Mark Stanislav's guest appearances

Mark Stanislav

IT in the D

DEF CON 22 [Materials] Speeches from the Hacker Convention.

Shared Secrets

Matthew Green

Jacob Wilson

Michael Ossmann

Dustin Hoffman

Patrick Wardle

ERIC SMITH

David Kennedy

Josh Datko

Joe FitzPatrick

Andrew Hunt

Kevin Mitnick

Greg Anderson

Joe Grand

Chris Hadnagy

Ben Jacobs

OwlTail

Den and Kev can’t resist arguing over whether or not there is any computer security lessons to be learned from chess. Then Kev drops this week’s secret, “Don’t shift left!” in your secure software development life cycles. Then on a very special Throwback episode MFA/IoT/Product Security Rockstar Mark Stanislav gives us a first-hand peak into the seedy 90’s world of IRC software piracy.(Intro and Outro theme "Sun Rice" by Adubter, CCL: http\s://creativecommons.org/licenses/by-nc-sa/3.0/(Intro and Outro theme "Sun Rice" by Adubter, CCL: https://creativecommons.org/licenses/by-nc-sa/3.0/)

Den and Kev can’t resist arguing over whether or not there is any computer security lessons to be learned from chess. Then Kev drops this week’s secret, “Don’t shift left!” in your secure software development life cycles. Then on a very special Throwback episode MFA/IoT/Product Security Rockstar Mark Stanislav gives us a first-hand peak into the seedy 90’s world of IRC software piracy.(Intro and Outro theme "Sun Rice" by Adubter, CCL: http\s://<a href="http://creativecommons.org/licenses/by-nc-sa/3.0/(Intro" rel="nofollow" target="_blank">creativecommons.org/licenses/by-nc-sa/3.0/(Intro</a> and Outro theme "Sun Rice" by Adubter, CCL: <a href="https://creativecommons.org/licenses/by-nc-sa/3.0/" rel="nofollow" target="_blank">https://creativecommons.org/licenses/by-nc-sa/3.0/</a>)

Episode6: Don't shift left! (Throwback with Mark Stanislav).

Zach Lanier

The Internet of Fails: Where IoT Has Gone Wrong and How We're Making It Right Mark Stanislav Security Evangelist, Duo Security Zach Lanier Sr. Security Researcher, Duo Security This presentation will dive into research, outcomes, and recommendations regarding information security for the "Internet of Things". Mark and Zach will discuss IoT security failures both from their own research as well as the work of people they admire. Attendees are invited to laugh/cringe at concerning examples of improper access control, a complete lack of transport security, hardcoded-everything, and ways to bypass paying for stuff. Mark and Zach will also discuss the progress that their initiative, BuildItSecure.ly, has made since it was announced this past February at B-Sides San Francisco. Based on their own struggles with approaching smaller technology vendors with bugs and trying to handle coordinated disclosure, Mark and Zach decided to change the process and dialog that was occurring into one that is inclusive, friendly, researcher-centric. They will provide results and key learnings about the establishment of this loose organization of security-minded vendors, partners, and researchers who have decided to focus on improving information security for bootstrapped/crowd-funded IoT products and platforms. If you're a researcher who wants to know more about attacking this space, an IoT vendor trying to refine your security processes, or just a consumer who cares about their own safety and privacy, this talk will provide some great insights to all of those ends. Mark Stanislav is the Security Evangelist for Duo Security. With a career spanning over a decade, Mark has worked within small business, academia, startup and corporate environments, primarily focused on Linux architecture, information security, and web application development. He has presented at over 70 events internationally including RSA, ShmooCon, SOURCE Boston, and THOTCON. His security research has been featured on web sites including CSO Online, Security Ledger, and Slashdot. Mark holds a B.S. in Networking &amp; IT Administration and an M.S. in Information Assurance, both from Eastern Michigan University. Mark is currently writing a book titled, "Two-Factor Authentication" (published by IT Governance). Twitter: @markstanislav Web: https://www.duosecurity.com ; http://www.uncompiled.com; http://builditsecure.ly Zach Lanier is a Senior Security Researcher at Duo Security. Though an old net/web/app pen tester type, he has been researching mobile and embedded device security since 2009, ranging from app security, to platform security (especially Android); to device, network, and carrier security. He has presented at various public and private industry conferences, such as BlackHat, DEFCON, INFILTRATE, ShmooCon, RSA, Amazon ZonCon, and more. He is also a co-author of the "Android Hacker's Handbook" (published by Wiley). Twitter: @quine Web: https://www.duosecurity.com ; https://n0where.org ; http://builditsecure.ly

The Internet of Fails: Where IoT Has Gone Wrong and How We're Making It Right Mark Stanislav Security Evangelist, Duo Security Zach Lanier Sr. Security Researcher, Duo Security This presentation will dive into research, outcomes, and recommendations regarding information security for the "Internet of Things". Mark and Zach will discuss IoT security failures both from their own research as well as the work of people they admire. Attendees are invited to laugh/cringe at concerning examples of improper access control, a complete lack of transport security, hardcoded-everything, and ways to bypass paying for stuff. Mark and Zach will also discuss the progress that their initiative, <a href="http://BuildItSecure.ly" rel="nofollow" target="_blank">BuildItSecure.ly</a>, has made since it was announced this past February at B-Sides San Francisco. Based on their own struggles with approaching smaller technology vendors with bugs and trying to handle coordinated disclosure, Mark and Zach decided to change the process and dialog that was occurring into one that is inclusive, friendly, researcher-centric. They will provide results and key learnings about the establishment of this loose organization of security-minded vendors, partners, and researchers who have decided to focus on improving information security for bootstrapped/crowd-funded IoT products and platforms. If you're a researcher who wants to know more about attacking this space, an IoT vendor trying to refine your security processes, or just a consumer who cares about their own safety and privacy, this talk will provide some great insights to all of those ends. Mark Stanislav is the Security Evangelist for Duo Security. With a career spanning over a decade, Mark has worked within small business, academia, startup and corporate environments, primarily focused on Linux architecture, information security, and web application development. He has presented at over 70 events internationally including RSA, ShmooCon, SOURCE Boston, and THOTCON. His security research has been featured on web sites including CSO Online, Security Ledger, and Slashdot. Mark holds a B.S. in Networking &amp; IT Administration and an M.S. in Information Assurance, both from Eastern Michigan University. Mark is currently writing a book titled, "Two-Factor Authentication" (published by IT Governance). Twitter: @markstanislav Web: <a href="https://www.duosecurity.com" rel="nofollow" target="_blank">https://www.duosecurity.com</a> ; <a href="http://www.uncompiled.com" rel="nofollow" target="_blank">http://www.uncompiled.com</a>; <a href="http://builditsecure.ly" rel="nofollow" target="_blank">http://builditsecure.ly</a> Zach Lanier is a Senior Security Researcher at Duo Security. Though an old net/web/app pen tester type, he has been researching mobile and embedded device security since 2009, ranging from app security, to platform security (especially Android); to device, network, and carrier security. He has presented at various public and private industry conferences, such as BlackHat, DEFCON, INFILTRATE, ShmooCon, RSA, Amazon ZonCon, and more. He is also a co-author of the "Android Hacker's Handbook" (published by Wiley). Twitter: @quine Web: <a href="https://www.duosecurity.com" rel="nofollow" target="_blank">https://www.duosecurity.com</a> ; <a href="https://n0where.org" rel="nofollow" target="_blank">https://n0where.org</a> ; <a href="http://builditsecure.ly" rel="nofollow" target="_blank">http://builditsecure.ly</a>

Mark Stanislav & Zach Lanier - The Internet of Fails - Where IoT Has Gone Wrong and How We're Making It Right 