In this episode we talk about penetration testing and what you need to know to get the most out of the activity. Tune in to hear some of our thoughts on the topic.

To take the training course survey go to https://forms.office.com/Pages/ResponsePage.aspx?id=dUTTGKfrY0SMJRLyejG00DrfDtlb8W5HpqoXHgPDektUNDgxVU9SNlVRNVhXMTY4UUxSU041MFVWTC4u

 For more info go to https://www.developsec.com or follow us on twitter (@developsec).

 Join the conversations.. join our slack channel. Email [email protected] for an invitation.

 DevelopSec provides application security consulting and training to add value to your application security program. Contact us today to see how we can help.

Send us a text

For more info go to https://www.developsec.com or follow us on X (@developsec).

The DevelopSec podcast is brought to you by Jardine Software Inc.

In this episode we talk about secure code review with a mention of static analysis. Do you know the difference? What is the issue of doing one over the other, or just outright replacing actual code review with static analysis? Tune in to hear some of our thoughts on the topic.

 For more info go to https://www.developsec.com or follow us on twitter (@developsec).

 Join the conversations.. join our slack channel. Email [email protected] for an invitation.

 DevelopSec provides application security consulting and training to add value to your application security program. Contact us today to see how we can help.

Send us a text

For more info go to https://www.developsec.com or follow us on X (@developsec).

The DevelopSec podcast is brought to you by Jardine Software Inc.

In this episode James talks about 2-factor authentication, why we use it, and maybe why we don't. Is your 2-factor implementation getting in your way?

 The DevelopSec YouTube Channel - https://www.youtube.com/channel/UCdAqgfdGs0-hPa8FhsODwNw

 For more info go to https://www.developsec.com or follow us on twitter (@developsec).

 Join the conversations.. join our slack channel. Email [email protected] for an invitation.

 DevelopSec provides application security consulting and training to add value to your application security program. Contact us today to see how we can help.

Send us a text

For more info go to https://www.developsec.com or follow us on X (@developsec).

The DevelopSec podcast is brought to you by Jardine Software Inc.

The new OWASP Top 10 2017 is out. We look at some of the changes and how you can effectively use the list to better your security program.

We are also launching a new DevelopSec Live broadcast. To check out the first episode, go to https://www.youtube.com/watch?v=kfDuxwFScOE

(The first 2 minutes are just a place holder as I was starting, feel free to skip those.  That will go away in future episodes).

The DevelopSec YouTube Channel - https://www.youtube.com/channel/UCdAqgfdGs0-hPa8FhsODwNw

For more info go to https://www.developsec.com or follow us on twitter (@developsec).

Join the conversations.. join our slack channel. Email [email protected] for an invitation.

DevelopSec provides application security consulting and training to add value to your application security program. Contact us today to see how we can help.

Send us a text

For more info go to https://www.developsec.com or follow us on X (@developsec).

The DevelopSec podcast is brought to you by Jardine Software Inc.

 James sits down with Perry Krug, from Couchbase to discuss some important steps to take to secure your database.

 Perry Krug - https://twitter.com/perrykrug

 Couchbase - https://twitter.com/couchbase

 Couchbase - https://www.couchbase.com/

 CouchbaseSecurity Documents -  https://developer.couchbase.com/documentation/server/current/security/security-intro.html

 For more info go to https://www.developsec.com or follow us on twitter (@developsec).

 Join the conversations.. join our slack channel. Email [email protected] for an invitation.

 DevelopSec provides application security consulting and training to add value to your application security program. Contact us today to see how we can help.

Send us a text

For more info go to https://www.developsec.com or follow us on X (@developsec).

The DevelopSec podcast is brought to you by Jardine Software Inc.

 Welcome to 2018! Another year down and time for many of us to start making promises to ourselves of things we will start doing in this new year. In this episode James talks about some lessons we should take from 2017 and ways to use them in 2018. 

 For more info go to https://www.developsec.com or follow us on twitter (@developsec).

 Join the conversations.. join our slack channel. Email [email protected] for an invitation.

 DevelopSec provides application security consulting and training to add value to your application security program. Contact us today to see how we can help.

Send us a text

For more info go to https://www.developsec.com or follow us on X (@developsec).

The DevelopSec podcast is brought to you by Jardine Software Inc.

In this episode, James talks with Tim Medin regarding Meteor and security. If you develop with Meteor or have to test it, there is a lot of information packed in.

More about Tim Medin (@timmedin):

Red Seige website - https://www.redsiege.com/ 

Link to Meteor Minor and other tools Tim mentioned:

https://github.com/nidem

Tim Medin's Bsides Orlando 2017 Presentation - Tim Medin -  Mining Meteor B-Sides Orlando 2017

 For more info go to https://www.developsec.com or follow us on twitter (@developsec).

 Join the conversations.. join our slack channel. Email [email protected] for an invitation.

 DevelopSec provides application security consulting and training to add value to your application security program. Contact us today to see how we can help.

Send us a text

For more info go to https://www.developsec.com or follow us on X (@developsec).

The DevelopSec podcast is brought to you by Jardine Software Inc.

You have heard about the Apple Sign-in Bug on High Sierra. Now lets talk about how we can use this example to better our current development processes to protect ourselves.

Link to mentioned article:  https://www.theguardian.com/technology/2017/nov/30/apple-macos-high-sierra-fix-breaks-file-sharing-password-security-flaw-emergency-patch

 For more info go to https://www.developsec.com or follow us on twitter (@developsec).

Join the conversations.. join our slack channel. Email [email protected] for an invitation.

DevelopSec provides application security consulting and training to add value to your application security program. Contact us today to see how we can help.

Send us a text

For more info go to https://www.developsec.com or follow us on X (@developsec).

The DevelopSec podcast is brought to you by Jardine Software Inc.

In this episode, James talks the use of 3rd party components and how to handle determining if they are vulnerable or not.

Links:
 OWASP Dependancy Check - https://www.owasp.org/index.php/OWASP_Dependency_Check
 GitHub Blog - https://github.com/blog/2470-introducing-security-alerts-on-github
 RetireJS - https://retirejs.github.io/retire.js/

 For more info go to https://www.developsec.com or follow us on twitter (@developsec).

Join the conversations.. join our slack channel.  Email [email protected] for an invitation.

DevelopSec provides application security consulting and training to add value to your application security program. Contact us today to see how we can help.

Send us a text

For more info go to https://www.developsec.com or follow us on X (@developsec).

The DevelopSec podcast is brought to you by Jardine Software Inc.

In this episode, James talks about open redirect and why it matters from a security perspective. He also shows how this information can be used in your personal technology use, not just in development.

For more info go to https://www.developsec.com or follow us on twitter (@developsec).

 Join the conversations.. join our slack channel.  Email [email protected] for an invitation.

DevelopSec provides application security consulting and training to add value to your application security program. Contact us today to see how we can help.

Send us a text

For more info go to https://www.developsec.com or follow us on X (@developsec).

The DevelopSec podcast is brought to you by Jardine Software Inc.