const podcast = { episode: 229, title: 'Security', topics: [ 'Security', 'business', 'insurance' ], guest: 'Rey Bango' hosts: [ 'Craig Shoemaker', 'Ward Bell' ]};
Recording date: 03/30/2023
John Papa @John_Papa
Ward Bell @WardBell
Dan Wahlin @DanWahlin
Craig Shoemaker @craigshoemaker
Rey Bango @ReyBango
Brought to you by* AG Grid * Narwhal
Visit nx.dev to get the preeminent open-source toolkit for monorepo development, today.
Resources:* LastPass Issues Update on Data Breach, But Users Should Still Change Passwords - CNET * How to Think Like a Hacker * How to Write Secure Code * Static Application Security Testing * Veracode * Snyk * Typosquatting * Open Worldwide Application Security Project (OWASP) * What is Dynamic Application Security Testing (DAST)? * Attack IQ * Red Canary * Zero Trust Security * Wazuh - The free and open source XDR platform * Defcom * Security Courses on Udemy
Timejumps 00:30 Welcome * 01:12 Guest introduction * 02:53 What does offensive security mean? * 07:42 Sponsor: Ag Grid * 08:46 How do you balance security and ease for developing? * 14:00 Is there a tool or AI for security? * 21:22 Where are the guard rails for people? * 34:02 Sponsor: Narwhal * 34:39 How do you deal with the humans using the apps? * 40:18 Dealing with supply chain and npm * 47:28* Final thoughts
Podcast editing on this episode done by Chris Enns of Lemon Productions.