Zach Lanier's guest appearances

Zach Lanier

Security Weekly Podcast Network (Audio)

DEF CON 22 [Materials] Speeches from the Hacker Convention.

Mickey Shkatov

David Kennedy

Patrick Wardle

Keren Elazari

Jesse Michael

Dan Kaminsky

Chris Hadnagy

Kevin Mitnick

Chris Domas

Bruce Schneier

Michael Ossmann

Janet Jackson

Dustin Hoffman

Danny Trejo

Tanya Janca

OwlTail

Mark Stanislav

The Internet of Fails: Where IoT Has Gone Wrong and How We're Making It Right Mark Stanislav Security Evangelist, Duo Security Zach Lanier Sr. Security Researcher, Duo Security This presentation will dive into research, outcomes, and recommendations regarding information security for the "Internet of Things". Mark and Zach will discuss IoT security failures both from their own research as well as the work of people they admire. Attendees are invited to laugh/cringe at concerning examples of improper access control, a complete lack of transport security, hardcoded-everything, and ways to bypass paying for stuff. Mark and Zach will also discuss the progress that their initiative, BuildItSecure.ly, has made since it was announced this past February at B-Sides San Francisco. Based on their own struggles with approaching smaller technology vendors with bugs and trying to handle coordinated disclosure, Mark and Zach decided to change the process and dialog that was occurring into one that is inclusive, friendly, researcher-centric. They will provide results and key learnings about the establishment of this loose organization of security-minded vendors, partners, and researchers who have decided to focus on improving information security for bootstrapped/crowd-funded IoT products and platforms. If you're a researcher who wants to know more about attacking this space, an IoT vendor trying to refine your security processes, or just a consumer who cares about their own safety and privacy, this talk will provide some great insights to all of those ends. Mark Stanislav is the Security Evangelist for Duo Security. With a career spanning over a decade, Mark has worked within small business, academia, startup and corporate environments, primarily focused on Linux architecture, information security, and web application development. He has presented at over 70 events internationally including RSA, ShmooCon, SOURCE Boston, and THOTCON. His security research has been featured on web sites including CSO Online, Security Ledger, and Slashdot. Mark holds a B.S. in Networking &amp; IT Administration and an M.S. in Information Assurance, both from Eastern Michigan University. Mark is currently writing a book titled, "Two-Factor Authentication" (published by IT Governance). Twitter: @markstanislav Web: https://www.duosecurity.com ; http://www.uncompiled.com; http://builditsecure.ly Zach Lanier is a Senior Security Researcher at Duo Security. Though an old net/web/app pen tester type, he has been researching mobile and embedded device security since 2009, ranging from app security, to platform security (especially Android); to device, network, and carrier security. He has presented at various public and private industry conferences, such as BlackHat, DEFCON, INFILTRATE, ShmooCon, RSA, Amazon ZonCon, and more. He is also a co-author of the "Android Hacker's Handbook" (published by Wiley). Twitter: @quine Web: https://www.duosecurity.com ; https://n0where.org ; http://builditsecure.ly

The Internet of Fails: Where IoT Has Gone Wrong and How We're Making It Right Mark Stanislav Security Evangelist, Duo Security Zach Lanier Sr. Security Researcher, Duo Security This presentation will dive into research, outcomes, and recommendations regarding information security for the "Internet of Things". Mark and Zach will discuss IoT security failures both from their own research as well as the work of people they admire. Attendees are invited to laugh/cringe at concerning examples of improper access control, a complete lack of transport security, hardcoded-everything, and ways to bypass paying for stuff. Mark and Zach will also discuss the progress that their initiative, <a href="http://BuildItSecure.ly" rel="nofollow" target="_blank">BuildItSecure.ly</a>, has made since it was announced this past February at B-Sides San Francisco. Based on their own struggles with approaching smaller technology vendors with bugs and trying to handle coordinated disclosure, Mark and Zach decided to change the process and dialog that was occurring into one that is inclusive, friendly, researcher-centric. They will provide results and key learnings about the establishment of this loose organization of security-minded vendors, partners, and researchers who have decided to focus on improving information security for bootstrapped/crowd-funded IoT products and platforms. If you're a researcher who wants to know more about attacking this space, an IoT vendor trying to refine your security processes, or just a consumer who cares about their own safety and privacy, this talk will provide some great insights to all of those ends. Mark Stanislav is the Security Evangelist for Duo Security. With a career spanning over a decade, Mark has worked within small business, academia, startup and corporate environments, primarily focused on Linux architecture, information security, and web application development. He has presented at over 70 events internationally including RSA, ShmooCon, SOURCE Boston, and THOTCON. His security research has been featured on web sites including CSO Online, Security Ledger, and Slashdot. Mark holds a B.S. in Networking &amp; IT Administration and an M.S. in Information Assurance, both from Eastern Michigan University. Mark is currently writing a book titled, "Two-Factor Authentication" (published by IT Governance). Twitter: @markstanislav Web: <a href="https://www.duosecurity.com" rel="nofollow" target="_blank">https://www.duosecurity.com</a> ; <a href="http://www.uncompiled.com" rel="nofollow" target="_blank">http://www.uncompiled.com</a>; <a href="http://builditsecure.ly" rel="nofollow" target="_blank">http://builditsecure.ly</a> Zach Lanier is a Senior Security Researcher at Duo Security. Though an old net/web/app pen tester type, he has been researching mobile and embedded device security since 2009, ranging from app security, to platform security (especially Android); to device, network, and carrier security. He has presented at various public and private industry conferences, such as BlackHat, DEFCON, INFILTRATE, ShmooCon, RSA, Amazon ZonCon, and more. He is also a co-author of the "Android Hacker's Handbook" (published by Wiley). Twitter: @quine Web: <a href="https://www.duosecurity.com" rel="nofollow" target="_blank">https://www.duosecurity.com</a> ; <a href="https://n0where.org" rel="nofollow" target="_blank">https://n0where.org</a> ; <a href="http://builditsecure.ly" rel="nofollow" target="_blank">http://builditsecure.ly</a>

Mark Stanislav & Zach Lanier - The Internet of Fails - Where IoT Has Gone Wrong and How We're Making It Right 

Audio Feeds:  Video Feeds:   Zach Lanier's Awesome Tech Segment - Reverse Engineering Blackberry Playbook Firmware:Episode 289 Show NotesEpisode 289 (mp3)Tune in to Paul's Security Weekly TV, Hack Naked TV, and Hack Naked At Night episodes on our YouTube Channel or our Bliptv channel.

Audio Feeds: <a href="http://securityweekly.com/podcast/psw.xml" rel="nofollow" target="_blank"></a><a href="http://phobos.apple.com/WebObjects/MZStore.woa/wa/viewPodcast?id=91472687" rel="nofollow" target="_blank"> </a>Video Feeds: <a href="http://securityweekly.com/podcast/pswtv.xml " rel="nofollow" target="_blank"></a><a href="http://itunes.apple.com/us/podcast/pauldotcom-hack-naked-tv/id121896233" rel="nofollow" target="_blank"> </a>Zach Lanier's Awesome Tech Segment - Reverse Engineering Blackberry Playbook Firmware:<a href="http://securityweekly.com/wiki/index.php/Episode289" rel="nofollow" target="_blank">Episode 289 Show Notes</a><a href="http://traffic.libsyn.com/pauldotcom/PaulDotCom-289.mp3" rel="nofollow" target="_blank">Episode 289 (mp3)</a>Tune in to Paul's Security Weekly TV, Hack Naked TV, and Hack Naked At Night episodes on our <a href="http://www.youtube.com/securityweekly" rel="nofollow" target="_blank">YouTube Channel </a>or our <a href="http://blip.tv/securityweekly/" rel="nofollow" target="_blank">Bliptv channel.</a>

Zach Lanier, Playbook Hacking - Episode 289 - May 24, 2012