, James found he had quite a poor memory, so he would always learn better through doing things rather than reading about things. Things would go in one ear and out the other. In addition to learning styles, they all discuss measuring education.  When it comes to measuring academics, for James it is all about the outcomes you want people to achieve.  They all agree that storytelling is incredibly powerful.  James shares a few of his own drawing back on his incredible journey.  And, of course, they round out the show with how to stay in touch and up to date with James.   Key Takeaways: 1:02 Welcome back 2:24 James’ background 5:06 Education experience 5:46 Changes 7:18 Measuring education 9:14 Balancing in testing 11:40 Biggest a’ha 13:14 Feedback 15:54 Learner vs. learner 17:37 Skill behind catching the bad guys 19:20 Applying knowledge 21:53 Geeks in the basement 23:47 The best job in cyber 26:30 Advice 27:58 How to stay in touch with James   Links: James on Immersive Labs James on LinkedIn Support Hacker Valley Studio on Patreon.  Follow Hacker Valley Studio on Twitter. Follow hosts Ron Eddings and Chris Cochran on Twitter. Learn more about our sponsor ByteChek.

2 Kesä 202129min

Episode 147 - Learning Cybersecurity Until You Get It Right with John Strand

Episode 147 - Learning Cybersecurity Until You Get It Right with John Strand

In this episode, we brought back fan-favorite, John Strand.  He is owner of Black Hills Information Security, a SANS instructor, and a mentor to many in the industry.  Johns starts the show sharing a little bit about his background and what he is doing today. Ron and Chris dive a little bit deeper into John’s earlier life asking what his personal superpower, personal or professional, and when did that power really came about in his life? John shares his experiences with failure, which he feels are key to where he is at today.  How everyone needs to get comfortable with struggles, failures and hardships.  On top of that, one needs to be able to laugh at themself.     Key Takeaways   1:02 Back with fan favorite John Strand 2:21 John shares his background 3:38 John’s superpower 5:51 Going through the grind to learn 8:30 Partnerships 11:44 Getting a head start 14:58 The entertainment factor 16:36 Journey through being an instructor 19:35 Pay what you can concept 25:53 Education systems 29:18 Advice from John   Links: John Strand blog. John Strand on Twitter. Support Hacker Valley Studio on Patreon.  Follow Hacker Valley Studio on Twitter. Follow hosts Ron Eddings and Chris Cochran on Twitter. Learn more about our sponsor ByteChek.

25 Touko 202131min

Hacker Valley Blue Season 2 Finale

Hacker Valley Blue Season 2 Finale

This is the finale of Know Thyself. What an incredible journey, we feel like this entire experience flew by so fast, we got to talk to so many incredible people about knowing yourself, knowing your team, knowing your tech stack, knowing your environment, and even knowing your story. Make your organization better make your security posture better, strive for impact, what are the most high leverage things that you can do today to make everybody's lives easier, or more safe, and then yield the feedback, there might be some things that you might be missing, you might need to ask questions, ask for feedback, get some information from your stakeholders, what what are you thinking about that I might not be thinking about? asking these different things is how you know thyself. And this is how you get to know the people that are around you, your peers, your stakeholders, the more knowledge you have got started with that Sun Tzu quote, in the very beginning of the podcast, if you know yourself and you know your enemy, you need not fear the results of 100 battles. So if you really understand yourself, and you have good threat intelligence, understanding the externals, you have good vulnerability management that understands the externals and the internals, if you mash all that information together, I think you'll be able to do great things with your cybersecurity program.   Key Takeaways 0:02 Introduction to the show 0:49 Our Sponsor, Axonius  2:09 Welcome back 2:31 Reflecting on Know Thyself 3:17 Recap This Seasons Guest 3:22 Marcus Carey 4:17 John Strand 5:05 Aaron Reinhart & Jamie Dixon 5:54 Chaos Engineering 7:12 Lenny Zeltser, asset inventory 7:54 Kevin Allison, Storytelling is a soft skill 10:19 John Strand 12:13 Can we do better? 13:54 What kind of leader are you? 14:26 Do you have unsupported devices? 17:34 Ask yourself these questions 13:33 Go back to the EASY Framework 21:50 Learning 23:29 Exploration 24:00 Immersion 27:28 Reach Hacker Valley   Learn more about Hacker Valley Studio Support Hacker Valley Studio on Patreon Follow Hacker Valley Studio on Twitter Follow Ron Eddings on Twitter Follow Chris Cochran on Twitter Supported by Axonius

18 Touko 202128min

Hacker Valley Blue S2 Episode 7 - Kevin Allison

Hacker Valley Blue S2 Episode 7 - Kevin Allison

In this masterclass of HVB season 2 we brought in a master story teller in Kevin Allison. The biggest thing is to get a person to understand, don't just summarize, don't just walk us through a Wikipedia like where you're just giving us a broad overview. And you're explaining; it’s important to remember sensory details that will help us see almost like movie scenes, what was happening between people. That is what brings the story alive. So that's a good case right there where the bones of the story were incredible. Like that's just on paper and an incredible overview of a story, but it's not going to work unless you can fill in all those sensory details that bring it alive and make it emotional for us. Storytelling is a soft skill that offers the ability to contextualize cybersecurity in a manner that any organization can understand to allow their business to stay safe.   Key Takeaways:   0:00 Previously on the show 2:37 Kevin introduction 3:20 Episode begins 3:39 Where Kevin is today 7:58 Kevin’s origin story 12:04 Cybersecurity is performing 17:08 Storytelling for business 21:00 Engineering a story 26:12 Authentic storytelling 34:54 Speaking isn’t perfect 41:02 Where to find Kevin   The Story Studio RISK!: True Stories People Never Thought They’d Dare To Share RISK! Podcast Twitter Facebook Instagram Risk Show Podcast Learn more about Hacker Valley Studio Support Hacker Valley Studio on Patreon Follow Hacker Valley Studio on Twitter Follow Ron Eddings on Twitter Follow Chris Cochran on Twitter Sponsored by Axonius

18 Touko 202142min

Suosittua kategoriassa Koulutus

rss-murhan-anatomia
voi-hyvin-meditaatiot-2
psykopodiaa-podcast
psykologia
rss-duodecim-lehti
adhd-podi
rss-valo-minussa-2
rss-niinku-asia-on
rss-vapaudu-voimaasi
kesken
jari-sarasvuo-podcast
rss-ai-mita-siskopodcast
rss-luonnollinen-synnytys-podcast
rss-narsisti
rss-arkea-ja-aurinkoa-podcast-espanjasta
rahapuhetta
aamukahvilla
rss-uskonto-on-tylsaa
rss-koira-haudattuna
rss-rouva-keto