Security Champions as the Answer to Engineering Hating Security
What happens when engineers transform into security champions? Is this beneficial, and what are the implications of this transformation? Izar reveals his transition from a naysayer to a supporter of s...
1 Aug 202343min
Why Do Engineers Hate Security?
There is a relationship between security professionals and engineers. Explore the possibility of engineers disliking security personnel and how security professionals can improve their relationship wi...
26 Jul 202349min
Security Posture is a Thing
What is security posture? Izar was at a conference in Amsterdam, where he was asked to define security posture and how to measure it. Is security posture qualitative or quantitative, and can it be com...
18 Jul 202344min
Should #AppSec be Part of the Development Team?
The big question is if it's possible to lose the application security team and move all the functions directly into development. What are developers' roles in application security (AppSec), and what ...
10 Jul 202337min
Lack of Reasonable, or Everything That Is Wrong with Security Requirements
How do you determine what constitutes "reasonable security" when evaluating vendors? Is “reasonable” a measure of compliance to a set standard? Is it reasonable to expect mature threat modeling practi...
29 Jun 202334min
We Don't Know What We Don't Know
Certificate pinning is a security measure used in computer networking and something Chris candidly admits to his lack of understanding. Matt and Izar explain certificate pinning, a client-side operati...
20 Jun 202322min
Privacy and the creepiness factor of collecting data
What is privacy, and how does it intersect with security? We are joined by our first guest, Ally O'Leary, a privacy compliance expert. Ally works for a consumer electronics company, ensuring complianc...
12 Jun 202347min
Security Guardrails and Paved Roads
Guard rails and paved roads -- how do they fit together in application security? Guardrails are security tools in the pipeline that help ensure the software doesn't drift too far from established sta...
5 Jun 202342min
