In this episode, we talk with Maksymilian Arciemowicz, security research    

that has found bugs in a large chunk of systems, active in the security field   

since 2005. He is the founder and maintainer of cxsecurity which is a website   

that index and host security vulnerabilities for everyone.   

Cxsecurity is home to a lot of exploits and security research, in this episode   

we get to hear the story of how it got created by its founder Maksymilian!   

One of these types of communities is a mailing list called bugtraq.   

Maksymilian learned how to find security bugs thanks to that mailing list and  

soon after finding his first couple of bugs he teamed up with a friend to start a    

website called *securityreason.com*. SecurityReason took the security research from the mailing list   

and displayed it in a nice web interface.   

The two founders wanted to go different ways, Maksymilian wanted the research to stay open and not    

commercialize on it.   

The website got shutdown and Maksymilian forked it into a new better version called cxsecurity.com!

In nature, the power lays in the entity with the most muscles but on    

the internet, the power is in the person with the most knowledge, the power comes  

from the intellect. Whoever comes up with new ideas and is able to prove it wins    

the intellectual battle, Maksymilian explains.   

Since 2005 Maksymilian has been able to find security holes in:  

* IPFilter in openbsd, which was used before they switched to   

* Freebsd      

* Magento   

* Mac osx    

* phpmyadmin    

* PHP       

* NetBSD        

* Vsftpd       

* apache      

* Solaris        

* Thunderbird       

* Opera         

* libc         

and a lot more!

We are super happy to have a true hacker spirit with us in this episode     

on Security Headlines!

In this episode, we cover topics such as:    

How the security landscape has changed since 2005 and how easy it was    

to hack back then.    

Using regular expressions to make security research better and faster!    

How to submit security exploits to software vendors.    

CVE, lack of description       

Stories from the heart of the security scene       

Suricata and Artificial Intelligence      

How to protect your systems.      

Development and a lot more!      

static code analyzer, he has written his own static code analyzer for PHP.   

We of course sidetrack a bit into OpenBSD and when a person such as Maksymilian says:    

*OpenBSD is the most secure operating system in the world*   

We can just smile :)        

External links:

https://cxsecurity.com

https://cifrex.org

https://cxib.net

https://www.exploit-db.com/history