Podcast Episodes

Collecting Bounties and Building Communities - Ben Sadeghipour - ASW Vault

Check out this interview from the ASW Vault, hand picked by main host Mike Shema! This segment was originally published on April 18, 2023.

We talk wi…

1 year, 9 months ago

Node.js Secure Coding - Oliver Tavakoli, Chris Thomas, Liran Tal - ASW #286

Secure coding education should be more than a list of issues or repeating generic advice. Liran Tal explains his approach to teaching developers thro…

1 year, 9 months ago

Inside the OWASP Top 10 for LLM Applications - Sandy Dunn, Mike Fey, Josh Lemos - ASW #285

Everyone is interested in generative AIs and LLMs, and everyone is looking for use cases and apps to apply them to. Just as the early days of the web…

1 year, 10 months ago

AI & Hype & Security (Oh My!) & Hacking AI Bias - Caleb Sima, Keith Hoodlet - ASW #284

A lot of AI security has nothing to do with AI -- things like data privacy, access controls, and identity are concerns for any new software and in ma…

1 year, 10 months ago

Why Companies Continue to Struggle with Supply Chain Security - Melinda Marks - ASW #283

Companies deploy tools (usually lots of tools) to address different threats to supply chain security. Melinda Marks shares some of the chaos those co…

1 year, 10 months ago

Sustainable Funding of Open Source Tools - Mark Curphey, Simon Bennetts - ASW #282

How can open source projects find a funding model that works for them? What are the implications with different sources of funding? Simon Bennetts ta…

1 year, 10 months ago

Demystifying Security Engineering Career Tracks - Karan Dwivedi - ASW #281

There are as many paths into infosec as there are disciplines within infosec to specialize in. Karan Dwivedi talks about the recent book he and co-au…

1 year, 11 months ago

Lessons That The XZ Utils Backdoor Spells Out - Farshad Abasi - ASW #280

We look into the supply chain saga of the XZ Utils backdoor. It's a wild story of a carefully planned long con to add malicious code to a commonly us…

1 year, 11 months ago

Infosec Myths, Mistakes, and Misconceptions - Adrian Sanabria - ASW #279

Sometimes infosec problems can be summarized succinctly, like "patching is hard". Sometimes a succinct summary sounds convincing, but is based on old…

1 year, 11 months ago

Successful Security Needs a Streamlined UX - Benedek Gagyi - ASW #278

One of the biggest failures in appsec is an attitude that blames users for security problems. A lot of processes and workflows break down because of …

1 year, 11 months ago