Absolute AppSec

View Top 200 Chart

Back to Rankings Page

Technology
**Absolute AppSec**

A weekly podcast of all things application security related. Hosted by Ken Johnson and Seth Law.

Latest Episodes:

Episode 98: Bug Bounty Programs, Work when World is Crazy Jun 02, 2020

Show notes

Seth and Ken go full rant mode about bug bounties and trying to work while the world goes insane.

Episode 97: Stefan Edwards and Brian Glas - Threat Modeling May 26, 2020

Show notes

Stefan (@lojikil) and Brian (@infosecdad) are back to talk about threat modeling with Seth and Ken. Discussion covers risk assessment, threat modeling, asset inventory, and software maturity.

Episode 96: Fuzzing and Static Analysis Tools May 19, 2020

Show notes

Seth and Ken discuss fuzzing techniques, recommendations, and experience. Stories of fuzzing in production. How static analysis tools have changed and where they fit.

Episode 95: Jessica Rozhin (@JessicaRozhin) and Lady Christina Liu (cliuthulu) - Incident Response, Lockpicking, Building an Infosec Culture May 12, 2020

Show notes

Jessica Rozhin (@JessicaRozhin) and Lady Christina Liu (@cliuthulu) join Seth and Ken to talk about alternate routes into security, including accounting and joining a circus. Discussions on forensics, incident response, and how lock picking can help build an infosec culture.

Episode 94: Bug Bounty, Microservices vs. Monoliths, and CVE Fatigue May 05, 2020

Show notes

Seth and Ken discuss tips for running a bug bounty program, risk of webhooks, Segment's move to and from microservices, and having CVE Fatigue.

Episode 93: Huntr Dev - Securing Open Source Software Apr 21, 2020

Show notes

Seth and Ken are joined by the Huntr Dev team to talk about securing open source software, bug bounties, and writing secure code.

Episode 92: Working from Home, Skreen, Evolution of AppSec Apr 14, 2020

Show notes

Seth struggles with internet access during a discussion with Ken on working from home, employee surveillance, and Sneek. Additional thoughts on the evolution of application security and penetration testing since the beginning of our careers.

Episode 91: Stefan Edwards - More Voatz, Zoom, Code Reviews, Report Writing, Threat Models, and Risk Assessments Apr 07, 2020

Show notes

LOJI IS BACK! Stefan joins Seth and Ken to talk about his work on Trail of Bits assessment of the Voatz mobile application, share thoughts on Zoom, and discuss the assessment process. Discussions on report writing, risk assessments, threat modeling, and other appsec goodness.

Episode 90: Voatz, HackerOne, Bug Bounties, GraphQL, Shodan Network Trends Mar 31, 2020

Show notes

Seth and Ken provide their take on the Voatz mobile app dismissal from HackerOne. Additional discussion of network trends during social distancing and COVID-19 as reported by Shodan. Finally some thoughts on the new OWASP Firmware Testing Guide and InQL, a GraphQL Burp Suite Pro plugin.

Episode 89: Kat Sweet - Incident Response, DevOps and Developer Training, Breaking into Security Mar 24, 2020

Show notes

Kat Sweet (@TheSweetKat) continues our discussion from DevSecOps Days Austin. Topics include incident response, staying right while you push left, developer training, and getting into information security.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected