WEBVTT

1
00:00:05.100 --> 00:00:09.800
it

2
00:00:12.100 --> 00:00:16.000
<00:00:12.100>hi <00:00:12.275>everyone. <00:00:12.450>Thank <00:00:12.625>you <00:00:12.799>for <00:00:12.975>joining <00:00:13.149>my <00:00:13.325>sessions. <00:00:13.500>So

3
00:00:15.500 --> 00:00:19.700
<00:00:15.500>today <00:00:15.700>I'm <00:00:15.900>going <00:00:16.100>to <00:00:16.300>be <00:00:16.500>talking <00:00:16.700>about <00:00:16.900>secure

4
00:00:18.700 --> 00:00:21.700
<00:00:18.700>code <00:00:19.400>Superstars <00:00:20.099>empowering

5
00:00:21.700 --> 00:00:24.700
<00:00:21.700>developers <00:00:22.050>and <00:00:22.400>surpassing <00:00:22.750>security <00:00:23.099>channels

6
00:00:24.700 --> 00:00:27.200
<00:00:24.700>challenges <00:00:25.166>together. <00:00:25.633>This <00:00:26.099>is

7
00:00:27.200 --> 00:00:30.300
<00:00:27.200>my <00:00:27.300>third <00:00:27.400>session <00:00:27.500>of <00:00:27.599>the <00:00:27.700>day. <00:00:27.800>So <00:00:27.900>I <00:00:28.000>just <00:00:28.099>said <00:00:28.200>the <00:00:28.300>wrong <00:00:28.400>word. <00:00:28.500>That's <00:00:28.599>so

8
00:00:30.300 --> 00:00:32.900
<00:00:30.300>bear <00:00:30.427>with <00:00:30.554>me, <00:00:30.681>but <00:00:30.809>I'm <00:00:30.936>really <00:00:31.063>excited <00:00:31.190>to <00:00:31.318>be <00:00:31.445>here <00:00:31.572>now, <00:00:31.700>so

9
00:00:34.800 --> 00:00:35.400
Clicker

10
00:00:36.800 --> 00:00:37.600
<00:00:36.800>Click <00:00:37.040>a <00:00:37.280>stopped <00:00:37.520>working.

11
00:00:38.500 --> 00:00:41.600
<00:00:38.500>Oh, <00:00:38.655>no, <00:00:38.811>it's <00:00:38.966>I <00:00:39.122>just <00:00:39.277>have <00:00:39.433>to <00:00:39.588>okay <00:00:39.744>agenda. <00:00:39.900>I

12
00:00:41.600 --> 00:00:44.300
<00:00:41.600>always <00:00:41.775>keep <00:00:41.950>my <00:00:42.125>agenda <00:00:42.300>perhaps <00:00:42.475>fully <00:00:42.650>vague <00:00:42.825>so <00:00:43.000>that

13
00:00:44.300 --> 00:00:47.100
<00:00:44.300>it <00:00:44.427>keeps <00:00:44.554>an <00:00:44.681>element <00:00:44.809>of <00:00:44.936>surprise. <00:00:45.063>What <00:00:45.190>are <00:00:45.318>we <00:00:45.445>here <00:00:45.572>to <00:00:45.699>talk

14
00:00:47.100 --> 00:00:50.300
<00:00:47.100>about <00:00:47.240>who's <00:00:47.380>involved? <00:00:47.520>How <00:00:47.660>are <00:00:47.800>we <00:00:47.940>gonna <00:00:48.080>fix <00:00:48.220>the <00:00:48.360>problem? <00:00:48.500>And

15
00:00:50.300 --> 00:00:53.000
<00:00:50.300>why <00:00:50.427>are <00:00:50.554>we <00:00:50.681>here <00:00:50.809>and <00:00:50.936>a <00:00:51.063>summary <00:00:51.190>in <00:00:51.318>Q&amp;A <00:00:51.445>at <00:00:51.572>the <00:00:51.699>end?

16
00:00:53.700 --> 00:00:56.100
<00:00:53.700>So <00:00:53.900>I'm <00:00:54.100>gonna <00:00:54.300>move <00:00:54.500>my <00:00:54.700>laptop <00:00:54.900>onto <00:00:55.100>this

17
00:00:56.100 --> 00:01:00.100
<00:00:56.100>box <00:00:56.255>so <00:00:56.411>that <00:00:56.566>it <00:00:56.722>works <00:00:56.877>better. <00:00:57.033>And <00:00:57.188>who <00:00:57.344>am <00:00:57.500>I

18
00:00:59.100 --> 00:01:02.300
<00:00:59.100>so <00:00:59.333>I <00:00:59.566>used <00:00:59.800>to <00:01:00.033>be <00:01:00.266>a <00:01:00.500>developer?

19
00:01:03.200 --> 00:01:07.000
<00:01:03.200>I <00:01:03.375>used <00:01:03.550>to <00:01:03.725>do <00:01:03.900>python <00:01:04.075>Java <00:01:04.250>rest <00:01:04.425>apis. <00:01:04.600>I'm

20
00:01:06.300 --> 00:01:09.500
<00:01:06.300>one <00:01:06.455>of <00:01:06.611>those <00:01:06.766>people <00:01:06.922>that <00:01:07.077>when <00:01:07.233>you <00:01:07.388>present <00:01:07.544>adjacent <00:01:07.700>to

21
00:01:09.500 --> 00:01:12.500
<00:01:09.500>I <00:01:09.627>can <00:01:09.754>more <00:01:09.881>or <00:01:10.009>less <00:01:10.136>work <00:01:10.263>out <00:01:10.390>exactly <00:01:10.518>how <00:01:10.645>many <00:01:10.772>squiggly <00:01:10.900>and

22
00:01:12.500 --> 00:01:14.700
<00:01:12.500>square <00:01:12.627>brackets <00:01:12.754>we <00:01:12.881>need <00:01:13.009>to <00:01:13.136>get <00:01:13.263>the <00:01:13.390>exact <00:01:13.518>value <00:01:13.645>that <00:01:13.772>you <00:01:13.900>need.

23
00:01:15.600 --> 00:01:18.600
<00:01:15.600>Then <00:01:15.833>I <00:01:16.066>moved <00:01:16.300>over <00:01:16.533>to <00:01:16.766>the <00:01:17.000>wonderful

24
00:01:18.600 --> 00:01:22.000
<00:01:18.600>world <00:01:18.949>of <00:01:19.300>security <00:01:19.649>working <00:01:20.000>in

25
00:01:21.300 --> 00:01:25.000
<00:01:21.300>deaf <00:01:21.580>secops <00:01:21.860>appsec <00:01:22.140>and <00:01:22.420>cloud-sec <00:01:22.700>and

26
00:01:24.300 --> 00:01:27.700
<00:01:24.300>now <00:01:24.580>I <00:01:24.860>work <00:01:25.140>at <00:01:25.420>gitlab <00:01:25.700>the

27
00:01:27.700 --> 00:01:29.400
<00:01:27.700>one <00:01:28.400>devops <00:01:29.100>platform.

28
00:01:32.900 --> 00:01:35.800
<00:01:32.900>Outside <00:01:33.055>of <00:01:33.211>work. <00:01:33.366>I <00:01:33.522>do <00:01:33.677>a <00:01:33.833>lot <00:01:33.988>of <00:01:34.144>Surfing <00:01:34.300>very

29
00:01:35.800 --> 00:01:38.300
<00:01:35.800>much <00:01:35.916>into <00:01:36.033>yoga <00:01:36.149>and <00:01:36.266>also <00:01:36.383>yeah, <00:01:36.500>I <00:01:36.616>have <00:01:36.733>a <00:01:36.850>lot <00:01:36.966>of <00:01:37.083>tropical <00:01:37.200>plants.

30
00:01:39.200 --> 00:01:43.200
<00:01:39.200>So <00:01:39.355>what <00:01:39.511>are <00:01:39.666>we <00:01:39.822>here <00:01:39.977>to <00:01:40.133>talk <00:01:40.288>about <00:01:40.444>today? <00:01:40.600>I'm

31
00:01:42.200 --> 00:01:43.900
<00:01:42.200>going <00:01:42.480>to <00:01:42.760>tell <00:01:43.040>you <00:01:43.320>a <00:01:43.600>story.

32
00:01:44.900 --> 00:01:47.400
<00:01:44.900>The <00:01:45.180>story <00:01:45.460>of <00:01:45.740>the <00:01:46.020>recurring <00:01:46.300>buck.

33
00:01:47.400 --> 00:01:50.900
<00:01:47.400>So <00:01:47.600>you <00:01:47.800>may <00:01:48.000>know <00:01:48.200>this <00:01:48.400>bug <00:01:48.600>maybe <00:01:48.800>it's

34
00:01:50.900 --> 00:01:54.200
<00:01:50.900>an <00:01:51.250>SQL <00:01:51.600>injection <00:01:51.950>reflected <00:01:52.300>cross-site

35
00:01:53.200 --> 00:01:54.600
scripting.

36
00:01:55.300 --> 00:01:58.500
<00:01:55.300>Username <00:01:55.455>and <00:01:55.611>enumeration. <00:01:55.766>It's <00:01:55.922>going <00:01:56.077>to <00:01:56.233>be <00:01:56.388>a <00:01:56.544>pretty <00:01:56.700>exotic

37
00:01:58.500 --> 00:02:02.100
<00:01:58.500>bug <00:01:58.627>and <00:01:58.754>it <00:01:58.881>has <00:01:59.009>a <00:01:59.136>bit <00:01:59.263>of <00:01:59.390>a <00:01:59.518>cycle <00:01:59.645>because <00:01:59.772>there's <00:01:59.900>a

38
00:02:01.100 --> 00:02:02.200
problem.

39
00:02:03.100 --> 00:02:06.300
<00:02:03.100>You <00:02:03.274>have <00:02:03.449>the <00:02:03.625>bug <00:02:03.800>goes <00:02:03.975>into <00:02:04.149>a <00:02:04.324>ticketing <00:02:04.500>system.

40
00:02:06.300 --> 00:02:10.400
<00:02:06.300>Then <00:02:06.500>someone <00:02:06.700>will <00:02:06.899>work <00:02:07.100>on <00:02:07.300>the <00:02:07.500>bug. <00:02:07.700>Then

41
00:02:09.400 --> 00:02:12.600
<00:02:09.400>that <00:02:09.866>knowledge. <00:02:10.333>Maybe <00:02:10.800>the

42
00:02:12.600 --> 00:02:15.600
<00:02:12.600>developer <00:02:12.799>moves <00:02:13.000>team, <00:02:13.200>maybe <00:02:13.400>moves <00:02:13.600>organization. <00:02:13.799>What <00:02:14.000>you

43
00:02:15.600 --> 00:02:18.200
<00:02:15.600>end <00:02:15.755>up <00:02:15.911>happening <00:02:16.066>is <00:02:16.222>then <00:02:16.377>a <00:02:16.533>few <00:02:16.688>weeks <00:02:16.844>a <00:02:17.000>few

44
00:02:18.200 --> 00:02:22.000
<00:02:18.200>months <00:02:18.480>later <00:02:18.760>the <00:02:19.040>same <00:02:19.320>bugs <00:02:19.600>appearing

45
00:02:21.200 --> 00:02:24.100
<00:02:21.200>again <00:02:21.375>and <00:02:21.549>again, <00:02:21.725>and <00:02:21.899>I <00:02:22.075>don't <00:02:22.250>know <00:02:22.424>about <00:02:22.600>your

46
00:02:24.100 --> 00:02:27.300
<00:02:24.100>experience. <00:02:24.227>But <00:02:24.354>at <00:02:24.481>least <00:02:24.609>when <00:02:24.736>I <00:02:24.863>was <00:02:24.990>a <00:02:25.118>developer, <00:02:25.245>it's <00:02:25.372>bad <00:02:25.500>enough

47
00:02:27.300 --> 00:02:30.600
<00:02:27.300>fixing <00:02:27.440>my <00:02:27.580>own <00:02:27.720>bugs, <00:02:27.860>but <00:02:28.000>especially <00:02:28.140>with <00:02:28.280>you <00:02:28.420>know <00:02:28.560>movement <00:02:28.700>attrition.

48
00:02:30.600 --> 00:02:33.700
<00:02:30.600>It's <00:02:30.775>even <00:02:30.950>worse <00:02:31.125>fixing <00:02:31.299>someone <00:02:31.475>else's <00:02:31.650>code <00:02:31.825>when <00:02:32.000>I'm

49
00:02:33.700 --> 00:02:36.500
<00:02:33.700>not <00:02:33.899>really <00:02:34.100>sure <00:02:34.299>what <00:02:34.500>these <00:02:34.700>vulnerabilities <00:02:34.899>even <00:02:35.100>mean.

50
00:02:37.700 --> 00:02:38.100
so

51
00:02:39.100 --> 00:02:40.200
<00:02:39.100>we <00:02:39.347>have <00:02:39.595>a <00:02:39.842>nice <00:02:40.089>buck.

52
00:02:40.900 --> 00:02:43.100
<00:02:40.900>Some <00:02:41.180>of <00:02:41.460>you <00:02:41.740>may <00:02:42.020>be <00:02:42.300>familiar

53
00:02:43.100 --> 00:02:47.100
<00:02:43.100>with <00:02:43.227>the <00:02:43.354>ow <00:02:43.481>wasp <00:02:43.609>top <00:02:43.736>10. <00:02:43.863>So <00:02:43.990>these <00:02:44.118>are <00:02:44.245>the <00:02:44.372>10 <00:02:44.500>worst

54
00:02:46.100 --> 00:02:49.300
<00:02:46.100>vulnerabilities <00:02:46.380>and <00:02:46.660>they <00:02:46.940>change <00:02:47.220>every <00:02:47.500>few

55
00:02:49.300 --> 00:02:54.000
<00:02:49.300>years <00:02:49.475>and <00:02:49.650>they <00:02:49.825>usually <00:02:50.000>involve <00:02:50.175>things <00:02:50.350>like <00:02:50.525>authentication <00:02:50.700>injection

56
00:02:52.500 --> 00:02:56.600
<00:02:52.500>floors <00:02:53.200>encryption <00:02:53.900>sensitive

57
00:02:55.600 --> 00:02:58.300
<00:02:55.600>data <00:02:55.950>Etc. <00:02:56.299>And <00:02:56.650>these <00:02:57.000>are

58
00:02:58.300 --> 00:03:01.400
<00:02:58.300>the <00:02:58.440>top <00:02:58.580>10. <00:02:58.720>This <00:02:58.860>is <00:02:59.000>a <00:02:59.140>focus <00:02:59.280>area <00:02:59.420>for <00:02:59.560>most <00:02:59.700>organizations.

59
00:03:02.300 --> 00:03:03.400
<00:03:02.300>But <00:03:02.795>what <00:03:03.290>about

60
00:03:05.900 --> 00:03:08.400
<00:03:05.900>11 <00:03:06.366>12 <00:03:06.833>and <00:03:07.300>13

61
00:03:09.200 --> 00:03:12.400
<00:03:09.200>Or <00:03:09.433>also <00:03:09.666>another <00:03:09.899>metric <00:03:10.133>the <00:03:10.366>Sands <00:03:10.600>the

62
00:03:12.400 --> 00:03:15.300
<00:03:12.400>top <00:03:12.680>25 <00:03:12.960>vulnerabilities <00:03:13.240>because <00:03:13.520>let's <00:03:13.800>be

63
00:03:15.300 --> 00:03:18.500
<00:03:15.300>honest. <00:03:15.455>There <00:03:15.611>are <00:03:15.766>more <00:03:15.922>than <00:03:16.077>10 <00:03:16.233>vulnerabilities <00:03:16.388>around <00:03:16.544>and <00:03:16.700>then

64
00:03:18.500 --> 00:03:21.200
<00:03:18.500>you <00:03:18.616>start <00:03:18.733>thinking <00:03:18.850>a <00:03:18.966>bit <00:03:19.083>bigger <00:03:19.200>than <00:03:19.316>abstract. <00:03:19.433>So <00:03:19.550>what <00:03:19.666>about <00:03:19.783>you <00:03:19.900>know

65
00:03:21.200 --> 00:03:25.300
<00:03:21.200>Cloud <00:03:21.433>security <00:03:21.666>networking <00:03:21.899>anything <00:03:22.133>with <00:03:22.366>environments <00:03:22.600>or

66
00:03:24.300 --> 00:03:26.000
<00:03:24.300>even <00:03:25.700>worse?

67
00:03:27.400 --> 00:03:30.400
<00:03:27.400>Human <00:03:27.633>error <00:03:27.866>a <00:03:28.100>lot <00:03:28.333>of <00:03:28.566>vulnerabilities <00:03:28.800>are

68
00:03:30.400 --> 00:03:33.200
<00:03:30.400>caused <00:03:30.527>by <00:03:30.654>human <00:03:30.781>error. <00:03:30.909>And <00:03:31.036>this <00:03:31.163>can <00:03:31.290>either <00:03:31.418>be <00:03:31.545>a <00:03:31.672>mistake, <00:03:31.800>you

69
00:03:33.200 --> 00:03:35.600
<00:03:33.200>know <00:03:33.433>fat <00:03:33.666>fingers <00:03:33.899>Etc <00:03:34.133>or <00:03:34.366>even <00:03:34.600>just

70
00:03:37.200 --> 00:03:40.900
<00:03:37.200>Say <00:03:37.316>for <00:03:37.433>example, <00:03:37.549>if <00:03:37.666>you <00:03:37.783>have <00:03:37.899>a <00:03:38.016>login <00:03:38.133>page, <00:03:38.250>you <00:03:38.366>know, <00:03:38.483>if <00:03:38.600>the

71
00:03:40.900 --> 00:03:44.000
<00:03:40.900>password <00:03:41.180>is <00:03:41.460>wrong <00:03:41.740>say <00:03:42.020>print. <00:03:42.300>Well,

72
00:03:43.300 --> 00:03:46.500
<00:03:43.300>you <00:03:43.475>wouldn't <00:03:43.650>print <00:03:43.825>but <00:03:44.000>you <00:03:44.175>know <00:03:44.350>print <00:03:44.525>password <00:03:44.700>is

73
00:03:46.500 --> 00:03:49.500
<00:03:46.500>wrong <00:03:46.700>problem <00:03:46.900>is <00:03:47.100>that's <00:03:47.300>actually <00:03:47.500>a <00:03:47.700>vulnerability <00:03:47.900>because

74
00:03:49.500 --> 00:03:52.500
<00:03:49.500>then <00:03:49.655>a <00:03:49.811>hacker <00:03:49.966>would <00:03:50.122>know <00:03:50.277>aha. <00:03:50.433>The <00:03:50.588>password <00:03:50.744>is <00:03:50.900>wrong.

75
00:03:52.500 --> 00:03:55.700
<00:03:52.500>The <00:03:52.655>username <00:03:52.811>is <00:03:52.966>right. <00:03:53.122>So <00:03:53.277>then <00:03:53.433>I <00:03:53.588>can <00:03:53.744>start <00:03:53.900>brute

76
00:03:55.700 --> 00:03:58.400
<00:03:55.700>forcing. <00:03:55.899>I <00:03:56.100>can <00:03:56.299>start <00:03:56.500>credential <00:03:56.700>stuffing <00:03:56.899>so <00:03:57.100>you

77
00:03:58.400 --> 00:04:01.800
<00:03:58.400>get <00:03:58.555>some <00:03:58.711>issues <00:03:58.866>with <00:03:59.022>you <00:03:59.177>know, <00:03:59.333>what <00:03:59.488>is <00:03:59.644>semantic <00:03:59.800>security

78
00:04:01.800 --> 00:04:04.500
<00:04:01.800>and <00:04:02.000>then <00:04:02.200>what <00:04:02.400>is <00:04:02.600>you <00:04:02.800>know <00:04:03.000>available <00:04:03.200>that

79
00:04:05.700 --> 00:04:08.800
<00:04:05.700>So <00:04:06.166>common <00:04:06.633>pain <00:04:07.100>points.

80
00:04:08.800 --> 00:04:11.000
<00:04:08.800>What <00:04:09.080>do <00:04:09.360>we <00:04:09.640>have <00:04:09.920>happening? <00:04:10.200>So

81
00:04:11.600 --> 00:04:14.200
<00:04:11.600>Recurring <00:04:11.799>bugs. <00:04:12.000>So <00:04:12.200>like <00:04:12.400>I <00:04:12.600>said <00:04:12.799>the <00:04:13.000>same

82
00:04:14.200 --> 00:04:16.300
<00:04:14.200>bugs <00:04:14.549>happening <00:04:14.899>again <00:04:15.250>and <00:04:15.600>again,

83
00:04:17.200 --> 00:04:20.800
<00:04:17.200>Also <00:04:17.433>context <00:04:17.666>switching <00:04:17.899>and <00:04:18.133>requirements <00:04:18.366>changing. <00:04:18.599>If

84
00:04:20.800 --> 00:04:23.900
<00:04:20.800>I <00:04:20.975>am <00:04:21.150>in <00:04:21.325>the <00:04:21.500>middle <00:04:21.675>of <00:04:21.850>one <00:04:22.025>project. <00:04:22.200>The

85
00:04:23.900 --> 00:04:26.800
<00:04:23.900>last <00:04:24.075>thing <00:04:24.250>I <00:04:24.424>want <00:04:24.599>to <00:04:24.775>do <00:04:24.950>is <00:04:25.125>fix <00:04:25.299>a

86
00:04:26.800 --> 00:04:29.900
<00:04:26.800>vulnerability <00:04:27.033>or <00:04:27.266>someone <00:04:27.500>else's <00:04:27.733>from <00:04:27.966>a <00:04:28.200>week

87
00:04:29.900 --> 00:04:32.400
<00:04:29.900>a <00:04:30.099>few <00:04:30.299>weeks <00:04:30.500>ago <00:04:30.700>whenever <00:04:30.900>and <00:04:31.099>having <00:04:31.299>that

88
00:04:32.400 --> 00:04:35.700
<00:04:32.400>just <00:04:32.555>that <00:04:32.711>switch <00:04:32.866>is <00:04:33.022>is <00:04:33.177>not <00:04:33.333>ideal <00:04:33.488>for <00:04:33.644>flow <00:04:33.799>and

89
00:04:35.700 --> 00:04:38.200
<00:04:35.700>finally <00:04:35.900>burnouts, <00:04:36.099>especially <00:04:36.300>with <00:04:36.500>what <00:04:36.700>we've <00:04:36.900>gone <00:04:37.099>through

90
00:04:38.200 --> 00:04:41.100
<00:04:38.200>in <00:04:38.316>the <00:04:38.433>last <00:04:38.550>two <00:04:38.666>years. <00:04:38.783>We <00:04:38.900>kind <00:04:39.016>of <00:04:39.133>all <00:04:39.250>went <00:04:39.366>indoors <00:04:39.483>a <00:04:39.599>lot

91
00:04:41.100 --> 00:04:44.700
<00:04:41.100>of <00:04:41.193>people <00:04:41.286>focused <00:04:41.380>on <00:04:41.473>work <00:04:41.566>because <00:04:41.660>there <00:04:41.753>wasn't <00:04:41.846>much <00:04:41.940>else <00:04:42.033>to <00:04:42.126>do <00:04:42.220>and <00:04:42.313>then <00:04:42.406>having <00:04:42.500>that

92
00:04:44.700 --> 00:04:47.700
<00:04:44.700>consistently <00:04:44.900>especially <00:04:45.099>if <00:04:45.300>you're <00:04:45.500>dealing <00:04:45.700>with <00:04:45.900>recurring <00:04:46.099>bugs

93
00:04:47.700 --> 00:04:49.200
<00:04:47.700>Banner <00:04:48.037>is <00:04:48.375>a <00:04:48.712>real <00:04:49.050>issue.

94
00:04:50.800 --> 00:04:52.300
<00:04:50.800>So <00:04:51.025>who <00:04:51.250>we <00:04:51.475>here <00:04:51.700>to <00:04:51.925>talk <00:04:52.150>about?

95
00:04:53.500 --> 00:04:57.200
<00:04:53.500>Going <00:04:53.675>to <00:04:53.850>talk <00:04:54.025>to <00:04:54.200>you <00:04:54.375>about <00:04:54.550>my <00:04:54.725>silos. <00:04:54.900>So

96
00:04:56.200 --> 00:04:58.900
<00:04:56.200>I've <00:04:56.479>got <00:04:56.760>three <00:04:57.039>main <00:04:57.320>personas <00:04:57.599>here.

97
00:04:59.600 --> 00:05:00.300
Developers

98
00:05:01.300 --> 00:05:04.300
<00:05:01.300>which <00:05:01.455>hopefully <00:05:01.611>most <00:05:01.766>people <00:05:01.922>in <00:05:02.077>the <00:05:02.233>room <00:05:02.388>should <00:05:02.544>know <00:05:02.700>what

99
00:05:04.300 --> 00:05:08.500
<00:05:04.300>developers <00:05:04.475>are <00:05:04.650>and <00:05:04.825>but <00:05:05.000>speaking <00:05:05.175>from <00:05:05.350>experience <00:05:05.525>developers. <00:05:05.700>We

100
00:05:08.500 --> 00:05:12.600
<00:05:08.500>like <00:05:08.700>we <00:05:08.900>like <00:05:09.100>coding <00:05:09.300>we <00:05:09.500>are <00:05:09.700>kpi <00:05:09.900>on

101
00:05:12.600 --> 00:05:15.300
<00:05:12.600>stuff <00:05:12.775>like, <00:05:12.950>you <00:05:13.125>know <00:05:13.300>features <00:05:13.475>getting <00:05:13.650>product <00:05:13.825>out <00:05:14.000>the

102
00:05:15.300 --> 00:05:15.500
door.

103
00:05:16.400 --> 00:05:19.400
<00:05:16.400>Then <00:05:16.599>we <00:05:16.799>have <00:05:17.000>security <00:05:17.200>and <00:05:17.400>security <00:05:17.599>is <00:05:17.799>much

104
00:05:19.400 --> 00:05:22.500
<00:05:19.400>more. <00:05:19.575>It's <00:05:19.750>ultimately <00:05:19.924>it's <00:05:20.099>a <00:05:20.275>quality <00:05:20.450>check <00:05:20.625>but <00:05:20.799>with

105
00:05:22.500 --> 00:05:25.500
<00:05:22.500>developers <00:05:22.700>and <00:05:22.900>security. <00:05:23.100>They're <00:05:23.300>speaking <00:05:23.500>different <00:05:23.700>languages. <00:05:23.900>They

106
00:05:25.500 --> 00:05:28.900
<00:05:25.500>have <00:05:25.700>different <00:05:25.900>kpis. <00:05:26.100>And <00:05:26.300>also <00:05:26.500>they're <00:05:26.700>quite <00:05:26.900>outnumbered

107
00:05:28.900 --> 00:05:31.500
<00:05:28.900>in <00:05:29.099>general <00:05:29.299>you <00:05:29.500>tend <00:05:29.700>to <00:05:29.900>have <00:05:30.099>about <00:05:30.299>a

108
00:05:31.500 --> 00:05:34.400
<00:05:31.500>hundred <00:05:31.850>Developers <00:05:32.200>for <00:05:32.550>One <00:05:32.900>Security.

109
00:05:35.700 --> 00:05:37.000
<00:05:35.700>And <00:05:35.992>then <00:05:36.284>you <00:05:36.577>have <00:05:36.870>UPS.

110
00:05:37.800 --> 00:05:40.200
<00:05:37.800>So <00:05:37.907>you <00:05:38.015>end <00:05:38.123>up <00:05:38.230>with <00:05:38.338>Ops <00:05:38.446>you <00:05:38.553>probably <00:05:38.661>end <00:05:38.769>up <00:05:38.876>with <00:05:38.984>about <00:05:39.092>10 <00:05:39.200>and

111
00:05:40.200 --> 00:05:43.900
<00:05:40.200>the <00:05:40.375>thing <00:05:40.550>is <00:05:40.724>about <00:05:40.900>the <00:05:41.075>silos <00:05:41.250>is <00:05:41.425>everyone. <00:05:41.599>Yeah

112
00:05:43.900 --> 00:05:46.300
<00:05:43.900>different <00:05:44.366>kpis <00:05:44.833>looking <00:05:45.299>for.

113
00:05:47.700 --> 00:05:50.500
<00:05:47.700>You <00:05:47.875>know <00:05:48.050>different <00:05:48.224>business <00:05:48.400>areas <00:05:48.575>different <00:05:48.750>ways <00:05:48.925>of <00:05:49.099>speaking

114
00:05:50.500 --> 00:05:54.000
<00:05:50.500>and <00:05:50.655>it's <00:05:50.811>really <00:05:50.966>important <00:05:51.122>to <00:05:51.277>have <00:05:51.433>you <00:05:51.588>know <00:05:51.744>communication <00:05:51.900>to

115
00:05:53.300 --> 00:05:56.200
<00:05:53.300>remember <00:05:53.475>we <00:05:53.650>are <00:05:53.825>all <00:05:54.000>on <00:05:54.175>the <00:05:54.350>same <00:05:54.525>team. <00:05:54.700>We

116
00:05:56.200 --> 00:05:59.100
<00:05:56.200>are <00:05:56.340>trying <00:05:56.479>to <00:05:56.620>work <00:05:56.760>together <00:05:56.900>security. <00:05:57.039>I <00:05:57.180>promise <00:05:57.320>isn't <00:05:57.460>the <00:05:57.599>bad

117
00:05:59.100 --> 00:06:03.100
<00:05:59.100>guy. <00:05:59.200>I've <00:05:59.300>worked <00:05:59.400>on <00:05:59.500>both <00:05:59.600>sides <00:05:59.700>so <00:05:59.800>I <00:05:59.900>can <00:06:00.000>I <00:06:00.100>can <00:06:00.200>see <00:06:00.300>it <00:06:00.400>now. <00:06:00.500>But

118
00:06:02.100 --> 00:06:05.500
<00:06:02.100>ultimately <00:06:02.380>we're <00:06:02.660>just <00:06:02.940>trying <00:06:03.220>trying <00:06:03.500>not

119
00:06:05.500 --> 00:06:08.700
<00:06:05.500>to <00:06:05.655>get <00:06:05.811>hacked <00:06:05.966>because <00:06:06.122>you <00:06:06.277>don't <00:06:06.433>want <00:06:06.588>to <00:06:06.744>end <00:06:06.900>up

120
00:06:08.700 --> 00:06:11.300
<00:06:08.700>like <00:06:09.050>this <00:06:09.400>and <00:06:09.750>it's <00:06:10.099>not

121
00:06:11.300 --> 00:06:14.400
<00:06:11.300>even <00:06:11.475>just <00:06:11.650>about <00:06:11.825>security. <00:06:12.000>So <00:06:12.175>I <00:06:12.350>like <00:06:12.525>to <00:06:12.700>hang

122
00:06:14.400 --> 00:06:17.300
<00:06:14.400>out <00:06:14.516>in <00:06:14.633>two <00:06:14.750>different <00:06:14.866>slack <00:06:14.983>channels <00:06:15.099>at <00:06:15.216>work <00:06:15.333>whenever <00:06:15.450>I <00:06:15.566>join <00:06:15.683>a <00:06:15.799>company.

123
00:06:17.300 --> 00:06:20.300
<00:06:17.300>The <00:06:17.440>first <00:06:17.580>one <00:06:17.720>is <00:06:17.860>the <00:06:18.000>gaming <00:06:18.140>one <00:06:18.280>because <00:06:18.420>obviously <00:06:18.560>that's <00:06:18.700>gonna

124
00:06:20.300 --> 00:06:23.400
<00:06:20.300>be <00:06:20.400>where <00:06:20.500>the <00:06:20.600>fun <00:06:20.700>is <00:06:20.800>and <00:06:20.900>the <00:06:21.000>other <00:06:21.100>is <00:06:21.200>engineering <00:06:21.300>and <00:06:21.400>I <00:06:21.500>remember <00:06:21.600>that <00:06:21.700>was

125
00:06:23.400 --> 00:06:26.300
<00:06:23.400>once <00:06:23.527>this <00:06:23.654>graph <00:06:23.781>and <00:06:23.909>it <00:06:24.036>was <00:06:24.163>like <00:06:24.290>really <00:06:24.418>high <00:06:24.545>and <00:06:24.672>then <00:06:24.799>it

126
00:06:26.300 --> 00:06:29.900
<00:06:26.300>went <00:06:26.427>down <00:06:26.554>and <00:06:26.681>it <00:06:26.809>was <00:06:26.936>really <00:06:27.063>low <00:06:27.190>and <00:06:27.318>one <00:06:27.445>of <00:06:27.572>the <00:06:27.700>co-founders

127
00:06:29.900 --> 00:06:32.200
<00:06:29.900>had <00:06:30.250>written. <00:06:30.599>Okay, <00:06:30.950>we <00:06:31.299>have

128
00:06:32.200 --> 00:06:35.300
<00:06:32.200>looked <00:06:32.433>at <00:06:32.666>our <00:06:32.900>AWS <00:06:33.133>Bill <00:06:33.366>and <00:06:33.599>because

129
00:06:35.300 --> 00:06:38.100
<00:06:35.300>of <00:06:35.533>a <00:06:35.766>misconfiguration <00:06:36.000>in <00:06:36.233>eks, <00:06:36.466>so <00:06:36.700>in

130
00:06:38.100 --> 00:06:41.300
<00:06:38.100>kubernetes <00:06:38.300>something <00:06:38.500>with <00:06:38.700>spawning <00:06:38.900>over <00:06:39.100>spawning <00:06:39.300>falling <00:06:39.500>over

131
00:06:41.300 --> 00:06:44.300
<00:06:41.300>that's <00:06:41.580>very <00:06:41.860>expensive. <00:06:42.140>So <00:06:42.420>we <00:06:42.700>have

132
00:06:44.300 --> 00:06:47.200
<00:06:44.300>now <00:06:44.533>reduce <00:06:44.766>the <00:06:45.000>AWS <00:06:45.233>that <00:06:45.466>bill <00:06:45.700>from

133
00:06:47.700 --> 00:06:50.300
<00:06:47.700>Thousand <00:06:47.933>a <00:06:48.166>month <00:06:48.400>to <00:06:48.633>1,000 <00:06:48.866>months. <00:06:49.099>So

134
00:06:50.300 --> 00:06:53.200
<00:06:50.300>it's <00:06:50.427>not <00:06:50.554>even <00:06:50.681>just <00:06:50.809>about <00:06:50.936>security. <00:06:51.063>It's <00:06:51.190>about <00:06:51.318>making <00:06:51.445>sure <00:06:51.572>that <00:06:51.700>we're

135
00:06:53.200 --> 00:06:56.200
<00:06:53.200>thinking <00:06:53.355>about <00:06:53.511>what <00:06:53.666>we're <00:06:53.822>doing <00:06:53.977>how <00:06:54.133>it <00:06:54.288>configuring <00:06:54.444>and <00:06:54.599>having

136
00:06:56.200 --> 00:06:59.200
<00:06:56.200>security <00:06:56.375>at <00:06:56.550>the <00:06:56.724>Forefront <00:06:56.900>because <00:06:57.075>like <00:06:57.250>I <00:06:57.425>said, <00:06:57.599>if

137
00:06:59.200 --> 00:07:02.400
<00:06:59.200>we <00:06:59.355>have <00:06:59.511>a <00:06:59.666>hundred <00:06:59.822>developers <00:06:59.977>to <00:07:00.133>One <00:07:00.288>Security <00:07:00.444>if <00:07:00.599>we

138
00:07:02.400 --> 00:07:06.000
<00:07:02.400>can <00:07:02.599>make <00:07:02.799>every <00:07:03.000>developer <00:07:03.200>one <00:07:03.400>percent <00:07:03.599>better <00:07:03.799>that's

139
00:07:05.200 --> 00:07:08.900
<00:07:05.200>gonna <00:07:05.550>have <00:07:05.900>massive <00:07:06.250>incremental <00:07:06.599>gains.

140
00:07:10.200 --> 00:07:10.500
So

141
00:07:11.300 --> 00:07:14.800
<00:07:11.300>and <00:07:11.455>this <00:07:11.611>comes <00:07:11.766>to <00:07:11.922>the <00:07:12.077>security <00:07:12.233>Champion <00:07:12.388>so <00:07:12.544>many <00:07:12.700>organizations

142
00:07:14.800 --> 00:07:17.600
<00:07:14.800>have <00:07:15.080>security <00:07:15.360>Champion <00:07:15.640>programs <00:07:15.920>and <00:07:16.200>they're

143
00:07:17.600 --> 00:07:20.600
<00:07:17.600>great. <00:07:17.740>What <00:07:17.880>you <00:07:18.020>tend <00:07:18.160>to <00:07:18.300>find <00:07:18.440>is <00:07:18.580>their <00:07:18.720>developers <00:07:18.860>that <00:07:19.000>are

144
00:07:20.600 --> 00:07:23.900
<00:07:20.600>either <00:07:20.880>very <00:07:21.160>passionate <00:07:21.440>very <00:07:21.720>paranoid <00:07:22.000>about

145
00:07:23.900 --> 00:07:26.500
<00:07:23.900>security. <00:07:24.133>They <00:07:24.366>know <00:07:24.599>enough <00:07:24.833>about <00:07:25.066>security <00:07:25.299>to

146
00:07:26.500 --> 00:07:29.100
<00:07:26.500>then <00:07:26.655>kind <00:07:26.811>of, <00:07:26.966>you <00:07:27.122>know, <00:07:27.277>disseminate <00:07:27.433>the <00:07:27.588>knowledge, <00:07:27.744>but <00:07:27.900>what

147
00:07:29.100 --> 00:07:33.100
<00:07:29.100>you <00:07:29.227>tend <00:07:29.354>to <00:07:29.481>have <00:07:29.609>is <00:07:29.736>maybe <00:07:29.863>maybe <00:07:29.990>one <00:07:30.118>in <00:07:30.245>20 <00:07:30.372>from <00:07:30.500>developers

148
00:07:32.100 --> 00:07:34.800
<00:07:32.100>to <00:07:32.450>kind <00:07:32.800>of <00:07:33.150>security <00:07:33.500>champions.

149
00:07:35.400 --> 00:07:38.400
<00:07:35.400>But <00:07:35.575>why <00:07:35.750>can't <00:07:35.924>everyone <00:07:36.099>be <00:07:36.275>a <00:07:36.450>security <00:07:36.625>Champion? <00:07:36.799>Why

150
00:07:38.400 --> 00:07:41.500
<00:07:38.400>don't <00:07:38.555>we <00:07:38.711>give <00:07:38.866>all <00:07:39.022>developers <00:07:39.177>the <00:07:39.333>tools <00:07:39.488>the <00:07:39.644>knowledge <00:07:39.799>the

151
00:07:41.500 --> 00:07:44.200
<00:07:41.500>time <00:07:41.700>to <00:07:41.900>learn <00:07:42.100>so <00:07:42.300>that <00:07:42.500>everyone <00:07:42.700>like <00:07:42.900>I

152
00:07:44.200 --> 00:07:47.700
<00:07:44.200>said <00:07:44.355>can <00:07:44.511>just <00:07:44.666>be <00:07:44.822>you <00:07:44.977>know, <00:07:45.133>incremental <00:07:45.288>1% <00:07:45.444>better <00:07:45.599>compound

153
00:07:47.700 --> 00:07:48.700
<00:07:47.700>interest <00:07:48.599>Etc.

154
00:07:50.300 --> 00:07:53.300
<00:07:50.300>So, <00:07:50.475>how <00:07:50.650>how <00:07:50.825>are <00:07:51.000>we <00:07:51.175>going <00:07:51.350>to <00:07:51.525>do <00:07:51.700>this?

155
00:07:53.300 --> 00:07:56.600
<00:07:53.300>How <00:07:53.475>are <00:07:53.650>we <00:07:53.825>going <00:07:54.000>to <00:07:54.175>empower <00:07:54.350>our <00:07:54.525>developers <00:07:54.700>to

156
00:07:56.600 --> 00:07:58.700
<00:07:56.600>solve <00:07:57.300>security <00:07:58.000>together?

157
00:08:00.100 --> 00:08:03.700
<00:08:00.100>So <00:08:00.333>I <00:08:00.566>mentioned <00:08:00.800>I <00:08:01.033>was <00:08:01.266>before <00:08:01.500>they

158
00:08:03.700 --> 00:08:05.400
<00:08:03.700>have <00:08:04.166>a <00:08:04.633>top <00:08:05.099>10.

159
00:08:06.300 --> 00:08:09.500
<00:08:06.300>So <00:08:06.407>these <00:08:06.515>are <00:08:06.623>the <00:08:06.730>top <00:08:06.838>10 <00:08:06.946>vulnerabilities <00:08:07.053>if <00:08:07.161>you <00:08:07.269>haven't <00:08:07.376>heard <00:08:07.484>of <00:08:07.592>Oz <00:08:07.700>by

160
00:08:09.500 --> 00:08:12.300
<00:08:09.500>would <00:08:09.616>check <00:08:09.733>it <00:08:09.850>out <00:08:09.966>because <00:08:10.083>the <00:08:10.200>other <00:08:10.316>good <00:08:10.433>thing <00:08:10.550>about <00:08:10.666>oh <00:08:10.783>wasp <00:08:10.900>is

161
00:08:12.300 --> 00:08:15.400
<00:08:12.300>they <00:08:12.533>have <00:08:12.766>a <00:08:13.000>lot <00:08:13.233>of <00:08:13.466>free <00:08:13.700>tools

162
00:08:15.400 --> 00:08:18.300
<00:08:15.400>out <00:08:15.555>there. <00:08:15.711>So <00:08:15.866>for <00:08:16.022>example, <00:08:16.177>one <00:08:16.333>of <00:08:16.488>them <00:08:16.644>is <00:08:16.799>called

163
00:08:18.300 --> 00:08:22.000
<00:08:18.300>zap <00:08:18.500>zap <00:08:18.700>is <00:08:18.900>really <00:08:19.100>good <00:08:19.300>for <00:08:19.500>dynamic <00:08:19.700>application

164
00:08:21.300 --> 00:08:24.400
<00:08:21.300>security <00:08:21.580>testing. <00:08:21.860>There <00:08:22.140>are <00:08:22.420>other <00:08:22.700>tools

165
00:08:24.400 --> 00:08:27.600
<00:08:24.400>out <00:08:24.527>there. <00:08:24.654>So <00:08:24.781>for <00:08:24.909>example, <00:08:25.036>if <00:08:25.163>you <00:08:25.290>are <00:08:25.418>using <00:08:25.545>open <00:08:25.672>source, <00:08:25.799>there

166
00:08:27.600 --> 00:08:30.500
<00:08:27.600>is <00:08:27.755>a <00:08:27.911>tool <00:08:28.066>out <00:08:28.222>there <00:08:28.377>called <00:08:28.533>debt <00:08:28.688>Checker <00:08:28.844>dependency <00:08:29.000>Checker

167
00:08:30.500 --> 00:08:34.200
<00:08:30.500>and <00:08:30.655>that <00:08:30.811>will <00:08:30.966>tell <00:08:31.122>you <00:08:31.277>you <00:08:31.433>know, <00:08:31.588>what <00:08:31.744>what <00:08:31.900>open

168
00:08:33.200 --> 00:08:36.500
<00:08:33.200>source <00:08:33.400>you're <00:08:33.600>using <00:08:33.800>and <00:08:34.000>your <00:08:34.200>components <00:08:34.400>similar. <00:08:34.600>I

169
00:08:36.500 --> 00:08:39.800
<00:08:36.500>think <00:08:36.655>it's <00:08:36.811>called <00:08:36.966>Cyclone. <00:08:37.122>There's <00:08:37.277>now <00:08:37.433>one <00:08:37.588>that's <00:08:37.744>software <00:08:37.900>bill

170
00:08:39.800 --> 00:08:42.800
<00:08:39.799>of <00:08:39.955>materials. <00:08:40.111>So <00:08:40.266>you <00:08:40.422>can <00:08:40.577>have <00:08:40.733>an <00:08:40.888>audit <00:08:41.044>of <00:08:41.199>you

171
00:08:42.800 --> 00:08:45.100
<00:08:42.799>know, <00:08:42.974>what <00:08:43.150>components <00:08:43.324>you're <00:08:43.500>using <00:08:43.674>and <00:08:43.849>especially <00:08:44.025>if <00:08:44.199>you

172
00:08:45.100 --> 00:08:48.800
<00:08:45.100>are <00:08:45.240>working <00:08:45.380>either <00:08:45.520>in <00:08:45.660>an <00:08:45.800>American <00:08:45.940>company <00:08:46.080>or <00:08:46.220>with <00:08:46.360>Americans <00:08:46.500>with

173
00:08:48.800 --> 00:08:51.700
<00:08:48.800>the <00:08:49.000>latest <00:08:49.199>executive <00:08:49.400>order <00:08:49.599>having <00:08:49.800>a <00:08:50.000>software <00:08:50.199>level

174
00:08:51.700 --> 00:08:54.700
<00:08:51.700>of <00:08:51.807>materials <00:08:51.915>tends <00:08:52.023>to <00:08:52.130>be <00:08:52.238>a <00:08:52.346>good <00:08:52.453>idea. <00:08:52.561>But <00:08:52.669>you <00:08:52.776>know, <00:08:52.884>why <00:08:52.992>stop <00:08:53.100>just

175
00:08:54.700 --> 00:08:57.300
<00:08:54.700>software <00:08:54.855>why <00:08:55.011>not <00:08:55.166>have <00:08:55.322>a <00:08:55.477>hardware <00:08:55.633>below <00:08:55.788>materials <00:08:55.944>or <00:08:56.100>just

176
00:08:57.300 --> 00:08:59.000
<00:08:57.300>be <00:08:57.579>aware <00:08:57.859>of <00:08:58.140>what <00:08:58.420>you're <00:08:58.699>using?

177
00:09:00.500 --> 00:09:03.200
<00:09:00.500>Also <00:09:00.655>with <00:09:00.811>oast, <00:09:00.966>there's <00:09:01.122>a <00:09:01.277>project <00:09:01.433>called <00:09:01.588>Dev <00:09:01.744>slot. <00:09:01.900>This

178
00:09:03.200 --> 00:09:06.200
<00:09:03.200>is <00:09:03.355>all <00:09:03.511>about, <00:09:03.666>you <00:09:03.822>know <00:09:03.977>devops <00:09:04.133>and <00:09:04.288>it's <00:09:04.444>a <00:09:04.600>really

179
00:09:06.200 --> 00:09:09.900
<00:09:06.200>it's <00:09:06.307>a <00:09:06.415>really <00:09:06.523>good <00:09:06.630>way <00:09:06.738>to <00:09:06.846>learn <00:09:06.953>that's <00:09:07.061>kind <00:09:07.169>of <00:09:07.276>loads <00:09:07.384>of <00:09:07.492>information <00:09:07.600>out

180
00:09:09.900 --> 00:09:12.100
<00:09:09.900>there <00:09:10.016>and <00:09:10.133>you <00:09:10.250>can <00:09:10.366>kind <00:09:10.483>of <00:09:10.600>check <00:09:10.716>it <00:09:10.833>out <00:09:10.949>at <00:09:11.066>the <00:09:11.183>link <00:09:11.300>there.

181
00:09:14.400 --> 00:09:17.400
<00:09:14.400>So <00:09:14.540>I <00:09:14.680>wasp <00:09:14.819>is <00:09:14.959>great. <00:09:15.100>And <00:09:15.240>these <00:09:15.380>are <00:09:15.520>if <00:09:15.660>you <00:09:15.800>are

182
00:09:17.400 --> 00:09:20.200
<00:09:17.400>in <00:09:17.633>a <00:09:17.866>development <00:09:18.100>team <00:09:18.333>and <00:09:18.566>you <00:09:18.800>might

183
00:09:20.200 --> 00:09:23.900
<00:09:20.200>have <00:09:20.327>an <00:09:20.454>interest <00:09:20.581>in <00:09:20.709>security <00:09:20.836>or <00:09:20.963>you <00:09:21.090>might <00:09:21.218>be <00:09:21.345>thinking. <00:09:21.472>Okay, <00:09:21.600>how

184
00:09:23.900 --> 00:09:27.000
<00:09:23.900>bad <00:09:24.180>really <00:09:24.459>is <00:09:24.740>it? <00:09:25.020>Oh <00:09:25.300>wasp

185
00:09:26.100 --> 00:09:29.300
<00:09:26.100>is <00:09:26.255>great <00:09:26.411>for <00:09:26.566>tools <00:09:26.722>to <00:09:26.877>have <00:09:27.033>a <00:09:27.188>look <00:09:27.344>and <00:09:27.500>then

186
00:09:29.300 --> 00:09:32.200
<00:09:29.300>see <00:09:29.455>actually, <00:09:29.611>how <00:09:29.766>are <00:09:29.922>we <00:09:30.077>doing? <00:09:30.233>Let <00:09:30.388>me <00:09:30.544>just <00:09:30.699>have

187
00:09:32.200 --> 00:09:35.300
<00:09:32.200>a <00:09:32.340>play <00:09:32.480>around <00:09:32.620>maybe <00:09:32.760>with <00:09:32.900>a <00:09:33.040>project <00:09:33.180>that's <00:09:33.320>not <00:09:33.460>you <00:09:33.600>know

188
00:09:35.300 --> 00:09:38.200
<00:09:35.300>business <00:09:35.579>critical <00:09:35.859>IP, <00:09:36.140>but <00:09:36.420>to <00:09:36.699>kind

189
00:09:38.200 --> 00:09:39.800
<00:09:38.200>of <00:09:38.375>have <00:09:38.550>a <00:09:38.725>look <00:09:38.900>at <00:09:39.075>what <00:09:39.250>is <00:09:39.425>going <00:09:39.600>on.

190
00:09:40.500 --> 00:09:41.000
so

191
00:09:41.700 --> 00:09:44.700
<00:09:41.700>if <00:09:41.840>you're <00:09:41.980>looking <00:09:42.120>kind <00:09:42.260>of <00:09:42.400>to <00:09:42.540>the <00:09:42.680>next <00:09:42.820>level, <00:09:42.960>so <00:09:43.100>I'm

192
00:09:44.700 --> 00:09:47.500
<00:09:44.700>going <00:09:44.933>to <00:09:45.166>try <00:09:45.400>live <00:09:45.633>demo. <00:09:45.866>Bear <00:09:46.100>with

193
00:09:47.500 --> 00:09:47.600
me.

194
00:09:49.200 --> 00:09:49.900
<00:09:49.200>Make <00:09:49.515>this <00:09:49.829>bigger.

195
00:09:51.900 --> 00:09:52.200
so

196
00:09:53.300 --> 00:09:56.400
<00:09:53.300>Here. <00:09:53.533>I <00:09:53.766>have <00:09:54.000>a <00:09:54.233>pipeline. <00:09:54.466>What's <00:09:54.699>worth

197
00:09:56.400 --> 00:09:59.600
<00:09:56.400>noting <00:09:56.633>is <00:09:56.866>this <00:09:57.100>pipeline <00:09:57.333>is <00:09:57.566>part <00:09:57.800>of

198
00:09:59.600 --> 00:10:02.700
<00:09:59.600>a <00:09:59.833>feature <00:10:00.066>branch <00:10:00.300>and <00:10:00.533>this <00:10:00.766>pipeline <00:10:01.000>was

199
00:10:02.700 --> 00:10:05.100
<00:10:02.700>actually <00:10:02.875>created <00:10:03.050>because <00:10:03.225>of <00:10:03.400>a <00:10:03.575>commit <00:10:03.750>what <00:10:03.925>I <00:10:04.100>actually

200
00:10:05.100 --> 00:10:08.100
<00:10:05.100>did <00:10:05.227>was <00:10:05.354>just <00:10:05.481>change <00:10:05.609>some <00:10:05.736>CSS <00:10:05.863>and <00:10:05.990>we <00:10:06.118>can <00:10:06.245>see <00:10:06.372>lots <00:10:06.500>of

201
00:10:08.100 --> 00:10:10.100
<00:10:08.100>fun <00:10:08.380>things <00:10:08.660>happening. <00:10:08.940>So <00:10:09.220>we're <00:10:09.500>building.

202
00:10:10.800 --> 00:10:13.300
<00:10:10.800>We're <00:10:10.974>also <00:10:11.150>doing <00:10:11.324>a <00:10:11.500>lot <00:10:11.675>of <00:10:11.849>testing. <00:10:12.025>So <00:10:12.199>we're

203
00:10:13.300 --> 00:10:17.400
<00:10:13.300>testing <00:10:13.455>the <00:10:13.611>code. <00:10:13.766>We're <00:10:13.922>testing <00:10:14.077>soft, <00:10:14.233>you <00:10:14.388>know <00:10:14.544>software <00:10:14.699>SAS

204
00:10:16.400 --> 00:10:19.800
<00:10:16.400>static <00:10:16.750>code <00:10:17.100>analysis <00:10:17.449>dependency <00:10:17.800>scanning

205
00:10:19.800 --> 00:10:22.500
<00:10:19.800>looking <00:10:20.079>at <00:10:20.359>the <00:10:20.640>licenses <00:10:20.920>secret <00:10:21.199>detection.

206
00:10:22.500 --> 00:10:25.300
<00:10:22.500>Are <00:10:22.780>there <00:10:23.060>any <00:10:23.340>apis <00:10:23.620>container <00:10:23.900>scanning

207
00:10:25.300 --> 00:10:29.000
<00:10:25.300>and <00:10:25.393>if <00:10:25.486>we <00:10:25.579>want <00:10:25.673>to <00:10:25.766>look <00:10:25.859>in <00:10:25.953>we <00:10:26.046>can <00:10:26.140>click <00:10:26.233>and <00:10:26.326>we <00:10:26.420>can <00:10:26.513>see <00:10:26.606>oh <00:10:26.699>what's

208
00:10:28.100 --> 00:10:31.400
<00:10:28.100>actually <00:10:28.300>happening <00:10:28.500>here. <00:10:28.700>So <00:10:28.900>for <00:10:29.100>example, <00:10:29.300>if <00:10:29.500>you

209
00:10:31.400 --> 00:10:34.000
<00:10:31.400>want <00:10:31.527>to <00:10:31.654>like <00:10:31.781>look <00:10:31.909>at <00:10:32.036>the <00:10:32.163>stack <00:10:32.290>Trace <00:10:32.418>you <00:10:32.545>can <00:10:32.672>if <00:10:32.800>you

210
00:10:34.200 --> 00:10:35.400
<00:10:34.200>want <00:10:34.380>to <00:10:34.560>rerun <00:10:34.740>the <00:10:34.920>job <00:10:35.100>you <00:10:35.280>can

211
00:10:37.100 --> 00:10:40.100
<00:10:37.100>so <00:10:37.255>you <00:10:37.411>have <00:10:37.566>all <00:10:37.722>of <00:10:37.877>this <00:10:38.033>scanning <00:10:38.188>as <00:10:38.344>part <00:10:38.500>of

212
00:10:40.100 --> 00:10:41.900
<00:10:40.100>security <00:10:40.380>as <00:10:40.660>part <00:10:40.940>of <00:10:41.220>the <00:10:41.500>commit.

213
00:10:43.200 --> 00:10:46.200
<00:10:43.200>Then <00:10:43.355>you <00:10:43.511>have <00:10:43.666>a <00:10:43.822>vulnerability <00:10:43.977>report. <00:10:44.133>So <00:10:44.288>what's <00:10:44.444>quite <00:10:44.600>cool

214
00:10:46.200 --> 00:10:49.200
<00:10:46.200>about <00:10:46.400>this <00:10:46.600>is <00:10:46.800>its <00:10:47.000>aggregating <00:10:47.200>all <00:10:47.400>of <00:10:47.600>the

215
00:10:49.200 --> 00:10:52.600
<00:10:49.200>different <00:10:49.400>security <00:10:49.600>scanners <00:10:49.800>into <00:10:50.000>one <00:10:50.200>place <00:10:50.400>so <00:10:50.600>you

216
00:10:52.600 --> 00:10:55.700
<00:10:52.600>can <00:10:52.727>be <00:10:52.854>reading <00:10:52.981>this <00:10:53.109>as <00:10:53.236>a <00:10:53.363>developer <00:10:53.490>or <00:10:53.618>as <00:10:53.745>security <00:10:53.872>and <00:10:54.000>if

217
00:10:55.700 --> 00:10:58.300
<00:10:55.700>you're <00:10:55.827>a <00:10:55.954>developer, <00:10:56.081>you're <00:10:56.209>probably <00:10:56.336>going <00:10:56.463>to <00:10:56.590>be <00:10:56.718>presented <00:10:56.845>something <00:10:56.972>like <00:10:57.100>this.

218
00:10:58.300 --> 00:11:01.000
<00:10:58.300>So <00:10:58.455>I've <00:10:58.611>got <00:10:58.766>you <00:10:58.922>know <00:10:59.077>description. <00:10:59.233>I've <00:10:59.388>got <00:10:59.544>you <00:10:59.699>know

219
00:11:01.500 --> 00:11:04.300
<00:11:01.500>location <00:11:01.675>if <00:11:01.850>I <00:11:02.025>want <00:11:02.200>to <00:11:02.375>I <00:11:02.550>can <00:11:02.725>create <00:11:02.900>an

220
00:11:04.300 --> 00:11:07.200
<00:11:04.300>issue. <00:11:04.427>Maybe <00:11:04.554>it's <00:11:04.681>something <00:11:04.809>we <00:11:04.936>want <00:11:05.063>to <00:11:05.190>work <00:11:05.318>on. <00:11:05.445>But <00:11:05.572>what <00:11:05.699>about

221
00:11:07.200 --> 00:11:10.400
<00:11:07.200>if <00:11:07.375>I <00:11:07.550>don't <00:11:07.725>know <00:11:07.900>what <00:11:08.075>reflected <00:11:08.250>cross <00:11:08.425>site <00:11:08.600>scripting

222
00:11:10.400 --> 00:11:13.700
<00:11:10.400>is, <00:11:10.633>so <00:11:10.866>this <00:11:11.100>is <00:11:11.333>a <00:11:11.566>tool <00:11:11.800>secure

223
00:11:13.700 --> 00:11:16.600
<00:11:13.700>code <00:11:13.900>Warrior. <00:11:14.100>I'm <00:11:14.300>gonna <00:11:14.500>say <00:11:14.700>it's <00:11:14.900>reflect <00:11:15.100>across

224
00:11:16.600 --> 00:11:20.100
<00:11:16.600>site <00:11:16.740>scripting <00:11:16.880>and <00:11:17.020>this <00:11:17.160>is <00:11:17.300>where <00:11:17.440>the <00:11:17.580>fun <00:11:17.720>begins <00:11:17.860>so <00:11:18.000>this

225
00:11:19.100 --> 00:11:22.200
<00:11:19.100>is <00:11:19.300>not <00:11:19.500>my <00:11:19.700>code. <00:11:19.900>This <00:11:20.100>is <00:11:20.300>you <00:11:20.500>know

226
00:11:22.200 --> 00:11:25.800
<00:11:22.200>securing <00:11:22.327>nothing <00:11:22.454>to <00:11:22.581>do <00:11:22.709>with <00:11:22.836>what <00:11:22.963>was <00:11:23.090>in <00:11:23.218>my <00:11:23.345>pipeline, <00:11:23.472>but <00:11:23.600>I'm

227
00:11:25.800 --> 00:11:29.400
<00:11:25.800>told <00:11:26.000>I <00:11:26.199>need <00:11:26.400>to <00:11:26.599>locate <00:11:26.800>a <00:11:27.000>vulnerability. <00:11:27.199>I'm

228
00:11:28.400 --> 00:11:29.600
looking.

229
00:11:30.700 --> 00:11:33.100
<00:11:30.700>For <00:11:30.900>one <00:11:31.100>vulnerable <00:11:31.300>code <00:11:31.500>block <00:11:31.700>and <00:11:31.900>I <00:11:32.100>have

230
00:11:33.100 --> 00:11:36.600
<00:11:33.100>my <00:11:33.216>sample <00:11:33.333>code <00:11:33.450>which <00:11:33.566>I <00:11:33.683>can <00:11:33.800>expand. <00:11:33.916>It's <00:11:34.033>a <00:11:34.150>very <00:11:34.266>simple <00:11:34.383>python <00:11:34.500>example,

231
00:11:36.600 --> 00:11:39.400
<00:11:36.600>and <00:11:36.775>I'm <00:11:36.950>looking <00:11:37.125>could <00:11:37.300>it <00:11:37.475>be <00:11:37.650>line <00:11:37.825>9 <00:11:38.000>to

232
00:11:39.400 --> 00:11:42.100
<00:11:39.400>11. <00:11:39.600>Is <00:11:39.800>that <00:11:40.000>where <00:11:40.199>my <00:11:40.400>bug <00:11:40.600>is? <00:11:40.800>Um,

233
00:11:42.100 --> 00:11:45.400
<00:11:42.100>maybe <00:11:42.300>maybe <00:11:42.500>this <00:11:42.700>line <00:11:42.900>6 <00:11:43.100>something <00:11:43.300>within <00:11:43.500>the

234
00:11:45.400 --> 00:11:48.200
<00:11:45.400>charfield <00:11:45.750>within <00:11:46.100>my <00:11:46.449>models <00:11:46.800>file.

235
00:11:48.200 --> 00:11:51.500
<00:11:48.200>So <00:11:48.400>in <00:11:48.600>one <00:11:48.800>of <00:11:49.000>these <00:11:49.200>sections, <00:11:49.400>I <00:11:49.600>have

236
00:11:51.500 --> 00:11:52.900
<00:11:51.500>a <00:11:51.814>reflected <00:11:52.130>cross <00:11:52.444>site <00:11:52.760>scripting.

237
00:11:53.800 --> 00:11:54.600
<00:11:53.800>And <00:11:53.980>what <00:11:54.160>I <00:11:54.340>can <00:11:54.520>do.

238
00:11:55.400 --> 00:11:58.300
<00:11:55.400>Is <00:11:55.540>I <00:11:55.680>can <00:11:55.819>click <00:11:55.959>on <00:11:56.100>I <00:11:56.240>can <00:11:56.380>try <00:11:56.520>next? <00:11:56.660>Oh, <00:11:56.800>no,

239
00:11:58.300 --> 00:12:01.700
<00:11:58.300>I <00:11:58.455>didn't <00:11:58.611>get <00:11:58.766>it. <00:11:58.922>Right <00:11:59.077>but <00:11:59.233>most <00:11:59.388>importantly <00:11:59.544>it <00:11:59.699>is

240
00:12:01.700 --> 00:12:05.000
<00:12:01.700>explaining <00:12:01.933>in <00:12:02.166>a <00:12:02.400>developer-friendly <00:12:02.633>way <00:12:02.866>what <00:12:03.100>the

241
00:12:04.200 --> 00:12:07.100
<00:12:04.200>issue <00:12:04.355>is <00:12:04.511>and <00:12:04.666>then <00:12:04.822>I <00:12:04.977>can <00:12:05.133>retry <00:12:05.288>and <00:12:05.444>have <00:12:05.600>another

242
00:12:07.100 --> 00:12:10.400
<00:12:07.100>go <00:12:07.255>because <00:12:07.411>what <00:12:07.566>we're <00:12:07.722>doing <00:12:07.877>is <00:12:08.033>having <00:12:08.188>just <00:12:08.344>in <00:12:08.500>time

243
00:12:10.400 --> 00:12:12.400
<00:12:10.400>training <00:12:10.866>to <00:12:11.333>the <00:12:11.800>developer.

244
00:12:16.800 --> 00:12:18.900
<00:12:16.800>Let <00:12:17.033>me <00:12:17.266>go <00:12:17.500>to <00:12:17.733>the <00:12:17.966>next <00:12:18.199>bit.

245
00:12:22.000 --> 00:12:22.400
What?

246
00:12:25.300 --> 00:12:28.300
<00:12:25.300>Let's <00:12:25.416>stay <00:12:25.533>there <00:12:25.650>for <00:12:25.766>about <00:12:25.883>so <00:12:26.000>what <00:12:26.116>we <00:12:26.233>do <00:12:26.349>is <00:12:26.466>we <00:12:26.583>have <00:12:26.699>just

247
00:12:28.300 --> 00:12:32.300
<00:12:28.300>in <00:12:28.439>trying <00:12:28.579>training <00:12:28.719>for <00:12:28.859>the <00:12:29.000>developer <00:12:29.140>because <00:12:29.280>what <00:12:29.420>happens <00:12:29.560>sometimes <00:12:29.699>is

248
00:12:31.300 --> 00:12:34.600
<00:12:31.300>developers <00:12:31.766>don't <00:12:32.233>necessarily <00:12:32.699>know.

249
00:12:34.600 --> 00:12:38.400
<00:12:34.600>What <00:12:34.800>what <00:12:35.000>is <00:12:35.200>the <00:12:35.400>difference <00:12:35.600>between <00:12:35.800>reflected <00:12:36.000>cross-site

250
00:12:37.400 --> 00:12:40.700
<00:12:37.400>scripting <00:12:37.866>Dom <00:12:38.333>crosslight <00:12:38.800>scripting

251
00:12:40.700 --> 00:12:43.700
<00:12:40.700>and <00:12:40.900>stored <00:12:41.100>across <00:12:41.300>site <00:12:41.500>script <00:12:41.700>there <00:12:41.900>something <00:12:42.100>to

252
00:12:43.700 --> 00:12:46.900
<00:12:43.700>do <00:12:43.980>with <00:12:44.260>JavaScript, <00:12:44.540>right? <00:12:44.820>So <00:12:45.100>it's

253
00:12:46.900 --> 00:12:50.100
<00:12:46.900>really <00:12:47.133>important <00:12:47.366>that <00:12:47.600>we <00:12:47.833>Empower <00:12:48.066>developers <00:12:48.300>by

254
00:12:49.100 --> 00:12:52.700
<00:12:49.100>giving <00:12:49.275>them <00:12:49.450>the <00:12:49.625>information <00:12:49.800>that <00:12:49.975>they <00:12:50.150>need <00:12:50.325>and <00:12:50.500>also

255
00:12:52.700 --> 00:12:55.500
<00:12:52.700>giving <00:12:52.900>them <00:12:53.100>time <00:12:53.300>to <00:12:53.500>train <00:12:53.700>which <00:12:53.900>is <00:12:54.100>it's

256
00:12:55.500 --> 00:12:58.900
<00:12:55.500>not <00:12:55.627>only <00:12:55.754>about <00:12:55.881>speaking <00:12:56.009>to <00:12:56.136>developers. <00:12:56.263>It's <00:12:56.390>also <00:12:56.518>speaking <00:12:56.645>to <00:12:56.772>engineering <00:12:56.900>managers

257
00:12:58.900 --> 00:13:01.100
<00:12:58.900>and <00:12:59.074>product <00:12:59.250>owners. <00:12:59.425>I'm <00:12:59.600>sorry, <00:12:59.775>we <00:12:59.949>can't <00:13:00.125>get <00:13:00.300>out

258
00:13:01.100 --> 00:13:04.000
<00:13:01.100>a <00:13:01.240>hundred <00:13:01.380>features <00:13:01.520>this <00:13:01.660>month. <00:13:01.800>Let's <00:13:01.940>just <00:13:02.080>get <00:13:02.220>out, <00:13:02.360>you <00:13:02.500>know

259
00:13:04.800 --> 00:13:07.700
<00:13:04.800>90 <00:13:04.939>because <00:13:05.079>we <00:13:05.219>really <00:13:05.359>need <00:13:05.500>to <00:13:05.640>focus <00:13:05.780>a <00:13:05.920>on <00:13:06.060>technical <00:13:06.199>debts

260
00:13:07.700 --> 00:13:10.100
<00:13:07.700>and <00:13:07.933>be <00:13:08.166>on <00:13:08.400>upskilling <00:13:08.633>our <00:13:08.866>developers <00:13:09.100>because

261
00:13:10.100 --> 00:13:13.900
<00:13:10.100>what's <00:13:10.227>the <00:13:10.354>point <00:13:10.481>of <00:13:10.609>putting <00:13:10.736>out <00:13:10.863>a <00:13:10.990>hundred <00:13:11.118>features <00:13:11.245>if <00:13:11.372>70 <00:13:11.500>of

262
00:13:13.900 --> 00:13:16.200
<00:13:13.900>them <00:13:14.074>have <00:13:14.250>vulnerabilities <00:13:14.425>wouldn't <00:13:14.600>it <00:13:14.775>be <00:13:14.949>better <00:13:15.125>to <00:13:15.300>do

263
00:13:16.200 --> 00:13:19.300
<00:13:16.200>70 <00:13:16.433>and <00:13:16.666>then <00:13:16.900>not <00:13:17.133>have <00:13:17.366>any <00:13:17.600>vulnerabilities?

264
00:13:20.500 --> 00:13:23.800
<00:13:20.500>So <00:13:20.640>another <00:13:20.780>thing <00:13:20.920>that <00:13:21.060>I <00:13:21.200>like <00:13:21.340>to <00:13:21.480>talk <00:13:21.620>about <00:13:21.760>as <00:13:21.900>well,

265
00:13:23.800 --> 00:13:26.600
<00:13:23.800>as <00:13:24.000>you <00:13:24.199>know, <00:13:24.400>how <00:13:24.599>important <00:13:24.800>security <00:13:25.000>is. <00:13:25.199>It's

266
00:13:26.600 --> 00:13:29.200
<00:13:26.600>on <00:13:26.755>a <00:13:26.911>personal <00:13:27.066>level, <00:13:27.222>you <00:13:27.377>know, <00:13:27.533>like <00:13:27.688>I <00:13:27.844>said <00:13:28.000>before

267
00:13:29.200 --> 00:13:32.900
<00:13:29.200>if <00:13:29.400>we <00:13:29.600>get <00:13:29.800>each <00:13:30.000>developer <00:13:30.200>1% <00:13:30.400>better <00:13:30.600>we

268
00:13:32.900 --> 00:13:35.300
<00:13:32.900>can <00:13:33.074>have <00:13:33.250>a <00:13:33.425>big <00:13:33.600>Improvement. <00:13:33.775>So <00:13:33.949>I <00:13:34.125>read <00:13:34.300>a

269
00:13:35.300 --> 00:13:38.900
<00:13:35.300>lot <00:13:35.400>of <00:13:35.500>like, <00:13:35.599>you <00:13:35.699>know <00:13:35.800>business <00:13:35.900>self-help <00:13:36.000>books. <00:13:36.099>This <00:13:36.199>was <00:13:36.300>one <00:13:36.400>of <00:13:36.500>my <00:13:36.599>favorites <00:13:36.699>Seven

270
00:13:38.900 --> 00:13:41.400
<00:13:38.900>Habits <00:13:39.133>of <00:13:39.366>Highly <00:13:39.600>Effective <00:13:39.833>People. <00:13:40.066>It's <00:13:40.300>been

271
00:13:41.400 --> 00:13:44.000
<00:13:41.400>around <00:13:41.555>a <00:13:41.711>while. <00:13:41.866>If <00:13:42.022>you <00:13:42.177>haven't <00:13:42.333>read <00:13:42.488>it. <00:13:42.644>I <00:13:42.800>have

272
00:13:44.300 --> 00:13:47.700
<00:13:44.300>a <00:13:44.455>little <00:13:44.611>quick <00:13:44.766>summary <00:13:44.922>where <00:13:45.077>it <00:13:45.233>has <00:13:45.388>the <00:13:45.544>seven <00:13:45.699>habits.

273
00:13:48.400 --> 00:13:51.200
<00:13:48.400>And <00:13:48.516>if <00:13:48.633>you <00:13:48.750>read <00:13:48.866>the <00:13:48.983>book, <00:13:49.100>it's <00:13:49.216>sequential <00:13:49.333>but <00:13:49.449>one <00:13:49.566>of <00:13:49.683>the <00:13:49.800>most

274
00:13:51.200 --> 00:13:55.000
<00:13:51.200>important <00:13:51.400>number <00:13:51.600>seven <00:13:51.800>at <00:13:52.000>the <00:13:52.200>top <00:13:52.400>sharpen <00:13:52.600>the

275
00:13:54.500 --> 00:13:57.600
<00:13:54.500>saw <00:13:54.780>so <00:13:55.060>sharpening <00:13:55.340>the <00:13:55.620>saw <00:13:55.900>what

276
00:13:57.600 --> 00:14:00.300
<00:13:57.600>it's <00:13:57.800>saying <00:13:58.000>is, <00:13:58.200>you <00:13:58.400>know, <00:13:58.600>I <00:13:58.800>think <00:13:59.000>it

277
00:14:00.300 --> 00:14:03.400
<00:14:00.300>was <00:14:00.416>I <00:14:00.533>want <00:14:00.650>to <00:14:00.766>say <00:14:00.883>Abraham <00:14:01.000>Lincoln <00:14:01.116>it <00:14:01.233>was <00:14:01.349>one <00:14:01.466>of <00:14:01.583>the <00:14:01.699>American

278
00:14:03.400 --> 00:14:06.200
<00:14:03.400>Presidents <00:14:03.527>said <00:14:03.654>if <00:14:03.781>you're <00:14:03.909>going <00:14:04.036>to <00:14:04.163>chop <00:14:04.290>down <00:14:04.418>a <00:14:04.545>tree <00:14:04.672>and <00:14:04.800>you

279
00:14:06.200 --> 00:14:09.500
<00:14:06.200>have <00:14:06.340>four <00:14:06.480>hours <00:14:06.620>to <00:14:06.760>do <00:14:06.900>it <00:14:07.040>spend <00:14:07.180>three <00:14:07.320>hours <00:14:07.460>sharpening <00:14:07.600>your

280
00:14:09.500 --> 00:14:12.300
<00:14:09.500>saw <00:14:09.640>so <00:14:09.780>that <00:14:09.920>you <00:14:10.060>can <00:14:10.200>then <00:14:10.340>cut <00:14:10.480>it <00:14:10.620>down <00:14:10.760>effectively <00:14:10.900>and

281
00:14:12.300 --> 00:14:15.100
<00:14:12.300>it's <00:14:12.500>the <00:14:12.699>same <00:14:12.900>with <00:14:13.099>security <00:14:13.300>skills. <00:14:13.500>We <00:14:13.699>need

282
00:14:15.100 --> 00:14:19.000
<00:14:15.100>to <00:14:15.275>give <00:14:15.450>developers <00:14:15.625>the <00:14:15.800>time <00:14:15.975>and <00:14:16.150>the <00:14:16.325>ability <00:14:16.500>to

283
00:14:18.900 --> 00:14:21.000
<00:14:18.900>incorporate <00:14:19.250>security <00:14:19.600>as <00:14:19.949>part <00:14:20.300>of

284
00:14:21.300 --> 00:14:24.800
<00:14:21.300>that <00:14:21.455>flow <00:14:21.611>because <00:14:21.766>fundamentally <00:14:21.922>it <00:14:22.077>is <00:14:22.233>just <00:14:22.388>another <00:14:22.544>quality <00:14:22.699>control.

285
00:14:25.900 --> 00:14:28.200
<00:14:25.900>And <00:14:26.027>then <00:14:26.154>and <00:14:26.281>this <00:14:26.409>is <00:14:26.536>where <00:14:26.663>the <00:14:26.790>kind <00:14:26.918>of <00:14:27.045>yoga <00:14:27.172>starts <00:14:27.300>coming

286
00:14:28.200 --> 00:14:28.600
<00:14:28.200>out <00:14:28.380>as <00:14:28.560>well.

287
00:14:29.500 --> 00:14:32.200
<00:14:29.500>So <00:14:29.616>if <00:14:29.733>we <00:14:29.850>look <00:14:29.966>kind <00:14:30.083>of <00:14:30.200>on <00:14:30.316>a <00:14:30.433>personal <00:14:30.550>level, <00:14:30.666>you've <00:14:30.783>got <00:14:30.900>a

288
00:14:32.200 --> 00:14:35.500
<00:14:32.200>balance <00:14:32.400>body <00:14:32.600>heart <00:14:32.800>spirit <00:14:33.000>and <00:14:33.200>mind <00:14:33.400>and <00:14:33.600>then

289
00:14:35.500 --> 00:14:38.300
<00:14:35.500>you <00:14:35.655>get <00:14:35.811>in <00:14:35.966>this <00:14:36.122>happy <00:14:36.277>place. <00:14:36.433>So <00:14:36.588>if <00:14:36.744>you've <00:14:36.900>read

290
00:14:38.300 --> 00:14:41.800
<00:14:38.300>the <00:14:38.439>the <00:14:38.579>Unicorn <00:14:38.719>project, <00:14:38.859>which <00:14:39.000>is <00:14:39.140>a <00:14:39.280>book <00:14:39.420>about <00:14:39.560>devops, <00:14:39.699>I

291
00:14:41.800 --> 00:14:45.200
<00:14:41.800>would <00:14:42.000>recommend <00:14:42.199>it. <00:14:42.400>It <00:14:42.599>talks <00:14:42.800>about <00:14:43.000>flow <00:14:43.199>and

292
00:14:44.200 --> 00:14:47.600
<00:14:44.200>this <00:14:44.400>book <00:14:44.600>The <00:14:44.800>Unicorn <00:14:45.000>project. <00:14:45.200>I <00:14:45.400>won't <00:14:45.600>spoil

293
00:14:47.600 --> 00:14:50.200
<00:14:47.600>it <00:14:47.716>too <00:14:47.833>much <00:14:47.950>but <00:14:48.066>there's <00:14:48.183>a <00:14:48.300>project <00:14:48.416>manager <00:14:48.533>who <00:14:48.650>goes <00:14:48.766>on <00:14:48.883>a <00:14:49.000>team.

294
00:14:51.300 --> 00:14:54.500
<00:14:51.300>She <00:14:51.455>spends <00:14:51.611>the <00:14:51.766>first <00:14:51.922>third <00:14:52.077>of <00:14:52.233>the <00:14:52.388>book <00:14:52.544>trying <00:14:52.699>to

295
00:14:54.500 --> 00:14:55.600
<00:14:54.500>get <00:14:54.830>a <00:14:55.160>build <00:14:55.490>running.

296
00:14:56.100 --> 00:14:59.300
<00:14:56.100>And <00:14:56.227>you <00:14:56.354>can <00:14:56.481>imagine <00:14:56.609>if <00:14:56.736>you're <00:14:56.863>a <00:14:56.990>developer <00:14:57.118>and <00:14:57.245>you <00:14:57.372>are <00:14:57.500>you

297
00:14:59.300 --> 00:15:02.700
<00:14:59.300>know <00:14:59.533>chasing <00:14:59.766>tickets <00:15:00.000>finding <00:15:00.233>scripts <00:15:00.466>figuring <00:15:00.699>out

298
00:15:02.700 --> 00:15:05.200
<00:15:02.700>what's <00:15:02.855>going <00:15:03.011>on <00:15:03.166>in <00:15:03.322>CI <00:15:03.477>just <00:15:03.633>to <00:15:03.788>get <00:15:03.944>a <00:15:04.100>build

299
00:15:05.200 --> 00:15:08.500
<00:15:05.200>running. <00:15:05.433>You're <00:15:05.666>probably <00:15:05.900>gonna <00:15:06.133>feel <00:15:06.366>quite <00:15:06.600>frustrated.

300
00:15:08.500 --> 00:15:11.400
<00:15:08.500>You're <00:15:08.640>not <00:15:08.780>really <00:15:08.920>going <00:15:09.060>to <00:15:09.200>get <00:15:09.340>any <00:15:09.480>work <00:15:09.620>done. <00:15:09.760>So <00:15:09.900>not

301
00:15:11.400 --> 00:15:14.600
<00:15:11.400>only <00:15:11.487>do <00:15:11.574>we <00:15:11.662>have <00:15:11.750>to <00:15:11.837>think, <00:15:11.925>you <00:15:12.012>know <00:15:12.100>on <00:15:12.187>a <00:15:12.275>you <00:15:12.362>know <00:15:12.449>on <00:15:12.537>a <00:15:12.625>professional <00:15:12.712>level. <00:15:12.800>Okay.

302
00:15:14.600 --> 00:15:17.300
<00:15:14.600>Do <00:15:14.740>I <00:15:14.880>have <00:15:15.020>the <00:15:15.160>tools <00:15:15.300>to <00:15:15.440>do <00:15:15.580>my <00:15:15.720>job <00:15:15.860>do <00:15:16.000>I

303
00:15:17.300 --> 00:15:20.300
<00:15:17.300>know <00:15:17.439>enough <00:15:17.579>about <00:15:17.719>security <00:15:17.859>but <00:15:18.000>it's <00:15:18.140>also <00:15:18.280>worth <00:15:18.420>bearing <00:15:18.560>in <00:15:18.699>mind.

304
00:15:20.300 --> 00:15:23.900
<00:15:20.300>You <00:15:20.455>know. <00:15:20.611>Hey, <00:15:20.766>have <00:15:20.922>I <00:15:21.077>seen <00:15:21.233>any <00:15:21.388>daylight <00:15:21.544>today <00:15:21.699>did

305
00:15:23.900 --> 00:15:26.100
<00:15:23.900>I <00:15:24.074>remember <00:15:24.250>to <00:15:24.425>eat <00:15:24.600>three <00:15:24.775>meals <00:15:24.949>have <00:15:25.125>I <00:15:25.300>gone

306
00:15:26.100 --> 00:15:29.300
<00:15:26.100>on <00:15:26.227>a <00:15:26.354>Park <00:15:26.481>walk? <00:15:26.609>And <00:15:26.736>so <00:15:26.863>it's <00:15:26.990>important <00:15:27.118>to <00:15:27.245>Barrel <00:15:27.372>this <00:15:27.500>in

307
00:15:29.300 --> 00:15:32.000
<00:15:29.300>mind <00:15:29.427>because <00:15:29.554>especially <00:15:29.681>with <00:15:29.809>the <00:15:29.936>last <00:15:30.063>two <00:15:30.190>years <00:15:30.318>we've <00:15:30.445>had <00:15:30.572>you <00:15:30.699>know

308
00:15:32.300 --> 00:15:35.400
<00:15:32.300>with <00:15:32.427>burnout <00:15:32.554>being <00:15:32.681>a <00:15:32.809>real <00:15:32.936>thing <00:15:33.063>as <00:15:33.190>well <00:15:33.318>as <00:15:33.445>learning <00:15:33.572>about <00:15:33.699>security.

309
00:15:35.400 --> 00:15:38.400
<00:15:35.400>It's <00:15:35.574>also <00:15:35.750>important <00:15:35.925>to <00:15:36.100>kind <00:15:36.275>of <00:15:36.449>look <00:15:36.625>internally <00:15:36.800>and

310
00:15:38.400 --> 00:15:39.400
<00:15:38.400>you <00:15:38.850>know <00:15:39.300>balance

311
00:15:40.700 --> 00:15:43.600
<00:15:40.700>So <00:15:40.933>why <00:15:41.166>why <00:15:41.400>are <00:15:41.633>we <00:15:41.866>here? <00:15:42.100>Why

312
00:15:43.600 --> 00:15:47.300
<00:15:43.600>have <00:15:43.707>I <00:15:43.815>been <00:15:43.923>talking <00:15:44.030>to <00:15:44.138>you? <00:15:44.246>And <00:15:44.353>you've <00:15:44.461>all <00:15:44.569>been <00:15:44.676>lovely <00:15:44.784>and <00:15:44.892>listening <00:15:45.000>so

313
00:15:48.900 --> 00:15:50.000
<00:15:48.900>really <00:15:49.395>to <00:15:49.890>summarize

314
00:15:53.300 --> 00:15:58.700
<00:15:53.300>prioritize <00:15:53.427>so <00:15:53.554>I'm <00:15:53.681>gonna <00:15:53.809>read <00:15:53.936>off <00:15:54.063>the <00:15:54.190>slides <00:15:54.318>a <00:15:54.445>bit <00:15:54.572>prioritize <00:15:54.699>time

315
00:15:57.700 --> 00:16:00.600
<00:15:57.700>to <00:15:58.166>learn <00:15:58.633>and <00:15:59.100>address

316
00:16:00.600 --> 00:16:03.300
<00:16:00.600>technical <00:16:00.800>debt. <00:16:01.000>You <00:16:01.200>really <00:16:01.400>want <00:16:01.600>to <00:16:01.800>sharpen <00:16:02.000>the

317
00:16:03.300 --> 00:16:06.300
<00:16:03.300>sort <00:16:03.427>and <00:16:03.554>it's <00:16:03.681>also <00:16:03.809>about <00:16:03.936>being <00:16:04.063>proactive. <00:16:04.190>If <00:16:04.318>you <00:16:04.445>if <00:16:04.572>you <00:16:04.699>know

318
00:16:06.300 --> 00:16:09.800
<00:16:06.300>that <00:16:06.427>there's <00:16:06.554>an <00:16:06.681>area <00:16:06.809>that <00:16:06.936>that <00:16:07.063>needs <00:16:07.190>to <00:16:07.318>be <00:16:07.445>addressed <00:16:07.572>be <00:16:07.699>vocal.

319
00:16:09.800 --> 00:16:12.400
<00:16:09.800>You <00:16:09.974>know, <00:16:10.150>I <00:16:10.324>don't <00:16:10.500>think <00:16:10.675>anyone <00:16:10.849>likes <00:16:11.025>technical <00:16:11.199>debt,

320
00:16:12.400 --> 00:16:15.400
<00:16:12.400>but <00:16:12.500>it's <00:16:12.600>the <00:16:12.699>kind <00:16:12.800>of <00:16:12.900>thing <00:16:13.000>that <00:16:13.100>if <00:16:13.199>you <00:16:13.300>don't <00:16:13.400>address <00:16:13.500>it <00:16:13.600>it <00:16:13.699>gets <00:16:13.800>worse

321
00:16:15.400 --> 00:16:18.600
<00:16:15.400>and <00:16:15.574>in <00:16:15.750>my <00:16:15.925>view <00:16:16.100>lack <00:16:16.275>of <00:16:16.449>security <00:16:16.625>knowledge <00:16:16.800>is

322
00:16:18.600 --> 00:16:22.100
<00:16:18.600>kind <00:16:18.755>of <00:16:18.911>technical <00:16:19.066>debt <00:16:19.222>because <00:16:19.377>if <00:16:19.533>you <00:16:19.688>keep <00:16:19.844>making <00:16:20.000>the

323
00:16:21.100 --> 00:16:24.400
<00:16:21.100>same <00:16:21.566>vulnerabilities, <00:16:22.033>you <00:16:22.500>know

324
00:16:24.400 --> 00:16:27.600
<00:16:24.400>that <00:16:24.600>recurring <00:16:24.800>bug <00:16:25.000>again, <00:16:25.199>and <00:16:25.400>again, <00:16:25.600>you're <00:16:25.800>gonna

325
00:16:27.600 --> 00:16:28.700
<00:16:27.600>you're <00:16:27.798>gonna <00:16:27.996>have <00:16:28.194>a <00:16:28.392>bad <00:16:28.590>time.

326
00:16:30.300 --> 00:16:33.100
<00:16:30.300>Um <00:16:30.455>take <00:16:30.611>a <00:16:30.766>more <00:16:30.922>empathetic <00:16:31.077>approach. <00:16:31.233>So <00:16:31.388>when <00:16:31.544>I <00:16:31.699>talked

327
00:16:33.100 --> 00:16:36.200
<00:16:33.100>about <00:16:33.333>my <00:16:33.566>silos <00:16:33.800>earlier <00:16:34.033>security <00:16:34.266>are <00:16:34.500>not

328
00:16:36.200 --> 00:16:39.100
<00:16:36.200>the <00:16:36.375>bad <00:16:36.550>guy. <00:16:36.725>We <00:16:36.900>promise <00:16:37.075>we're <00:16:37.250>just <00:16:37.425>trying <00:16:37.600>not

329
00:16:39.100 --> 00:16:42.200
<00:16:39.100>to <00:16:39.216>get <00:16:39.333>hacked <00:16:39.450>and <00:16:39.566>that's <00:16:39.683>kind <00:16:39.800>of <00:16:39.916>the <00:16:40.033>end <00:16:40.150>goal. <00:16:40.266>So <00:16:40.383>think <00:16:40.500>about

330
00:16:42.200 --> 00:16:45.600
<00:16:42.200>who <00:16:42.375>you're <00:16:42.550>talking <00:16:42.725>to, <00:16:42.900>you <00:16:43.075>know, <00:16:43.250>everyone <00:16:43.425>has <00:16:43.600>stuff

331
00:16:45.600 --> 00:16:48.500
<00:16:45.600>going <00:16:45.755>on <00:16:45.911>especially <00:16:46.066>lockdown. <00:16:46.222>It's <00:16:46.377>kind <00:16:46.533>of <00:16:46.688>all <00:16:46.844>Amplified <00:16:47.000>it.

332
00:16:48.500 --> 00:16:52.100
<00:16:48.500>So <00:16:48.700>trying <00:16:48.900>to <00:16:49.100>you <00:16:49.300>know <00:16:49.500>be <00:16:49.700>transparent. <00:16:49.900>There's

333
00:16:51.100 --> 00:16:55.000
<00:16:51.100>a <00:16:51.255>lot <00:16:51.411>of <00:16:51.566>work <00:16:51.722>around <00:16:51.877>say <00:16:52.033>for <00:16:52.188>example <00:16:52.344>feedback. <00:16:52.500>I'm

334
00:16:54.100 --> 00:16:57.500
<00:16:54.100>not <00:16:54.380>going <00:16:54.660>to <00:16:54.940>say <00:16:55.220>you're <00:16:55.500>terrible.

335
00:16:58.300 --> 00:17:01.200
<00:16:58.300>Because <00:16:58.427>that's <00:16:58.554>a <00:16:58.681>you <00:16:58.809>and <00:16:58.936>I <00:16:59.063>probably <00:16:59.190>wouldn't <00:16:59.318>say <00:16:59.445>your <00:16:59.572>work <00:16:59.699>is

336
00:17:01.200 --> 00:17:04.600
<00:17:01.200>terrible <00:17:01.400>but <00:17:01.600>I <00:17:01.800>could <00:17:02.000>say <00:17:02.200>your <00:17:02.400>work <00:17:02.600>included

337
00:17:04.600 --> 00:17:07.300
<00:17:04.599>some <00:17:04.800>security <00:17:05.000>vulnerabilities. <00:17:05.199>We <00:17:05.399>need <00:17:05.599>to <00:17:05.800>address <00:17:06.000>that

338
00:17:07.300 --> 00:17:10.600
<00:17:07.300>so <00:17:07.455>really <00:17:07.611>kind <00:17:07.766>of <00:17:07.922>separating <00:17:08.077>and <00:17:08.233>you <00:17:08.388>know <00:17:08.544>not <00:17:08.700>also

339
00:17:10.600 --> 00:17:13.300
<00:17:10.599>to <00:17:10.879>not <00:17:11.159>giving <00:17:11.439>feedback <00:17:11.719>personally <00:17:12.000>and

340
00:17:13.300 --> 00:17:14.800
<00:17:13.300>not <00:17:13.569>you <00:17:13.839>know <00:17:14.109>taking <00:17:14.379>it <00:17:14.649>personally.

341
00:17:15.900 --> 00:17:19.200
<00:17:15.900>And <00:17:16.250>also <00:17:16.600>for <00:17:16.950>security, <00:17:17.300>oh

342
00:17:18.200 --> 00:17:21.900
<00:17:18.200>wasp <00:17:18.433>is <00:17:18.666>a <00:17:18.900>great <00:17:19.133>starting <00:17:19.366>point <00:17:19.600>and

343
00:17:21.900 --> 00:17:24.800
<00:17:21.900>check <00:17:22.100>out <00:17:22.300>check <00:17:22.500>it <00:17:22.700>out. <00:17:22.900>It's <00:17:23.100>it's <00:17:23.300>a

344
00:17:24.800 --> 00:17:27.800
<00:17:24.800>project. <00:17:24.940>It's <00:17:25.079>all <00:17:25.220>open <00:17:25.359>source. <00:17:25.500>There's <00:17:25.639>a <00:17:25.780>lot <00:17:25.919>of <00:17:26.060>clever <00:17:26.200>minds.

345
00:17:27.800 --> 00:17:30.400
<00:17:27.800>I <00:17:27.940>think <00:17:28.079>there's <00:17:28.220>like <00:17:28.359>over <00:17:28.500>200 <00:17:28.639>projects <00:17:28.780>involved. <00:17:28.919>So <00:17:29.060>it <00:17:29.200>is

346
00:17:30.400 --> 00:17:33.600
<00:17:30.400>a <00:17:30.575>great <00:17:30.750>starting <00:17:30.925>point <00:17:31.100>and <00:17:31.275>then <00:17:31.450>the <00:17:31.625>tool <00:17:31.800>the

347
00:17:33.600 --> 00:17:36.100
<00:17:33.600>two <00:17:33.833>tools <00:17:34.066>I <00:17:34.300>showed <00:17:34.533>earlier <00:17:34.766>one <00:17:35.000>was

348
00:17:36.100 --> 00:17:39.400
<00:17:36.100>gitlab <00:17:36.255>one <00:17:36.411>was <00:17:36.566>securara. <00:17:36.722>I've <00:17:36.877>worked <00:17:37.033>at <00:17:37.188>those <00:17:37.344>companies <00:17:37.500>so

349
00:17:39.400 --> 00:17:40.700
<00:17:39.400>I <00:17:39.692>can <00:17:39.985>give <00:17:40.277>a <00:17:40.570>theraprint.

350
00:17:42.500 --> 00:17:45.000
<00:17:42.500>Um, <00:17:42.733>so <00:17:42.966>and <00:17:43.200>thank <00:17:43.433>you <00:17:43.666>so <00:17:43.900>much

351
00:17:45.700 --> 00:17:48.500
<00:17:45.700>for <00:17:45.827>listening. <00:17:45.954>I <00:17:46.081>hope <00:17:46.209>this <00:17:46.336>has <00:17:46.463>given <00:17:46.590>you <00:17:46.718>a <00:17:46.845>little <00:17:46.972>taster <00:17:47.100>of

352
00:17:48.500 --> 00:17:51.700
<00:17:48.500>how <00:17:48.733>to <00:17:48.966>start <00:17:49.200>incorporating <00:17:49.433>security <00:17:49.666>into <00:17:49.900>your

353
00:17:51.700 --> 00:17:54.000
<00:17:51.700>mind <00:17:51.855>body <00:17:52.011>and <00:17:52.166>self <00:17:52.322>and <00:17:52.477>if <00:17:52.633>you <00:17:52.788>do <00:17:52.944>want <00:17:53.100>to

354
00:17:54.400 --> 00:17:57.100
<00:17:54.400>reach <00:17:54.516>out, <00:17:54.633>this <00:17:54.750>is <00:17:54.866>my <00:17:54.983>email <00:17:55.100>I <00:17:55.216>do <00:17:55.333>work <00:17:55.450>at <00:17:55.566>gitlab, <00:17:55.683>but <00:17:55.800>this

355
00:17:57.100 --> 00:18:00.500
<00:17:57.100>is <00:17:57.173>my <00:17:57.247>own <00:17:57.321>brand <00:17:57.394>and <00:17:57.468>I <00:17:57.542>do <00:17:57.615>really <00:17:57.689>like <00:17:57.763>speaking. <00:17:57.836>So <00:17:57.910>if <00:17:57.984>you <00:17:58.057>want <00:17:58.131>to <00:17:58.205>come <00:17:58.278>talk <00:17:58.352>with <00:17:58.426>talk <00:17:58.500>with

356
00:18:00.500 --> 00:18:03.200
<00:18:00.500>you <00:18:00.640>or <00:18:00.780>for <00:18:00.920>you, <00:18:01.060>let <00:18:01.200>me <00:18:01.340>know <00:18:01.480>and <00:18:01.620>yeah, <00:18:01.760>I've <00:18:01.900>got

357
00:18:03.200 --> 00:18:06.400
<00:18:03.200>some <00:18:03.400>time <00:18:03.600>for <00:18:03.800>questions. <00:18:04.000>So <00:18:04.200>happy <00:18:04.400>to <00:18:04.600>take

358
00:18:06.400 --> 00:18:07.300
<00:18:06.400>any <00:18:06.670>from <00:18:06.940>the <00:18:07.210>audience.

359
00:18:08.800 --> 00:18:10.900
<00:18:08.800>Thank <00:18:09.500>you, <00:18:10.200>Stefania.

360
00:18:15.500 --> 00:18:18.200
<00:18:15.500>So <00:18:15.780>some <00:18:16.060>questions, <00:18:16.340>how <00:18:16.620>did <00:18:16.900>you

361
00:18:18.200 --> 00:18:21.300
<00:18:18.200>move <00:18:18.340>from <00:18:18.480>being <00:18:18.620>a <00:18:18.760>deaf <00:18:18.900>to <00:18:19.040>being <00:18:19.180>a <00:18:19.320>security <00:18:19.460>officer? <00:18:19.600>So

362
00:18:21.300 --> 00:18:24.800
<00:18:21.300>what's <00:18:21.649>your <00:18:22.000>journey <00:18:22.350>so <00:18:22.700>I

363
00:18:25.900 --> 00:18:29.000
<00:18:25.900>I <00:18:26.250>was <00:18:26.600>a <00:18:26.950>junior <00:18:27.300>developer

364
00:18:28.700 --> 00:18:31.700
<00:18:28.700>and <00:18:28.933>I <00:18:29.166>was <00:18:29.400>quite <00:18:29.633>bad <00:18:29.866>because <00:18:30.100>I'm

365
00:18:31.700 --> 00:18:34.900
<00:18:31.700>I <00:18:31.875>remember <00:18:32.050>when <00:18:32.225>I <00:18:32.400>did <00:18:32.575>move <00:18:32.750>to <00:18:32.925>security <00:18:33.100>and

366
00:18:34.900 --> 00:18:37.400
<00:18:34.900>I <00:18:35.180>I <00:18:35.460>didn't <00:18:35.740>even <00:18:36.020>think <00:18:36.300>about

367
00:18:37.400 --> 00:18:40.100
<00:18:37.400>I've <00:18:37.600>been <00:18:37.800>so <00:18:38.000>software <00:18:38.200>licenses <00:18:38.400>and <00:18:38.600>I <00:18:38.800>was

368
00:18:40.100 --> 00:18:43.500
<00:18:40.100>I <00:18:40.274>almost <00:18:40.449>called <00:18:40.625>my <00:18:40.800>Xbox <00:18:40.975>my <00:18:41.149>xctober <00:18:41.324>like <00:18:41.500>I'm

369
00:18:43.500 --> 00:18:46.700
<00:18:43.500>sorry. <00:18:44.200>So <00:18:44.900>what

370
00:18:46.700 --> 00:18:49.400
<00:18:46.700>I <00:18:46.855>found <00:18:47.011>the <00:18:47.166>way <00:18:47.322>I <00:18:47.477>actually <00:18:47.633>did <00:18:47.788>it. <00:18:47.944>It <00:18:48.100>was

371
00:18:49.400 --> 00:18:52.300
<00:18:49.400>through <00:18:49.500>recruiters. <00:18:49.600>I <00:18:49.700>also <00:18:49.800>used <00:18:49.900>to <00:18:50.000>be <00:18:50.100>a <00:18:50.200>recruiter <00:18:50.300>a <00:18:50.400>long <00:18:50.500>time <00:18:50.600>ago. <00:18:50.700>So <00:18:50.800>I

372
00:18:52.300 --> 00:18:55.800
<00:18:52.300>actually <00:18:52.416>quite <00:18:52.533>like <00:18:52.649>them <00:18:52.766>because <00:18:52.883>they <00:18:53.000>do <00:18:53.116>your <00:18:53.233>work <00:18:53.350>for <00:18:53.466>you, <00:18:53.583>but <00:18:53.700>for

373
00:18:55.800 --> 00:18:57.300
<00:18:55.800>me, <00:18:56.250>I <00:18:56.700>always <00:18:57.149>had

374
00:18:58.400 --> 00:19:01.400
<00:18:58.400>A <00:18:58.540>bit <00:18:58.680>of <00:18:58.820>an <00:18:58.960>interest <00:18:59.100>in <00:18:59.240>times <00:18:59.380>of <00:18:59.520>okay. <00:18:59.660>Well, <00:18:59.800>I

375
00:19:01.400 --> 00:19:04.700
<00:19:01.400>say <00:19:01.555>an <00:19:01.711>interest <00:19:01.866>it's <00:19:02.022>a <00:19:02.177>selfish <00:19:02.333>commercial <00:19:02.488>interest. <00:19:02.644>It's <00:19:02.800>like

376
00:19:04.700 --> 00:19:07.800
<00:19:04.700>oh <00:19:04.900>whilst <00:19:05.100>the <00:19:05.300>world <00:19:05.500>goes <00:19:05.700>online <00:19:05.900>people <00:19:06.100>have

377
00:19:07.800 --> 00:19:10.200
<00:19:07.800>assets <00:19:08.033>whether <00:19:08.266>that's <00:19:08.500>money <00:19:08.733>whether <00:19:08.966>that's <00:19:09.200>um,

378
00:19:10.200 --> 00:19:13.400
<00:19:10.200>you <00:19:10.327>know, <00:19:10.454>IP <00:19:10.581>so <00:19:10.709>people <00:19:10.836>are <00:19:10.963>going <00:19:11.090>to <00:19:11.218>try <00:19:11.345>and <00:19:11.472>get <00:19:11.600>those

379
00:19:13.400 --> 00:19:16.400
<00:19:13.400>assets. <00:19:13.540>So <00:19:13.680>security <00:19:13.820>is <00:19:13.960>going <00:19:14.100>to <00:19:14.240>be <00:19:14.380>in <00:19:14.520>the <00:19:14.660>Future <00:19:14.800>No

380
00:19:16.400 --> 00:19:19.100
<00:19:16.400>Matter <00:19:16.527>What <00:19:16.654>I've <00:19:16.781>always <00:19:16.909>taken <00:19:17.036>approach <00:19:17.163>go <00:19:17.290>for <00:19:17.418>growth. <00:19:17.545>You'll <00:19:17.672>always <00:19:17.800>be

381
00:19:19.100 --> 00:19:22.200
<00:19:19.100>employable. <00:19:19.240>That's <00:19:19.379>why <00:19:19.520>I <00:19:19.659>do <00:19:19.800>computer <00:19:19.939>science <00:19:20.080>just <00:19:20.219>before <00:19:20.360>Lehman <00:19:20.500>Brothers.

382
00:19:22.200 --> 00:19:25.100
<00:19:22.200>And <00:19:22.307>then <00:19:22.415>when <00:19:22.523>I <00:19:22.630>was <00:19:22.738>doing <00:19:22.846>my <00:19:22.953>degree <00:19:23.061>and <00:19:23.169>financial <00:19:23.276>recession, <00:19:23.384>I <00:19:23.492>was <00:19:23.600>like

383
00:19:25.100 --> 00:19:28.700
<00:19:25.100>I <00:19:25.227>chose <00:19:25.354>a <00:19:25.481>good <00:19:25.609>degree. <00:19:25.736>I <00:19:25.863>made <00:19:25.990>the <00:19:26.118>right <00:19:26.245>choice. <00:19:26.372>So <00:19:26.500>what

384
00:19:28.700 --> 00:19:31.500
<00:19:28.700>I'd <00:19:28.827>say, <00:19:28.954>if <00:19:29.081>you <00:19:29.209>do <00:19:29.336>want <00:19:29.463>to <00:19:29.590>make <00:19:29.718>the <00:19:29.845>transition, <00:19:29.972>you're <00:19:30.100>probably

385
00:19:31.500 --> 00:19:33.600
<00:19:31.500>working <00:19:31.733>in <00:19:31.966>an <00:19:32.200>organization <00:19:32.433>organization <00:19:32.666>right <00:19:32.900>now.

386
00:19:34.700 --> 00:19:37.600
<00:19:34.700>Have <00:19:34.875>a <00:19:35.050>chat <00:19:35.225>with <00:19:35.400>security, <00:19:35.575>you <00:19:35.750>know <00:19:35.925>find <00:19:36.100>out

387
00:19:37.600 --> 00:19:40.200
<00:19:37.600>what <00:19:37.800>what <00:19:38.000>it <00:19:38.199>actually <00:19:38.399>is. <00:19:38.600>Is <00:19:38.800>it <00:19:39.000>something

388
00:19:40.200 --> 00:19:43.400
<00:19:40.200>you're <00:19:40.375>interested <00:19:40.550>in? <00:19:40.725>Is <00:19:40.900>there <00:19:41.075>a <00:19:41.250>security <00:19:41.425>Champion <00:19:41.600>program?

389
00:19:43.400 --> 00:19:46.300
<00:19:43.400>Could <00:19:43.555>you <00:19:43.711>you <00:19:43.866>know <00:19:44.022>Pioneer <00:19:44.177>it <00:19:44.333>can <00:19:44.488>you <00:19:44.644>work <00:19:44.800>with

390
00:19:46.300 --> 00:19:49.200
<00:19:46.300>your <00:19:46.455>colleagues <00:19:46.611>and <00:19:46.766>security <00:19:46.922>security <00:19:47.077>will <00:19:47.233>probably <00:19:47.388>love <00:19:47.544>to <00:19:47.700>hear

391
00:19:49.200 --> 00:19:52.700
<00:19:49.200>from <00:19:49.340>you <00:19:49.480>because <00:19:49.620>yes <00:19:49.760>a <00:19:49.900>developer <00:19:50.040>on <00:19:50.180>my <00:19:50.320>side. <00:19:50.460>So <00:19:50.600>yeah

392
00:19:52.700 --> 00:19:55.900
<00:19:52.700>having <00:19:52.980>you <00:19:53.260>know <00:19:53.540>internal <00:19:53.820>conversations <00:19:54.100>for

393
00:19:55.900 --> 00:19:58.700
<00:19:55.900>me <00:19:56.055>at <00:19:56.211>least <00:19:56.366>I <00:19:56.522>spoke <00:19:56.677>to <00:19:56.833>a <00:19:56.988>recruiter <00:19:57.144>and <00:19:57.300>and

394
00:19:58.700 --> 00:19:59.200
<00:19:58.700>here <00:19:58.925>I <00:19:59.150>am.

395
00:19:59.800 --> 00:20:00.600
grades

396
00:20:01.100 --> 00:20:04.100
<00:20:01.100>So <00:20:01.274>you <00:20:01.449>mentioned <00:20:01.625>oversp <00:20:01.800>also <00:20:01.975>for <00:20:02.149>as <00:20:02.324>a <00:20:02.500>starting

397
00:20:04.100 --> 00:20:07.800
<00:20:04.100>point. <00:20:04.227>So <00:20:04.354>there's <00:20:04.481>the <00:20:04.609>question. <00:20:04.736>Is <00:20:04.863>there <00:20:04.990>anything <00:20:05.118>else <00:20:05.245>for <00:20:05.372>security <00:20:05.500>learning

398
00:20:07.800 --> 00:20:10.600
<00:20:07.800>anything <00:20:08.000>else <00:20:08.200>than <00:20:08.399>over <00:20:08.600>top? <00:20:08.800>10? <00:20:09.000>Yeah. <00:20:09.200>So

399
00:20:10.600 --> 00:20:13.300
<00:20:10.600>the <00:20:10.740>top <00:20:10.879>10 <00:20:11.020>is <00:20:11.159>a <00:20:11.300>good <00:20:11.439>place <00:20:11.580>to <00:20:11.719>start <00:20:11.860>because <00:20:12.000>it

400
00:20:13.300 --> 00:20:16.400
<00:20:13.300>is <00:20:13.455>you <00:20:13.611>know <00:20:13.766>that <00:20:13.922>Foundation <00:20:14.077>if <00:20:14.233>you <00:20:14.388>are <00:20:14.544>looking, <00:20:14.700>you

401
00:20:16.400 --> 00:20:20.000
<00:20:16.400>know, <00:20:16.633>specifically <00:20:16.866>say <00:20:17.100>at <00:20:17.333>security <00:20:17.566>training <00:20:17.800>there's

402
00:20:19.100 --> 00:20:22.600
<00:20:19.100>lots <00:20:19.240>of <00:20:19.379>places <00:20:19.520>you <00:20:19.659>can <00:20:19.800>do. <00:20:19.939>Like <00:20:20.080>I'm <00:20:20.219>I'm <00:20:20.360>quite <00:20:20.500>basic

403
00:20:22.600 --> 00:20:25.800
<00:20:22.600>YouTube <00:20:22.774>is <00:20:22.949>a <00:20:23.125>good <00:20:23.300>place <00:20:23.475>to <00:20:23.649>start <00:20:23.824>because <00:20:24.000>yeah,

404
00:20:25.800 --> 00:20:28.000
<00:20:25.800>it's <00:20:26.080>also <00:20:26.360>free, <00:20:26.639>but <00:20:26.919>there <00:20:27.200>are

405
00:20:28.400 --> 00:20:31.400
<00:20:28.400>you <00:20:28.555>know, <00:20:28.711>commercial <00:20:28.866>providers <00:20:29.022>out <00:20:29.177>there <00:20:29.333>secure <00:20:29.488>code <00:20:29.644>Warriors <00:20:29.800>one.

406
00:20:31.400 --> 00:20:34.300
<00:20:31.400>I <00:20:31.516>think <00:20:31.633>there's <00:20:31.750>one <00:20:31.866>called <00:20:31.983>a <00:20:32.100>massive <00:20:32.216>Labs <00:20:32.333>you <00:20:32.450>can <00:20:32.566>have <00:20:32.683>ones <00:20:32.800>where

407
00:20:34.300 --> 00:20:37.400
<00:20:34.300>you're <00:20:34.416>doing. <00:20:34.533>It's <00:20:34.649>more <00:20:34.766>like <00:20:34.883>ethical <00:20:35.000>hacking <00:20:35.116>you're <00:20:35.233>like <00:20:35.350>trying <00:20:35.466>to <00:20:35.583>pen <00:20:35.700>test

408
00:20:37.400 --> 00:20:40.400
<00:20:37.400>each <00:20:37.600>other. <00:20:37.800>I <00:20:38.000>talk <00:20:38.200>a <00:20:38.400>lot <00:20:38.600>about <00:20:38.800>if

409
00:20:40.400 --> 00:20:43.000
<00:20:40.400>you <00:20:40.527>want <00:20:40.654>to <00:20:40.781>get <00:20:40.909>well, <00:20:41.036>I'm <00:20:41.163>in <00:20:41.290>the <00:20:41.418>Right <00:20:41.545>audience. <00:20:41.672>If <00:20:41.800>you

410
00:20:43.100 --> 00:20:46.300
<00:20:43.100>want <00:20:43.255>to <00:20:43.411>get <00:20:43.566>developers <00:20:43.722>cat <00:20:43.877>why <00:20:44.033>don't <00:20:44.188>you <00:20:44.344>have <00:20:44.500>an

411
00:20:46.300 --> 00:20:49.400
<00:20:46.300>internal <00:20:46.440>hackathon <00:20:46.580>because <00:20:46.720>what <00:20:46.860>you <00:20:47.000>might <00:20:47.139>find <00:20:47.280>is <00:20:47.419>the <00:20:47.560>seniors <00:20:47.700>developers

412
00:20:49.400 --> 00:20:52.200
<00:20:49.400>will <00:20:49.575>know <00:20:49.750>about <00:20:49.925>some <00:20:50.100>skeletons <00:20:50.275>in <00:20:50.450>the <00:20:50.625>closet <00:20:50.800>and

413
00:20:52.200 --> 00:20:55.300
<00:20:52.200>then <00:20:52.340>they <00:20:52.480>can <00:20:52.620>find <00:20:52.760>them <00:20:52.900>and <00:20:53.040>the <00:20:53.180>junior <00:20:53.320>developers <00:20:53.460>because <00:20:53.600>this

414
00:20:55.300 --> 00:20:58.300
<00:20:55.300>happens <00:20:55.427>to <00:20:55.554>me <00:20:55.681>will <00:20:55.809>be <00:20:55.936>like, <00:20:56.063>oh <00:20:56.190>my <00:20:56.318>God, <00:20:56.445>is <00:20:56.572>it <00:20:56.700>that

415
00:20:58.300 --> 00:21:00.900
<00:20:58.300>easy? <00:20:58.500>Like <00:20:58.700>what <00:20:58.899>have <00:20:59.100>I <00:20:59.300>been <00:20:59.500>doing? <00:20:59.700>So

416
00:21:01.100 --> 00:21:04.100
<00:21:01.100>An <00:21:01.240>element, <00:21:01.379>you <00:21:01.520>know <00:21:01.659>a <00:21:01.800>fear <00:21:01.939>that <00:21:02.080>but <00:21:02.219>what <00:21:02.360>you <00:21:02.500>can

417
00:21:04.100 --> 00:21:05.100
<00:21:04.100>do <00:21:04.399>is, <00:21:04.699>you <00:21:05.000>know.

418
00:21:06.400 --> 00:21:09.200
<00:21:06.400>For <00:21:06.540>at <00:21:06.680>least <00:21:06.820>with <00:21:06.960>my <00:21:07.100>experience <00:21:07.240>for <00:21:07.380>developers <00:21:07.520>who <00:21:07.660>don't <00:21:07.800>know

419
00:21:09.200 --> 00:21:12.400
<00:21:09.200>about <00:21:09.316>security <00:21:09.433>it <00:21:09.550>can <00:21:09.666>either <00:21:09.783>be <00:21:09.900>a <00:21:10.016>bit <00:21:10.133>of <00:21:10.250>a <00:21:10.366>like <00:21:10.483>scary. <00:21:10.600>Let's

420
00:21:12.400 --> 00:21:15.700
<00:21:12.400>not <00:21:12.527>go <00:21:12.654>that <00:21:12.781>or <00:21:12.909>oh, <00:21:13.036>no, <00:21:13.163>it's <00:21:13.290>fine. <00:21:13.418>I <00:21:13.545>know <00:21:13.672>stuff <00:21:13.800>like

421
00:21:15.700 --> 00:21:18.500
<00:21:15.700>yeah. <00:21:15.827>I <00:21:15.954>know. <00:21:16.081>I <00:21:16.209>know <00:21:16.336>the <00:21:16.463>year <00:21:16.590>was <00:21:16.718>Top <00:21:16.845>10, <00:21:16.972>but <00:21:17.100>then

422
00:21:18.500 --> 00:21:21.700
<00:21:18.500>when <00:21:18.675>you're <00:21:18.850>presented <00:21:19.025>with <00:21:19.200>actual <00:21:19.375>coding <00:21:19.550>examples <00:21:19.725>or <00:21:19.900>like

423
00:21:21.700 --> 00:21:24.200
<00:21:21.700>when <00:21:21.840>you <00:21:21.980>keep <00:21:22.120>getting <00:21:22.260>the <00:21:22.400>same <00:21:22.540>results <00:21:22.680>in <00:21:22.820>your <00:21:22.960>static <00:21:23.100>code

424
00:21:24.200 --> 00:21:27.200
<00:21:24.200>analysis, <00:21:24.327>you <00:21:24.454>get <00:21:24.581>the <00:21:24.709>story <00:21:24.836>of <00:21:24.963>the <00:21:25.090>recurring <00:21:25.218>bug <00:21:25.345>and <00:21:25.472>do <00:21:25.600>you

425
00:21:27.200 --> 00:21:27.500
<00:21:27.200>really <00:21:27.470>know?

426
00:21:28.700 --> 00:21:31.300
<00:21:28.700>Um, <00:21:28.933>so <00:21:29.166>yeah, <00:21:29.400>I <00:21:29.633>would <00:21:29.866>say <00:21:30.100>go

427
00:21:31.300 --> 00:21:34.600
<00:21:31.300>online. <00:21:31.580>There <00:21:31.860>are <00:21:32.139>commercial <00:21:32.419>providers <00:21:32.700>udemy's

428
00:21:34.600 --> 00:21:37.700
<00:21:34.600>great <00:21:34.755>one <00:21:34.911>as <00:21:35.066>well. <00:21:35.222>And <00:21:35.377>yes <00:21:35.533>speak <00:21:35.688>to <00:21:35.844>speak <00:21:36.000>internally

429
00:21:37.700 --> 00:21:40.400
<00:21:37.700>to <00:21:37.827>your <00:21:37.954>security <00:21:38.081>teams <00:21:38.209>find <00:21:38.336>out <00:21:38.463>what <00:21:38.590>the <00:21:38.718>priorities <00:21:38.845>are <00:21:38.972>because <00:21:39.100>you

430
00:21:40.400 --> 00:21:43.400
<00:21:40.400>might <00:21:40.575>find <00:21:40.750>that <00:21:40.925>your <00:21:41.100>team <00:21:41.275>or <00:21:41.450>your <00:21:41.625>vertical <00:21:41.800>industry

431
00:21:43.400 --> 00:21:46.300
<00:21:43.400>has <00:21:43.516>particular <00:21:43.633>things. <00:21:43.750>They <00:21:43.866>need <00:21:43.983>to <00:21:44.100>be <00:21:44.216>aware <00:21:44.333>of <00:21:44.450>if <00:21:44.566>you <00:21:44.683>work <00:21:44.800>in

432
00:21:46.300 --> 00:21:49.600
<00:21:46.300>finance, <00:21:46.455>you <00:21:46.611>know <00:21:46.766>cardholder <00:21:46.922>data <00:21:47.077>Etc. <00:21:47.233>So <00:21:47.388>always <00:21:47.544>start <00:21:47.700>internal

433
00:21:49.600 --> 00:21:52.400
<00:21:49.600>conversations, <00:21:49.716>that's <00:21:49.833>a <00:21:49.949>good <00:21:50.066>place <00:21:50.183>because <00:21:50.300>they <00:21:50.416>might <00:21:50.533>be <00:21:50.649>able <00:21:50.766>to <00:21:50.883>point <00:21:51.000>you

434
00:21:52.400 --> 00:21:53.800
<00:21:52.400>to <00:21:52.715>resources <00:21:53.030>internally <00:21:53.345>as <00:21:53.659>well.

435
00:21:54.900 --> 00:21:57.700
<00:21:54.900>And <00:21:55.100>I <00:21:55.300>guess <00:21:55.500>also <00:21:55.700>finding <00:21:55.900>some <00:21:56.100>communities <00:21:56.300>where

436
00:21:57.700 --> 00:22:00.000
<00:21:57.700>you <00:21:57.855>can <00:21:58.011>exchange <00:21:58.166>where <00:21:58.322>you <00:21:58.477>can <00:21:58.633>people <00:21:58.788>where <00:21:58.944>you <00:21:59.100>can

437
00:22:00.100 --> 00:22:03.300
<00:22:00.100>find <00:22:00.216>people <00:22:00.333>who <00:22:00.449>do <00:22:00.566>the <00:22:00.683>same <00:22:00.800>It's <00:22:00.916>always <00:22:01.033>important, <00:22:01.149>right? <00:22:01.266>Yeah, <00:22:01.383>that's <00:22:01.500>a

438
00:22:03.300 --> 00:22:06.400
<00:22:03.300>good <00:22:03.407>one <00:22:03.515>as <00:22:03.623>well. <00:22:03.730>So <00:22:03.838>I <00:22:03.946>go <00:22:04.053>I <00:22:04.161>in <00:22:04.269>London <00:22:04.376>or <00:22:04.484>actually <00:22:04.592>well <00:22:04.700>everywhere,

439
00:22:06.400 --> 00:22:09.300
<00:22:06.400>but <00:22:06.507>I <00:22:06.615>go <00:22:06.723>to <00:22:06.830>a <00:22:06.938>lot <00:22:07.046>of <00:22:07.153>meetups <00:22:07.261>so <00:22:07.369>you <00:22:07.476>can <00:22:07.584>just <00:22:07.692>find <00:22:07.800>them

440
00:22:09.300 --> 00:22:12.300
<00:22:09.300>on <00:22:09.440>meetup.com. <00:22:09.580>I <00:22:09.720>was <00:22:09.860>Pas <00:22:10.000>meetups <00:22:10.139>in <00:22:10.280>loads <00:22:10.419>of <00:22:10.560>different <00:22:10.700>cities.

441
00:22:12.300 --> 00:22:15.100
<00:22:12.300>I <00:22:12.407>was <00:22:12.515>in <00:22:12.623>Sweden <00:22:12.730>a <00:22:12.838>few <00:22:12.946>weeks <00:22:13.053>ago. <00:22:13.161>And <00:22:13.269>what <00:22:13.376>they <00:22:13.484>do <00:22:13.592>is <00:22:13.700>they

442
00:22:15.100 --> 00:22:18.000
<00:22:15.100>just <00:22:15.227>have <00:22:15.354>talks <00:22:15.481>a <00:22:15.609>bit <00:22:15.736>like <00:22:15.863>this <00:22:15.990>and <00:22:16.118>me <00:22:16.245>and <00:22:16.372>they <00:22:16.500>just

443
00:22:18.400 --> 00:22:21.700
<00:22:18.400>talk <00:22:18.527>about <00:22:18.654>different <00:22:18.781>aspects <00:22:18.909>of <00:22:19.036>security <00:22:19.163>so <00:22:19.290>you <00:22:19.418>can <00:22:19.545>go <00:22:19.672>you <00:22:19.800>don't

444
00:22:21.700 --> 00:22:24.100
<00:22:21.700>have <00:22:21.807>to <00:22:21.915>like, <00:22:22.023>you <00:22:22.130>know, <00:22:22.238>don't <00:22:22.346>tell <00:22:22.453>you <00:22:22.561>don't <00:22:22.669>have <00:22:22.776>to <00:22:22.884>tell <00:22:22.992>anyone <00:22:23.100>if

445
00:22:24.100 --> 00:22:27.300
<00:22:24.100>you <00:22:24.187>don't <00:22:24.274>want <00:22:24.362>to <00:22:24.449>or <00:22:24.537>talk <00:22:24.625>to <00:22:24.712>anyone <00:22:24.800>but <00:22:24.887>at <00:22:24.975>least <00:22:25.062>you <00:22:25.149>can <00:22:25.237>go <00:22:25.324>and <00:22:25.412>start <00:22:25.500>to

446
00:22:27.300 --> 00:22:30.100
<00:22:27.300>understand. <00:22:27.500>What <00:22:27.700>are <00:22:27.899>these <00:22:28.100>security <00:22:28.300>things? <00:22:28.500>You <00:22:28.700>know,

447
00:22:30.100 --> 00:22:33.900
<00:22:30.100>what <00:22:30.182>am <00:22:30.264>I <00:22:30.347>missing? <00:22:30.429>It's <00:22:30.511>like <00:22:30.594>the <00:22:30.676>tip <00:22:30.758>of <00:22:30.841>the <00:22:30.923>iceberg <00:22:31.005>you <00:22:31.088>might <00:22:31.170>think, <00:22:31.252>you <00:22:31.335>know <00:22:31.417>everything <00:22:31.500>that

448
00:22:33.900 --> 00:22:35.000
<00:22:33.900>you <00:22:34.098>can <00:22:34.296>only <00:22:34.494>see <00:22:34.692>that <00:22:34.890>much.

449
00:22:36.600 --> 00:22:39.100
<00:22:36.600>So <00:22:36.774>maybe <00:22:36.949>one <00:22:37.125>last <00:22:37.300>question <00:22:37.475>would <00:22:37.649>it <00:22:37.824>help <00:22:38.000>to

450
00:22:39.100 --> 00:22:42.600
<00:22:39.100>learn <00:22:39.379>meet <00:22:39.659>us <00:22:39.939>plot, <00:22:40.219>Metasploit? <00:22:40.500>Oh,

451
00:22:42.600 --> 00:22:45.300
<00:22:42.600>yeah. <00:22:42.740>So <00:22:42.879>metasployed <00:22:43.020>is <00:22:43.159>good. <00:22:43.300>That's <00:22:43.439>that's <00:22:43.580>a <00:22:43.719>kind <00:22:43.860>of <00:22:44.000>um,

452
00:22:45.300 --> 00:22:48.200
<00:22:45.300>that's <00:22:45.455>kind <00:22:45.611>of <00:22:45.766>like <00:22:45.922>a <00:22:46.077>hacky <00:22:46.233>one. <00:22:46.388>So <00:22:46.544>I <00:22:46.700>did

453
00:22:48.200 --> 00:22:51.100
<00:22:48.200>a <00:22:48.355>ethical <00:22:48.511>hacking <00:22:48.666>course <00:22:48.822>and <00:22:48.977>it's <00:22:49.133>all <00:22:49.288>on <00:22:49.444>Kali <00:22:49.600>Linux

454
00:22:51.100 --> 00:22:54.300
<00:22:51.100>and <00:22:51.255>that's <00:22:51.411>a <00:22:51.566>real <00:22:51.722>like <00:22:51.877>yeah <00:22:52.033>kind <00:22:52.188>of <00:22:52.344>red <00:22:52.500>team

455
00:22:54.300 --> 00:22:57.600
<00:22:54.300>approach. <00:22:54.475>So <00:22:54.649>the <00:22:54.825>same <00:22:55.000>with <00:22:55.175>like <00:22:55.350>Metasploit <00:22:55.524>but <00:22:55.700>sweet

456
00:22:57.600 --> 00:23:00.400
<00:22:57.600>as <00:22:57.740>well <00:22:57.879>and <00:22:58.020>what <00:22:58.159>you <00:22:58.300>can <00:22:58.439>also <00:22:58.580>ask <00:22:58.719>yourself. <00:22:58.860>Do <00:22:59.000>I

457
00:23:00.400 --> 00:23:03.600
<00:23:00.400>want <00:23:00.527>to <00:23:00.654>be <00:23:00.781>a <00:23:00.909>red <00:23:01.036>team? <00:23:01.163>Do <00:23:01.290>I <00:23:01.418>want <00:23:01.545>to <00:23:01.672>like <00:23:01.800>see

458
00:23:03.600 --> 00:23:06.100
<00:23:03.600>what <00:23:03.707>damage <00:23:03.815>I <00:23:03.923>can <00:23:04.030>cause <00:23:04.138>or <00:23:04.246>do <00:23:04.353>I <00:23:04.461>want <00:23:04.569>to <00:23:04.676>be <00:23:04.784>a <00:23:04.892>blue <00:23:05.000>team?

459
00:23:06.100 --> 00:23:09.100
<00:23:06.100>Do <00:23:06.187>I <00:23:06.274>want <00:23:06.362>to <00:23:06.449>defend <00:23:06.537>do <00:23:06.625>I <00:23:06.712>want <00:23:06.800>to <00:23:06.887>build <00:23:06.975>the <00:23:07.062>walls? <00:23:07.149>Like <00:23:07.237>I've <00:23:07.324>heard <00:23:07.412>of <00:23:07.500>all

460
00:23:09.100 --> 00:23:13.200
<00:23:09.100>the <00:23:09.193>hybrid <00:23:09.286>you <00:23:09.379>can <00:23:09.473>get <00:23:09.566>purple <00:23:09.659>team, <00:23:09.753>which <00:23:09.846>is <00:23:09.939>like <00:23:10.033>a <00:23:10.126>mix <00:23:10.219>of <00:23:10.313>both. <00:23:10.406>So <00:23:10.500>yes.

461
00:23:14.400 --> 00:23:17.100
<00:23:14.400>Metasploy <00:23:14.527>is <00:23:14.654>also <00:23:14.781>you <00:23:14.909>know <00:23:15.036>a <00:23:15.163>good <00:23:15.290>place <00:23:15.418>to <00:23:15.545>start <00:23:15.672>if <00:23:15.800>you

462
00:23:17.100 --> 00:23:20.400
<00:23:17.100>want <00:23:17.255>to <00:23:17.411>yeah <00:23:17.566>start <00:23:17.722>poking <00:23:17.877>holes, <00:23:18.033>but <00:23:18.188>it's <00:23:18.344>also <00:23:18.500>worth

463
00:23:20.400 --> 00:23:23.200
<00:23:20.400>thinking <00:23:20.575>about <00:23:20.750>the <00:23:20.925>broader <00:23:21.100>poke <00:23:21.275>holes <00:23:21.450>or <00:23:21.625>stop <00:23:21.800>them

464
00:23:23.700 --> 00:23:23.800
Etc.

465
00:23:24.500 --> 00:23:27.900
<00:23:24.500>Okay, <00:23:24.780>so, <00:23:25.060>thanks <00:23:25.340>again, <00:23:25.620>Stefania. <00:23:25.900>Oh,

466
00:23:27.900 --> 00:23:29.000
<00:23:27.900>thank <00:23:28.147>you <00:23:28.395>for <00:23:28.642>having <00:23:28.890>me.