Phillip Wylie Show

By Phillip WylieTechnology

Phillip Wylie Show episodes

December 05, 2023Diamond Forbes: From Homelessness to Security Engineer
About The Guest:
Diamond Forbes is a security engineer at Google with over eight years of experience in the field. He started his career in the Army National Guard as an IT specialist and network engineer. Diamond has worked in various roles, including help desk, system admin, and senior network engineer. He has a passion for learning and has self-taught himself many skills, including coding and cybersecurity. Diamond is known for his resilience and ability to overcome failures, which has led him to success in his career.
Summary:
Diamond Forbes shares his inspiring journey from being homeless and working at McDonald's to becoming a security engineer at Google. He talks about his early interest in hacking and how he joined the Army National Guard as an IT specialist. Diamond shares his experiences in different roles, including help desk, system admin, and network engineer. He emphasizes the importance of embracing failure and using it as a learning opportunity. Diamond also discusses the value of self-teaching and the impact of networking on his career. He shares his transition into security and the skills he developed, including coding and DevSecOps. Diamond encourages listeners to stay curious, put themselves out there, and be well-rounded in their skill set.
Key Takeaways:
Embrace failure and use it as a learning opportunity.

Don't sell yourself short and showcase your skills and experience confidently.

Be curious and continuously learn new things to stay relevant in the industry.

Put yourself out there and develop strong networking skills.

Develop a well-rounded skill set and be open to learning different things.

Quotes:
"I failed a lot, actually. But that was like my biggest teacher in personal life and in my career." -Diamond Forbes

"Don't sell yourself short, especially if you're very ambitious."

"Don't let imposter syndrome deter you from anything." -Diamond Forbes

"Broaden your skill set, it's not just about your technical skills." -Diamond Forbes

"Try to be as well-rounded as possible and you can do anything at that point." -Diamond Forbes

Socials and Resources:
https://www.linkedin.com/in/diamondforbes/
51 min
November 27, 2023Katie Paxton-Fear: The Importance of Content Creation in Cybersecurity Careers
About The Guest:
Katie Paxton-Fear, also known as Insider PhD, is a content creator and educator in the field of cybersecurity. With a background in software engineering, Katie creates high-quality videos on her YouTube channel that cover various topics related to web security and bug bounty hunting. She is known for her detailed and comprehensive approach to teaching and sharing knowledge in the cybersecurity field.
Summary:
In this episode of The Phillip Wylie Show, host Phillip Wylie interviews Katie Paxton-Fear, also known as Insider PhD, a content creator and educator in the field of cybersecurity. Katie shares her insights on bug bounty hunting, API security, and the importance of having hobbies outside of the computer. She emphasizes the value of content creation in building a personal brand and advancing one's career in cybersecurity. Katie also discusses her teaching approach and how she incorporates content creation into her curriculum to help students showcase their skills and knowledge.
Key Takeaways:
Bug bounty hunting is a valuable path for individuals interested in cybersecurity, but it is important to have a genuine interest in security rather than just the financial aspect.

APIs are often overlooked in terms of security, but they can be a significant vulnerability and a great place to find bugs.

When approaching bug hunting, Katie takes a top-down perspective, starting with the functionality of the application and breaking it down into its component parts to identify potential vulnerabilities.

Having hobbies outside of the computer is crucial for maintaining a healthy work-life balance and preventing burnout in the cybersecurity field.

Content creation, such as writing blogs or creating videos, is highly beneficial for personal branding and career advancement in cybersecurity.

Quotes:
"Bug hunting is really interesting. It's like having a puzzle, except you only have a few pieces, they're completely blank, and you're not sure if they came from the same set." - Katie Paxton-Fear

"It's really easy to get caught up in 'I finish work, I'm going to go look at my phone.' I think it's really important to have hobbies that just do not involve a computer at all." - Katie Paxton-Fear

"Content creation is the biggest thing you can do for your personal career. It changes the equation in hiring, where companies come to you instead of you chasing them." - Katie Paxton-Fear

Socials and Resources:
https://www.linkedin.com/in/katiepf/
https://www.youtube.com/@InsiderPhD
https://twitter.com/InsiderPhD
46 min
November 21, 2023Maxie Reynolds: From hacker to underwater data center entrepeneur
About The Guest:Maxie Reynolds is a former offshore oil and gas worker turned entrepreneur. She is the founder and CEO of a company that specializes in placing data centers underwater, reducing cooling costs and carbon emissions. Maxie is also a stuntwoman and has a background in robotics and computer science.
Summary:Maxie Reynolds shares her journey from working offshore in the oil and gas industry to becoming an entrepreneur in the data center industry. She discusses the challenges she faced and the lessons she learned along the way. Maxie explains how her company solves the problem of high cooling costs and carbon emissions by placing data centers underwater. She also addresses misconceptions about the environmental impact of data centers and the importance of sustainability.
Key Takeaways:
Maxie Reynolds started her career as an offshore oil and gas worker before transitioning to cybersecurity and eventually founding her own company.

Placing data centers underwater reduces cooling costs by 40% and eliminates the need for electrically driven cooling systems.

Data centers placed underwater also reduce carbon emissions by 750 tons per megawatt hour of electricity used.

Water has a higher specific heat than air, making it a more efficient heat sink and preventing the surrounding water from heating up significantly.

Maxie emphasizes the importance of acknowledging the realities of sustainability and finding innovative solutions to address them.

Quotes:
"Whatever you want to do as a female, try, go, try, do it, and see how far you get." - Maxie Reynolds

"To have a good company, you have to be solving a problem." - Maxie Reynolds

"We are reliant on fossil fuel in every single way." - Maxie Reynolds

"There's no incentive to use our commodities efficiently." - Maxie Reynolds

"Reach out to people that you think are smart, even if they aren't in your circle, and start to find some of the right answers." - Maxie Reynolds

Socials and Resources:
⁠https://twitter.com/SubseaCloud⁠
⁠https://www.linkedin.com/in/maxiereynolds/⁠
Book: The Art of Attack: Attacker Mindset for Security Professionals: ⁠https://www.wiley.com/en-us/The+Art+of+Attack%3A+Attacker+Mindset+for+Security+Professionals-p-9781119805472⁠
37 min
November 14, 2023Olivia Gallucci: Offensive Security, Coding, and Content Creation
About The Guest
Olivia Gallucci is a junior at the Rochester Institute of Technology and an expert in offensive security and content creation. She has worked in various offensive roles, including pen testing and red teaming, and has also done freelance work in the field. Olivia is passionate about open source software and has contributed to several projects. She is known for her blog, oliviagallucci.com, where she shares her expertise in offensive security, open source, and glitter.

Summary
Olivia Gallucci, a junior at the Rochester Institute of Technology, shares her journey in offensive security and content creation. She emphasizes the importance of content creation in showcasing expertise and networking. Olivia discusses her experience in open source software and the benefits of contributing to the community. She also highlights her passion for malicious tool development in red teaming and exploit development. Olivia provides valuable advice for those interested in pursuing a similar career path.

Key Takeaways
Content creation is a powerful tool for showcasing expertise, networking, and finding opportunities.

Open source software provides a valuable learning platform and fosters collaboration within the community.

Malicious tool development in red teaming and exploit development requires a deep understanding of code and specific use cases.

Reading other people's code and searching GitHub for popular offensive tools are effective ways to learn and improve coding skills.

Getting a job in security or software development helps gain credibility and make connections in the field.

Quotes
"Content creation has really been great in terms of showing people what I know how to do, but also helping me know how to do what I know how to do." - Olivia Gallucci

"Open source is an amazing place to start because you have YouTube for tutorials, but when you need help, the open source community breaks it down into simple concepts." - Olivia Gallucci

"Malicious tool development is like a puzzle, figuring out where you fit in and how to modify existing code to achieve specific use cases." - Olivia Gallucci

"Reading code and understanding what others have done is crucial in exploit development and identifying vulnerabilities." - Olivia Gallucci

"Getting a job in security or software development helps gain credibility and make connections to pursue a career in exploit development." - Olivia Gallucci

Socials and Resources
https://twitter.com/OliviaGalluccii
https://www.linkedin.com/in/olivia-gallucci/
https://oliviagallucci.com/
30 min
November 07, 2023Jessica Barker: The importance of cybersecurity culture and awareness
About The Guest:
Jessica Barker is a cybersecurity expert and co-founder of Cygenta, a company that focuses on the human, technical, and physical aspects of cybersecurity. With a background in sociology and civic design, Jessica brings a unique perspective to the field of cybersecurity. She is the co-author of "Cybersecurity ABCs" and "Confident Cybersecurity," and is currently working on her upcoming book, "Hacked."
Summary:
In this episode of The Phillip Wylie Show, host Phillip Wylie interviews cybersecurity expert Jessica Barker. They discuss the importance of cybersecurity culture, the role of social engineering in cybersecurity, and the impact of simulated phishing exercises. Jessica emphasizes the need for organizations to create a positive and empowering cybersecurity culture that focuses on self-efficacy and intrinsic motivation. She also highlights the value of culture assessments in understanding an organization's cybersecurity culture and making informed improvements. Throughout the conversation, Jessica shares insights and practical tips for raising cybersecurity awareness and building a strong security culture.
Key Takeaways:
Cybersecurity culture is crucial for organizations to effectively defend against social engineering attacks.

Simulated phishing exercises can be valuable in raising awareness and improving cybersecurity behaviors, but they should be implemented in a supportive and non-punitive manner.

Rewards and recognition can be effective motivators for encouraging positive cybersecurity behaviors.

Culture assessments provide valuable insights into an organization's cybersecurity culture and help identify areas for improvement.

Empathy and understanding are essential in cybersecurity awareness and culture-building efforts.

Quotes:
"The most influential factor when raising awareness is harnessing self-efficacy." - Jessica Barker

"The right fish at the wrong time can catch anyone." - Jessica Barker

"Creating a safe space for employees to express their concerns and ask questions is crucial for building a positive cybersecurity culture." - Jessica Barker

Socials and Resources:
https://twitter.com/drjessicabarker
https://www.linkedin.com/in/jessica-barker/
https://www.cygenta.co.uk/
37 min
October 31, 2023Lilly Chalupowski's Journey Into Malware Analysis
About The Guest:
Lilly Chalupowski, also known as Cerberus, is a malware reverse engineer specializing in criminal malware. She has extensive experience in analyzing various malware families and has developed open-source projects to aid in the detection and extraction of intelligence from malware. Lilly is also a talented musician and often incorporates guitar playing into her live Twitch streams.
Summary:
Lilly Chalupowski shares her inspiring hacker origin story, from starting out in computer science to pursuing a degree in music and facing financial hardships. She discusses the importance of having a healthy relationship with failure and the value of continuous learning and practice. Lilly also provides valuable advice for aspiring malware analysts, emphasizing the significance of creating a portfolio and actively participating in the cybersecurity community.
Key Takeaways:
Don't be afraid of failure; view it as a normal part of the learning process.

Dedicate time each day to practice and improve your skills, even if it's just half an hour.

Establish a portfolio to showcase your work and value to potential employers.

Attend local cybersecurity meetups and network with professionals in the field.

Create a virtual machine and practice analyzing malware samples from open-source resources.

Quotes:
"Be okay with failure and if you enjoy it, keep doing it and you'll improve over time."

"Half an hour to an hour a day, put it on your calendar and make time for what you're passionate about."

"Your value is showcased through your output, not just a resume."

"You have nothing to lose by applying; what's the worst thing they can tell you? No."

"VMs are literally the gateway drug to malware analysis."

Socials and Resources:
https://www.linkedin.com/in/lillypads/
https://twitter.com/c3rb3ru5d3d53c
https://www.twitch.tv/c3rb3ru5d3d53c
https://c3rb3ru5d3d53c.github.io
44 min
October 24, 2023 Shenetworks: Leveraging Content Creation to Build a Career in Cybersecurity
About The Guest:Shenetworks is a content creator and cybersecurity professional known for her educational videos on TikTok. She has built a following by sharing technical content and leveraging various social media platforms to educate and engage with the cybersecurity community.
Summary:Shenetworks discusses her journey as a content creator and how she has leveraged brand building and content creation to advance her career in cybersecurity. She shares her experience with TikTok and other social media platforms, highlighting the importance of diversifying one's online presence. The conversation also touches on the recent rebranding of Twitter and the potential impact on content creators. Shenetworks offers advice for individuals looking to enter the cybersecurity field, emphasizing the value of networking, self-training, and consistent engagement with the community.
Key Takeaways:
Leveraging content creation and brand building can help advance a career in cybersecurity.
Diversifying one's online presence across multiple platforms is important to mitigate the risk of platform shutdowns.
Twitter provides valuable opportunities for networking and sharing information in the cybersecurity community.
Consistency and dedication to learning are key to acquiring the skills needed for a career in cybersecurity.
Embracing change and adapting to new technologies and roles is crucial in the ever-evolving field of cybersecurity.
Quotes:
"I started making technical related TikToks back in 2020 during lockdown, and it was literally because everybody was on TikTok and bored." - Shenetworks
"The more clear and concise you can convey technical topics, the better, especially when interacting with non-technical individuals." - Shenetworks
"Time and consistency are essential in building a successful career in cybersecurity." - Shenetworks
Socials and Resources:
https://twitter.com/notshenetworks
https://www.tiktok.com/@shenetworks
https://www.youtube.com/c/shenetworks
27 min
October 24, 2023InfoSec Pat: Content Creation and Cybersecurity Careers
About The Guest:
Patrick Gorman, also known as Infosec Pat, is a content creator in the cybersecurity community. He started making content on YouTube about four years ago and has since built a strong following. Patrick is an offensive security professional and covers a wide range of topics in his videos, including hacking, penetration testing, and network security.
Summary:
In this episode, Phillip Wylie interviews Patrick Gorman, also known as Infosec Pat, about content creation and brand building in the cybersecurity industry. Patrick shares his journey of accidentally starting his YouTube channel and how it has grown over the years. He emphasizes the importance of building a personal brand and networking in the industry. Patrick also provides advice for those looking to get started in offensive security and discusses the role of certifications in landing a job in cybersecurity.
Key Takeaways:
Content creation and brand building are essential for getting jobs in the cybersecurity industry.

Building a personal brand through content creation can help showcase your skills and attract job opportunities.

Networking is crucial in the industry, and attending conferences and local meetups can help you connect with professionals and potential employers.

Certifications can act as a gatekeeper and demonstrate your ability to start and finish something, but networking and a positive attitude are equally important.

Quotes:
"If you have a good attitude, technology can be learned. But if you don't have that attitude, you're screwed." - Patrick Gorman

"Never be one thing about me. I'm super approachable. I'm not better than you, you're not better than me." - Patrick Gorman

Socials and Resources:
https://twitter.com/Infosecpat
https://www.instagram.com/infosecpat/
https://www.linkedin.com/in/infosecpat/
https://www.youtube.com/@InfoSecPat
45 min
October 18, 2023From NSA to CISO: A Conversation with Ira Winkler
About The Guest:
Ira Winkler is a renowned cybersecurity expert with over 30 years of industry experience. He started his career at the National Security Agency (NSA) and has since held various roles in the field of cybersecurity, including chief security strategist at HP and chief security architect at Walmart. He is currently the CISO at CYE, a cybersecurity company. Winkler is also the author of several books, including "You Can Stop Stupid" and "Security Awareness for Dummies."
Summary:
Ira Winkler, a cybersecurity expert with over 30 years of industry experience, joins the podcast to discuss the cybersecurity skills shortage and the importance of practical experience in the field. He emphasizes the need for cross-training individuals with computer backgrounds in cybersecurity rather than relying solely on certifications or degrees. Winkler also highlights the value of soft skills and critical thinking in the cybersecurity field. He shares his perspective on the misconception that anyone can enter the field without experience or credentials and explains the importance of understanding programming and mathematical principles in certain cybersecurity roles.
Key Takeaways:
Practical experience and cross-training individuals with computer backgrounds are more valuable than certifications or degrees in cybersecurity.

Soft skills and critical thinking are essential in the cybersecurity field.

Understanding programming and mathematical principles can enhance cybersecurity skills.

Machine learning may automate certain cybersecurity tasks, but a deeper understanding of the underlying principles is still necessary.

Quotes:
"Our job is to stop stupid. Our job is to patch stupid." - Ira Winkler

"You're competing against people who know how to program, who have college degrees, who set up their home labs." - Ira Winkler

"A job might have no requirements, but you're likely going to be competing against people who do have qualifications." - Ira Winkler

Socials and Resources:
https://www.linkedin.com/in/irawinkler/
https://twitter.com/irawinkler
31 min
October 10, 2023Importance of Fundamentals and Home Labs with Kevin Apolinario
About The Guest:
Kevin Apolinario is a cybersecurity professional with a diverse background in IT support and training. He has over 12 years of experience in the restaurant industry, which has helped him develop strong customer service and soft skills. Kevin is also involved with Riosis, an organization that supports Latin individuals in the cybersecurity field. He is passionate about helping others and sharing his knowledge through his YouTube channel and various training programs.
Summary:
Kevin Apolinario shares his unique career journey, starting from his experience in the restaurant industry to his transition into IT support and cybersecurity. He emphasizes the importance of soft skills and customer service experience in the field. Kevin also discusses the value of creating content and networking to enhance career opportunities. He highlights the significance of building a strong foundation in IT fundamentals and recommends creating a home lab to gain practical experience. Kevin emphasizes the importance of mindset and perseverance in overcoming rejection and securing job opportunities in the IT industry.
Key Takeaways:
Soft skills gained from customer service experience are valuable in IT and cybersecurity roles.

Creating content and networking can enhance career opportunities.

Building a strong foundation in IT fundamentals is crucial for success.

Creating a home lab can provide practical experience and make candidates stand out.

Mindset and perseverance are essential in overcoming rejection and securing job opportunities.

Quotes:
"Soft skills are important in IT. You're going to use soft skills and you can leverage that over to it." - Kevin Apolinario

"Put yourself out there and see what happens. You never know who's watching you." - Kevin Apolinario

"Fundamentals are very important. It's like building a house. You gotta have a strong base." - Kevin Apolinario

"Certifications do not guarantee you a job. It just guarantees you an interview." - Kevin Apolinario

"Embrace rejection. Keep applying for jobs until someone gives you a chance." - Kevin Apolinario

Socials and Resources:
https://www.linkedin.com/in/itprofessionalkevinapolinario/
https://www.youtube.com/c/KevtechITSupport
https://kevtechitsupport.com/
https://twitter.com/KevTechSupport
32 min

About Phillip Wylie Show

From the publisher's feed

The Phillip Wylie Show is a premier cybersecurity podcast and media source for offensive security professionals. Hosted by Phillip Wylie, globally recognized ethical hacking expert, keynote speaker,…