Dan On Dev

Dan On Dev

Download on the App Store

Dan On Dev episodes

  • Man vs WebApp Podcast – Episode 05 – New Hosts and BlackHat 2018

    This episode of Man vs Web App Podcast marks a significant transition as we introduce two new hosts of the podcast: David Howe and Garrett Gross.  We discuss the transition itself, the current state of application security and get an onsite interview from a DEF CON attendee regarding their experience with appsec.

    The post Man vs WebApp Podcast – Episode 05 – New Hosts and BlackHat 2018 first appeared on Man Vs WebApp.

    40 min
  • Man vs WebApp Podcast – Episode 04 – Input and injection fundamentals

    This week on the Man vs Web App Podcast we delve into the fundamentals of Inputs and Injection. Inputs cross all layers of the entire system, and its important to understand the basics to be able to build on top more advanced or specialized attacking methods.

    find out more about our site

    Listen to learn the basics about inputs and injections.

    The post Man vs WebApp Podcast – Episode 04 – Input and injection fundamentals first appeared on Man Vs WebApp.

    35 min
  • Man vs WebApp Podcast – Episode 03 – Out of band attacks

    This week on the Man vs Web App Podcast we delve into the topic of Out of band attacks. These go by various names, such as Out of Order, second order, blind, external service interactions, etc. In this episode Scott Davis takes the lead to discuss the latest research he has been doing in this area.

    Listen to learn about these newer category of attacks and learn more about these cutting edge attacking techniques and how you have to build apps that can defend against them.

    The post Man vs WebApp Podcast – Episode 03 – Out of band attacks first appeared on Man Vs WebApp.

    34 min
  • Man vs WebApp Podcast – Episode 02 – All about web services

    This week on the Man vs Web App Podcast we delve into the topic of Web Services. This includes SOAP, REST API’s or just Web API’s… whatever you want to call them.

    Learn about the history of Web Services, how each is different and learn about cutting edge solutions which allow them to become more manageable from a security perspective, and the new search optimization techniques with SEO Long Beach.

    The post Man vs WebApp Podcast – Episode 02 – All about web services first appeared on Man Vs WebApp.

    35 min
  • Man vs WebApp Podcast – Episode 01 – Welcome To The Show

    Welcome to the Man vs WebApp Podcast!

    In this intro episode we do introductions and give a preview of the topics to come.

    The Man vs WebApp Podcast is not another “newscast” covering the latest topics in the industry. Instead, in each episode we will focus on a specific Application Security topic and dig into the details with enough description to educate those newer to AppSec, but then we will go deep enough to add new ideas for AppSec pros.

    The post Man vs WebApp Podcast – Episode 01 – Welcome To The Show first appeared on Man Vs WebApp.

    34 min
  • An Information Security Place Podcast – 01-22-14

    Jim, Dan, and Michael have a lot of catching up to do. We talk about a lot of stuff because a lot of stuff has been happening. From RSA, NSA, QSAs… security is busy! Show notes below!

    Show Notes:
    Infosec News Update
    • 123456 is the new best of the worst – Link
    • RSA Conf and those skipping it this year – Link
    • Fixing a flawed VA medical records system: Tenacity pays off for a researcher – Link
    • Do you believe the Obamacare website is secure? These guys don’t – Link1, Link2, Link3
    • Discussion Topic – The Failure Themes of the Target Breach
      • Massive Props to Brian Krebs on his coverage of the whole debacle – Krebsonsecurity.com
      • AntiVirus Takes it on the Chin …Again – Link
      • Egress Filter Much? – Link
      • Credit Card Processing Fundamentally flawed – Link
      • EMPHATIC POINT OF THE PODCAST!! Complacent with Compliance … again PCI!= security

        Music Notes

        Special Thanks to the guys at RivetHead for use of their tracks“ http://www.rivetheadonline.com/

        • Intro: “Stay Alive“ – Rivethead
        • Segment 1: “Synchroncity II“ – RivetHead
        • Segment 2: “Burn Us Down“ – Early Morning Rebel
        • Outro: “Zero Gravity“ – RivetHead
        • The post An Information Security Place Podcast – 01-22-14 first appeared on Man Vs WebApp.

          1 hr 1 min
        • An Information Security Place Podcast – 8-20-13

          The podcasting returns! This is the first new episode of InfoSec Place and in a few days will be the return of my web security podcast here on Man Vs Webapp (formerly Mightyseek).

          Show Notes:
          InfoSec News Update
          • Scan the Entire Internet in less than 45 minutes!! – Article Link and tool link
          • Zuckerberg’s Profile Hacked – Link and Fundme campaign launched by my buddy Marc Maiffret from Beyond Trust
          • FDA Issues Guidelines on Wireless Medical Devices – Link
          • OWASP Top 10 Update – Link
          • Malware Sandboxing Not Working – Link
          • Sparty: MS Sharepoint and Frontpage Audit Tool – Link
          • HouSecCon Update! – Link
          • Discussion Topic
            • The Threat of Social Engineering – Jigsaw FTW
            • Link 1
            • Link 2
            • Music Notes: Special Thanks to the guys at RivetHead for use of their tracks – http://www.rivetheadonline.com/

              • Intro – Stay Alive – Rivethead
              • Segment 1 – – RivetHead
              • Segment 2 – – RivetHead
              • Outro – Zero Gravity – RivetHead
              • The post An Information Security Place Podcast – 8-20-13 first appeared on Man Vs WebApp.

                58 min
              • An Information Security Place Podcast – Episode 04 for 2012

                Hmmm Lets see if I even remember how to enter this stuff anymore… Yeap you guessed it, we finally recorded another episode – WOOT!

                Show Notes:

                InfoSec News Update – 


                • Howard Schmidt is Retiring – Link Here
                • Vulnerability Stats of Publicly Traded Companies – Link Here
                • Tool Update – Threadfix from Denim Group – Link Here
                • The Mission Impossible Self-Destructing SATA SSD Drive – Link Here
                • The WAF Wars – Link 1 / Link 2 / Link 3
                • PwnieExpress Releases PwnPlugUI/OS 1.1 – Link Here
                • App for scanning faces to gauge age at bars – Link Here
                • Business Logic Testing defined – Link 1
                • ErrataSec – Wants your hotel PCAP Files – Link 1 / Link 2
                • Discussion Topic –

                  1. Should specific security efforts be validated when the program as a whole is crap? Link Here
                  2. Music Notes:

Special Thanks to the guys at RivetHead for use of their tracks –http://www.rivetheadonline.com/

                    Tour Dates:

                    1. June 1 – Dallas – Curtain Club
                    2. Intro – RivetHead – “The 13th Step”

                      News Bed – RivetHead – “Beautiful Disaster” 
                      Discussion Bed – RivetHead – “Difference” 
                      Outro – RivetHead – “Zero Gravity”

                      The post An Information Security Place Podcast – Episode 04 for 2012 first appeared on Man Vs WebApp.

                      52 min
                    3. An Information Security Place Podcast – Episode 03 for 2012

                      Today’s show is Michael interviewing Kevin Riggins. Kevin is an Enterprise Security Architect for a Fortune 500 financial services company. Kevin and Michael have some great conversation about Kevin’s job, what he is doing at RSA, where he blogs, the book he coauthored, etc. (look below in the show notes for links to everything).

                      Then a fun discussion starts about cloud, risk, mobility, risk in the cloud, risk in mobility, risk of mobility integrated with the cloud, and so on. Good stuff all around.

                      Here’s some links to stuff about Kevin and other stuff we talked about in the show.

                      • Management Team Member for the Society of Information Risk Analysis – link
                      • Coauthor on The Cloud Security Rules – link
                      • Kevin blogs at Infosecramblings – link
                      • Twitter pages – link and link and link
                      • The post An Information Security Place Podcast – Episode 03 for 2012 first appeared on Man Vs WebApp.

                        36 min
                      • An Information Security Place Podcast – Episode 02 for 2012

                        Thanks go to Jeremiah Grossman for sitting down with Michael for some great discussion. Jeremiah is the CTO at Whitehat Security and a very well known figure in the InfoSec industry. Jeremiah and Michael talk about Hawaii, sharks, security philosophy, RSA, stage fright, Jeremiah’s TED talk (not published as of the posting of this entry), and the age of the InfoSec industry and whether young folks are coming into the fold.

                        You can find Jeremiah at Whitehat (link above) and his blog, and you can follow him and on Twitter as well. Jeremiah will be giving a talk and participating on panel at RSA as well, so be sure to attend those if you are going to the RSA Conference 2012.

                        The post An Information Security Place Podcast – Episode 02 for 2012 first appeared on Man Vs WebApp.

                        23 min

                      About Dan On Dev

                      From the publisher's feed

                      Hacking Software Engineering Leadership