The Shellsharks Podcast

The Shellsharks Podcast

By ShellsharksTechnology
Download on the App Store

The Shellsharks Podcast episodes

  • /Chipotle

    Join me as I chat with Apis Necros, a software developer & hacker about his intro to infosec, the IndieWeb, cookie recipes and more!

    Show Notes
    • The Hive
    • Pokemon Go
    • Apis Necros Projects
    • Straddling Checkerboard
    • Actually, Roll Your Own crypto, then throw it away.
    • Apis Mellifera Cecropia
    • The IndieWeb
    • Hugo
    • One of us
    • Having a website isn’t about blogging, it’s about you
    • Getting Into Information Security
    • You have something to say, someone will listen
    • Popular Shellsharks posts (2022)
    • Exploring Minix Character Device Drivers
    • Herman Miller Logitech Embody Review
    • An Ode to Lost Friends
    • Enshittification
    • Facebook’s AI Spam Isn’t the ‘Dead Internet’: It’s the Zombie Internet
    • Facebook’s Shrimp Jesus, Explained
    • AI Slop
    • omg.lol
    • Apis Necros Recipes
    • Slash Pages
    • /Chipotle
    • Deobfuscating a Malware Stager
    • Mental Illness, Autism, and Suffering
    • A 5 Year Infosec Education Retrospective
    • Desk Setup
    • Infosec.exchange
    • Ioc.exchange
    • Stars, Boosts & Toots
      1 hr 9 min
    • The foremost expert on court cybersecurity vulnerabilities?

      Join me as I chat with Jason Parker, a Software Developer, Cybersecurity Researcher and Independent Journalist about hacking court systems, punycode, infosec training and more!

      !! Explicit Language Alert !!

      Show Notes
      • Jason Parker on Mastodon
      • Twitter Migration
      • Maricopa County Superior Corut eFiling system disclosure
      • My call for Podcast guests on Mastodon
      • Jeltz
      • Bluesky Exploits
      • Disorder In The Court
      • OWASP Broken Access Control
      • 404 Media
      • LockBit ransomware Fulton county
      • Toothbrush botnet
      • Security flaws in court record systems used in five US states exposed sensitive legal documents | Tech Crunch
      • Flaws in public records management tool could let hackers nab sensitive data linked to requests | Nextgov
      • Software Flaws Exposed Sealed Court Docs, Researcher Says | Law360
      • Multiple Vulnerabilities Affecting Web-Based Court Case and Document Management Systems | CISA
      • California Bar investigates after confidential discipline records published online
      • State Bar of Calif. Data Breach Caused Confidential Disciplinary Records to Show Up on Third-Party Website, Class Action Says
      • Microsoft Recall
      • The best counterargument to using Recall
      • Punycode
      • Single-letter second-level domain
      • Interesting instance domains
      • Donate to the EFF
      • ISC2 certified in cybersecurity
      • Web Security Academy
      • California Consumer Privacy Act (CCPA)
      • Other US States w/ Privacy Laws
      • iTerm moves AI functionality into a plugin
      • Governor Wants to Prosecute Journalist Who Clicked View Source on Government Site
      • AWS Shared Responsibility Model
        1 hr 22 min
      • Mastodon & Cyber-success w/ @rebootkid

        Positivity abounds in this edition of The Shellsharks Podcast! @rebootkid (Nate) joins me to discuss the great Infosec Mastodon migration, getting into infosec, mentorship, cybersecurity as a practice and management’s role in combatting burnout.

        Show Notes
        • Mastodon
        • Stars, Boosts & Toots
        • Diaspora
        • Infosec.Exchange
        • Fediverse
        • Defcon.social
        • ActivityPub rocks!
        • Why I Blog. You Should Too!
        • SQL Slammer
        • What Certification or Training Should I Take?
        • Interview w/ Security Engineer, Eva Georgieva
        • MFA Prompt Bombing
        • Getting Into Information Security
        • An Ode to RSS
        • Cybersecurity burnout is real
          1 hr 20 min
        • Privacy Chat w/ Dan Frechtling

          Boltive CEO and privacy advocate, Dan Frechtling joins me to discuss all things in the world of Internet privacy!

          Show Notes
          • I Said No to Online Cookies. Websites Tracked Me Anyway. | Consumer Reports
          • Story of Dan Frechtling & Scott Moore
          • Privacy Regulations - GDPR, LGPD, CCPA, CPRA
          • Sephora Privacy Settlement
          • Global Privacy Control
          • The American Data Privacy and Protection Act (ADPPA)
          • Advanced Data Protection Control (ADPC)
          • US Privacy String
          • OSINT Sock Puppets
          • RuTarget Harvesting Google Data
          • Executive Order on Protecting Foreign Intel from Surveilling US Citizens
          • Is TikTok safe?
          • Deprecation of third-party cookies
          • SSO wall of shame
          • GDPR enforcement tracker
          • Future of Privacy Forum
          • TROPT Defining the Privacy tech Landscape Whitepaper
          • IAPP
          • Three Ways Your Data is Leaking in Advertising and How to Avoid It
            1 hr 3 min
          • Interview w/ Security Engineer, Eva Georgieva

            Join myself (@shellsharks) and Eva Georgieva, security engineer and founder of #hackintocybersec as we discuss getting into infosec, cybersecurity education, women in cyber and more!

            Note: Had some challenges with audio leveling, I apologize for any audio weirdness!

            Show Notes
            • Uber Incident
            • Eva’s AMA on Reddit
            • #hackintocybersec
            • OLLMOO
            • TryHackMe
            • Hack The Box (Academy)
            • TCM Security
              1 hr
            • Threat Hunting w/ Shahar Vaknin of Hunters.ai

              Join myself (@shellsharks) and Shahar Vaknin, Axon Team Lead at Hunters.ai as we discuss the world of Threat Hunting!

              Show Notes
              • Hunters.ai
              • Long Tail Analysis
              • The DFIR Report
              • 2022 CrowdStrike Global Threat Report
              • Red Canary 2022 Threat Detection Report
              • Twitter Global CERTs/CSIRTs/ISACs list (Twitter is sort of defunct now though)
              • MISP
              • Threat Hunting w/ Python (Dragos)
              • The Cyber Kill Chain (Lockheed Martin) - shellsharks
              • CIS Critical Security Controls
              • Practical Threat Hunting Training (Chris Sanders)
              • MITRE ATT&CK
                1 hr 22 min
              • Vuln Research & Exploit Dev w/ VoidSec

                Join myself (@shellsharks) and VoidSec as we discuss Exploit Development and Vulnerability Research!

                Show Notes
                • VoidSec
                • The Shellcoder’s Handbook
                • Offensive Security | EXP-401 | AWE | OSEE
                • Google Project Zero
                • PrintDemon (Alex Ionescu & Yarden Shafir)
                • VoidSec CVE-2020-1337
                • Zerodium
                • Immunefi - Web3 has huge bounty payouts
                • IDA Pro
                • Burp Suite Professional
                • 010 Editor
                • Ghidra
                • BinaryNinja
                • The Art of Software Security Assessment
                • RET2SYSTEMS Training
                • Zero Day Initiative (ZDI)
                • TrendMicro
                • Corelan
                • CVE North Stars
                • Pwn2Own
                • secret club
                • UpdatedSecurity - Security Forum
                  1 hr 7 min
                • Zero Trust is not 0 or 1

                  Join myself (@shellsharks) and Bobby DeSimone, Founder & CEO of Pomerium as we discuss the Pomerium platform, context-aware access control and all things Zero Trust!

                  Show Notes
                  • Pomerium
                  • Latin meaning of “pomerium”
                  • Some fun with Latin on Shellsharks - The Enchiridion of Impetus Exemplar
                  • Jericho Forum, now The Open Group Security Forum
                  • BeyondCorp
                  • NIST SP 800-207: Zero Trust Architecture
                  • M-22-09: Moving the US Government Toward Zero Trust Cybersecurity Principles
                  • Q&A with Zero Trust Architecture Writers from NIST
                  • Rego Policy Language
                  • Open Policy Agent
                  • Istio Service Mesh
                  • Open Source Pomerium on GitHub
                  • 2021 Twitter Hack
                  • OASIS eXtensible Access Control Markup Language (XACML)
                  • HashiCorp Sentinel Framework
                  • Awesome Zero trust
                    56 min
                  • Hacker Profile: Kevin Borders (NSA Red Team to Software Entrepreneur)

                    A fascinating interview with Kevin Borders, where we discuss his origin story, time spent working on the NSA Red Team, growing a successful online collage business and his current venture, Minware!

                    Show Notes
                    • TI-85 Graphing Calculator
                    • Number Munchers
                    • DragonRealms, Gemstone III
                    • (current) NSA Student Programs
                    • Web Tap: detecting covert web traffic
                    • University of Michigan PhD in CSE
                    • Executive Order on Improving the Nation’s Cybersecurity
                    • U.S. Cyber Command
                    • Kevin’s Usenix Security Publications
                      • Chimera: A Declarative Language for Streaming Network Traffic Analysis + NSA Slides
                      • Securing Network Input via a Trusted Input Proxy
                      • Towards Quantification of Network-Based Information Leaks via HTTP
                      • SELinux
                      • Project Zero
                      • Kevin Borders on Quora
                        • Does the NSA Have Better Engineers than Facebook or Google?
                        • About minware
                        • Halting problem
                        • Blackhat / Defcon
                        • 100% Prevention
                        • What are some computer hacks that hackers know but most people don’t?
                        • The Most Hated Man on the Internet
                        • NSO Group iMessage Zero-Click Exploit, FORCEDENTRY
                        • Okta breach 2022
                        • NIST SP 800-207: Zero Trust Architecture
                        • SolarWinds Breach
                        • How to Contribute to Open Source
                          1 hr 35 min

                        About The Shellsharks Podcast

                        From the publisher's feed

                        A show about infosec, technology and life!