JavaScript Jabber

JSJ 418: Security Scary Stories and How to Avoid Them with Kevin A McGrail


Listen Later

In this episode of JavaScript Jabber the panel interviews security expert, Kevin A. McGrail. He starts by explaining what security frameworks and what they do. The panel wonders how to know if your developers are capable of self-auditing your security or if you need help. Kevin shares recommendations for companies to look at to answer that question. Aimee Knight explains the hell she has been in making changes to be compliant with CCPA. The panel considers how policies like this complicate security, are nearly impossible to be compliant with and how they can be weaponized. They discuss the need for technical people to be involved in writing these laws. Kevin explains how you can know how secure your systems actually are. He shares the culture of security first he tries to instill in the companies he trains. He also trains them on how to think like a bad guy and explains how this helps developers become security first developers. The panel discusses how scams have evolved and how the same scams are still being run. They consider the importance of automated training and teaching developers to do it right the first time.Finally, they consider the different ways of authentication, passwords, passphrases, sim card, biometrics. Kevin warns against oversharing or announcing vacations. The panel discusses real-world tactics bad guys use. Kevin explains what he trains people to do and look out for to increase security with both social engineering and technical expertise. Panelists
  • Aimee Knight
  • AJ O’Neal
  • Charles Max Wood
  • Dan Shappir
  • Steve Edwards
Guest
  • Kevin A McGrail
Sponsors
  • ABOUT YOU | aboutyou.com/apply
  • Split
  • CacheFly
____________________________________________________________ "The MaxCoders Guide to Finding Your Dream Developer Job" by Charles Max Wood is now available on Amazon. Get Your Copy Today! ____________________________________________________________Links
  • Ghost in the Wires
  • https://www.infrashield.com/
Follow DevChatTV on Facebook and Twitter PicksAimee Knight:
  • The More Gender Equality, the Fewer Women in STEM 
AJ O’Neal:
  • I'll Let Myself In: Tactics of Physical Pen Testers 
  • Copying Keys from Photos, Molds & More 
  • The LED Traffic Light and the Danger of "But Sometimes!" 
  • Regina Spektor 
  • The Weepies 
Dan Shappir:
  • This is what happens when you reply to spam email 
  • What is Your Password? 
Kevin A McGrail:
  • XKCD Security 
  • IT Crowd
  • https://spamassassin.apache.org/
Steve Edwards:
  • XKCD Password Generator 
  • Nerd Sniping
Special Guest: Kevin A. McGrail.

Support this podcast at — https://redcircle.com/javascript-jabber/donations

Privacy & Opt-Out: https://redcircle.com/privacy

Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.
...more
View all episodesView all episodes
Download on the App Store

JavaScript JabberBy Charles M Wood

  • 4.4
  • 4.4
  • 4.4
  • 4.4
  • 4.4

4.4

234 ratings


More shows like JavaScript Jabber

View all
Freakonomics Radio by Freakonomics Radio + Stitcher

Freakonomics Radio

32,264 Listeners

The Tim Ferriss Show by Tim Ferriss: Bestselling Author, Human Guinea Pig

The Tim Ferriss Show

16,140 Listeners

The Changelog: Software Development, Open Source by Changelog Media

The Changelog: Software Development, Open Source

288 Listeners

Ruby Rogues by Charles M Wood

Ruby Rogues

45 Listeners

The Freelancers' Show by Charles M Wood

The Freelancers' Show

23 Listeners

The a16z Show by Andreessen Horowitz

The a16z Show

1,096 Listeners

Software Engineering Daily by Software Engineering Daily

Software Engineering Daily

628 Listeners

Talk Python To Me by Michael Kennedy

Talk Python To Me

583 Listeners

iPhreaks by Charles M Wood

iPhreaks

17 Listeners

React Native Radio by Jamon Holmgren, Robin Heinze, Mazen Chami

React Native Radio

67 Listeners

Adventures in Angular by Charles M Wood

Adventures in Angular

15 Listeners

JavaScript Jabber by Charles M Wood

JavaScript Jabber

62 Listeners

Ruby Rogues by Charles M Wood

Ruby Rogues

21 Listeners

My JavaScript Story by Charles M Wood

My JavaScript Story

4 Listeners

My Ruby Story by Charles M Wood

My Ruby Story

0 Listeners

Syntax - Tasty Web Development Treats by Wes Bos & Scott Tolinski - Full Stack JavaScript Web Developers

Syntax - Tasty Web Development Treats

990 Listeners

The Indicator from Planet Money by NPR

The Indicator from Planet Money

9,559 Listeners

Tech Brew Ride Home by Morning Brew

Tech Brew Ride Home

970 Listeners

All-In with Chamath, Jason, Sacks & Friedberg by All-In Podcast, LLC

All-In with Chamath, Jason, Sacks & Friedberg

10,204 Listeners

Deep Questions with Cal Newport by Cal Newport

Deep Questions with Cal Newport

1,334 Listeners

Dwarkesh Podcast by Dwarkesh Patel

Dwarkesh Podcast

561 Listeners

Latent Space: The AI Engineer Podcast by Latent.Space

Latent Space: The AI Engineer Podcast

100 Listeners

BG2Pod with Brad Gerstner and Bill Gurley by BG2Pod

BG2Pod with Brad Gerstner and Bill Gurley

459 Listeners

AI + a16z by a16z

AI + a16z

32 Listeners