Start / Relating to DevSecOps / Episode 010 security configs default configs and other decisions we regret

Episode #010: Security Configs, Default Configs, and other decisions we regret

40 min • 11 september 2020

This episode we riff on some of the hotter topics we discussed during Episode 9 as we cover security misconfigurations, default misconfigurations, and the responsibility of application/infrastructure configs in an organization. We talk about how to best interact with other teams to ensure configurations are manageable, maintained, and in the right hands

Senaste avsnitt

Episode #076: ShmooBalls & Open Source Brawls: DevSecOps, Risk, and the Final ShmooCon

4 februari | 34 min

Episode #075: Ghosts of DevSecOps: Past, Present, and Future

24 december 2024 | 36 min

Episode #074: Battling Budgets in Security

9 december 2024 | 36 min

Episode #073: Staffing Security in DevSecOps

21 oktober 2024 | 37 min

Episode #072: Measuring the Immeasurable: The Power and Pitfalls of Metrics in DevSecOps

28 augusti 2024 | 34 min

Episode #071: Retro Vibes with Retrospectives

19 juni 2024 | 26 min

Episode: #070: Putting da BOM in SBOM and SCA

8 maj 2024 | 40 min

Episode #069: Your SaaS is Grass

20 mars 2024 | 33 min

Episode #068: Data Breaches and DevSecOps

21 februari 2024 | 34 min

Episode #067: Welcome to 2024! AppSec Resolutions and A Smhoocon Recap

26 januari 2024 | 35 min

Episode #066: Exploration of the Shifting Definition of Shifting Left

5 december 2023 | 43 min

Episode #065: LASCON 2023 Recap - AI, a Misunderstood Menace or Magic Bullet

10 november 2023 | 33 min

Episode #064: Don't Instigate, Mitigate!

25 september 2023 | 32 min

Episode #063: Unscrambling CloudSecSoup with CSPM, Vuln Management, SIEMs, and Log Aggregators

5 september 2023 | 38 min

Episode #062: Cyber Sentinels: Ken and Mike in the DevSecOps Labyrinth

7 augusti 2023 | 40 min

Episode #061: Fossilized Code & Future Clouds: Contrasting Worlds of Balance in Legacy Applications

18 juli 2023 | 39 min

Episode #060: Precise Angles for Automation in DevSecOps Adventures

22 juni 2023 | 57 min

Episode #059: DevSecOps Pentesting, Possible or Preposturous?

8 juni 2023 | 43 min

Episode #058: Merging Your Mergers without Git Merge

1 juni 2023 | 33 min

Episode #057: Security Without Compromise!

19 maj 2023 | 31 min

Episode #56: Respond Well in Incident Response with DevSecOps

21 april 2023 | 35 min

Episode #055: Engineering Empathy with Hecber Cordova

31 mars 2023 | 42 min

Episode #54: ChatGPT's Cryptic Insights: AI in Security for Developers and Operations Teams

23 mars 2023 | 37 min

Episode #053: DevSecOps on the Emerald Isle: Insights from Global OWASP AppSec Dublin, with a Side of Guinness and Frustrations with Application Security Vendors

8 mars 2023 | 41 min

Episode #052: Dude! Where's My Stuff? Application Inventory and Service Discovery

7 februari 2023 | 29 min

Episode #051: Hiring for DevSecOps in 2023!

14 januari 2023 | 51 min

Episode #050: The Evolution of Data Security in DevSecOps

3 december 2022 | 35 min

Episode #049: IAM! The Myers Briggs of DevSecOps

24 oktober 2022 | 38 min

Episode #048: Threat Modeling doesn't need to feel like pain and sorrow

16 september 2022 | 42 min

Episode #47: Geese aren't the only things migrating in the cloud, but we're more secure at least

8 augusti 2022 | 38 min

Episode #046: Security Spiderwebs with Kubernetes and how Cloud helps (and hurts)

11 juli 2022 | 37 min

Episode #045: What is DevSecOps in 2022 an R2DSO anniversary redux

10 juni 2022 | 35 min

Episode #044: Multiball Pinball with Multicloud Hot Takes and Infrastructure as Code

21 maj 2022 | 37 min

Episode #043: Security leaves the cave to go to Miami with the Blockchain People and this episode happened

20 april 2022 | 34 min

Episode #042: Perscription Lenses or Sunglasses for Eyes on Code

31 mars 2022 | 34 min

Episode #041: Holistic Cloud Medicine in the Face of the Modularization of Cloud Components Affects Applications

16 mars 2022 | 31 min

Episode #040: Over the hill with blockchain and DevSecOps with digital money

25 februari 2022 | 36 min

Episode #039: Cloud Metal Detectors with Monitoring and Logging

16 februari 2022 | 32 min

Episode #038: Layers of the DevSecOps Onion, are we reversing time?

2 februari 2022 | 36 min

Episode #037: New Year, New Security what can you do to level up?

19 januari 2022 | 35 min

Episode #036: Trending Topics from Terraform to Testing

7 december 2021 | 38 min

Happy Holidays from R2DSO!

24 november 2021 | 2 min

Episode #035: Successful Unit Testing Through Collaboration with Your Unit

2 november 2021 | 42 min

Episode #034: Attack of the Git PR through K8s

11 oktober 2021 | 42 min

Episode #033: Getting out of git by branching out with branching strategies

21 september 2021 | 33 min

Episode #32: Hooks, Kits, and Git - putting security into your git pipeline

7 september 2021 | 40 min

Episode 031: Git Security Done with Git

17 augusti 2021 | 38 min

Episode #030: Blueprints, Reference Architectures, and Plans - Building Apps Securely

26 juli 2021 | 35 min

Episode #029: Does anyone REALLY do DevSecOps, and succeed?

6 juli 2021 | 31 min

Episode #028: Non-technical management and Email as your IDE

22 juni 2021 | 57 min

Episode #027: Hot Takes on Blogs: Part I - Are QA, BA, and DBAs Dead?

3 juni 2021 | 35 min

Episode #026: Starting right by shifting left - what to do at build time

21 maj 2021 | 33 min

Episode #025: Warm blankets around your cloud with CSPM and Michael McCabe

11 maj 2021 | 57 min

Episode #024: The first line of defense for MicroServices - AUTH

26 april 2021 | 40 min

Episode #023: A call back to Microservices - do we even get it yet?

10 april 2021 | 33 min

Episode #22: From Engineer to CTO and what security means along the way w/ Jonathan Schwartz

12 mars 2021 | 42 min

Episode #021: An Outside-In Look at Application Inventory

26 februari 2021 | 34 min

Episode #20: Security Operations ain't what it used to be

14 februari 2021 | 37 min

Episode 019: Welcome to 2021 - R2DSO goes visual and more

25 januari 2021 | 31 min

Episode #18: Was 2020 just a giant Chaos Engineering Experiment? Part Deux: Tooling and Security Experiments

22 december 2020 | 51 min

Episode #017: Chaos in your Engineering, what to do if Zombies attack your cloud

4 december 2020 | 53 min

Episode #016: Terraform CDK, finishing the Infra as Code series with its final form?

11 november 2020 | 47 min

Episode #015: Quest to Terraform CDK through the Amazon CDK

1 november 2020 | 39 min

Episode #014: Approaching Terraform and other "as-code" fun

17 oktober 2020 | 41 min

Episode #013: How a backend engineer looks at XSS

3 oktober 2020 | 49 min

Episode #012: What DevSecOps means to a SCRUM master with Jenn Molyneaux

24 september 2020 | 60 min

Episode #011: Bugs vs Vulns - what's your opinion?

18 september 2020 | 34 min

Episode #010: Security Configs, Default Configs, and other decisions we regret

11 september 2020 | 40 min

Episode #009: OWASP Top 10: Awareness, not Measurement

4 september 2020 | 42 min

Episode #008: Testing Depths of the DevSecOps River with Both Feet

19 augusti 2020 | 56 min

Episode #007: Service Mesh, more than a Sean Connery sidecar to your Indiana Jones App

12 augusti 2020 | 43 min

Episode #006: How Engineering Titles Affect Your Communication with Development and Product Engineering Teams

5 augusti 2020 | 42 min

Episode #005: Know Your Audience, the Face of Documentation and Training in a DevSecOps World

31 juli 2020 | 38 min

Episode #004: Be careful with your logs aka a hand grenade with a dictionary attached to it

22 juli 2020 | 39 min

Episode #003: Bookending DevSecOps starting with Threat Models

8 juli 2020 | 35 min

Episode #002: A Product Engineering Perspective on DevSecOps

30 juni 2020 | 47 min

Relating to DevSecOps #001: What is DevSecOps?!

23 juni 2020 | 41 min

Episode #010: Security Configs, Default Configs, and other decisions we regret

Senaste avsnitt

Episode 079: CISOver It: When Dashboards Replace Direction

Episode #078: 🔥 Burn Your 30-page Policies: Tanya’s Got Better Ideas

Episode #077: Is Google Eating the Cloud? 🔥 Wiz.io Acquisition Hot Takes

Episode #076: ShmooBalls & Open Source Brawls: DevSecOps, Risk, and the Final ShmooCon

Episode #075: Ghosts of DevSecOps: Past, Present, and Future

Episode #074: Battling Budgets in Security

Episode #073: Staffing Security in DevSecOps

Episode #072: Measuring the Immeasurable: The Power and Pitfalls of Metrics in DevSecOps

Episode #071: Retro Vibes with Retrospectives

Episode: #070: Putting da BOM in SBOM and SCA

Episode #069: Your SaaS is Grass

Episode #068: Data Breaches and DevSecOps

Episode #067: Welcome to 2024! AppSec Resolutions and A Smhoocon Recap

Episode #066: Exploration of the Shifting Definition of Shifting Left

Episode #065: LASCON 2023 Recap - AI, a Misunderstood Menace or Magic Bullet

Episode #064: Don't Instigate, Mitigate!

Episode #063: Unscrambling CloudSecSoup with CSPM, Vuln Management, SIEMs, and Log Aggregators

Episode #062: Cyber Sentinels: Ken and Mike in the DevSecOps Labyrinth

Episode #061: Fossilized Code & Future Clouds: Contrasting Worlds of Balance in Legacy Applications

Episode #060: Precise Angles for Automation in DevSecOps Adventures

Episode #059: DevSecOps Pentesting, Possible or Preposturous?

Episode #058: Merging Your Mergers without Git Merge

Episode #057: Security Without Compromise!

Episode #56: Respond Well in Incident Response with DevSecOps

Episode #055: Engineering Empathy with Hecber Cordova

Episode #54: ChatGPT's Cryptic Insights: AI in Security for Developers and Operations Teams

Episode #053: DevSecOps on the Emerald Isle: Insights from Global OWASP AppSec Dublin, with a Side of Guinness and Frustrations with Application Security Vendors

Episode #052: Dude! Where's My Stuff? Application Inventory and Service Discovery

Episode #051: Hiring for DevSecOps in 2023!

Episode #050: The Evolution of Data Security in DevSecOps

Episode #049: IAM! The Myers Briggs of DevSecOps

Episode #048: Threat Modeling doesn't need to feel like pain and sorrow

Episode #47: Geese aren't the only things migrating in the cloud, but we're more secure at least

Episode #046: Security Spiderwebs with Kubernetes and how Cloud helps (and hurts)

Episode #045: What is DevSecOps in 2022 an R2DSO anniversary redux

Episode #044: Multiball Pinball with Multicloud Hot Takes and Infrastructure as Code

Episode #043: Security leaves the cave to go to Miami with the Blockchain People and this episode happened

Episode #042: Perscription Lenses or Sunglasses for Eyes on Code

Episode #041: Holistic Cloud Medicine in the Face of the Modularization of Cloud Components Affects Applications

Episode #040: Over the hill with blockchain and DevSecOps with digital money

Episode #039: Cloud Metal Detectors with Monitoring and Logging

Episode #038: Layers of the DevSecOps Onion, are we reversing time?

Episode #037: New Year, New Security what can you do to level up?

Episode #036: Trending Topics from Terraform to Testing

Happy Holidays from R2DSO!

Episode #035: Successful Unit Testing Through Collaboration with Your Unit

Episode #034: Attack of the Git PR through K8s

Episode #033: Getting out of git by branching out with branching strategies

Episode #32: Hooks, Kits, and Git - putting security into your git pipeline

Episode 031: Git Security Done with Git

Episode #030: Blueprints, Reference Architectures, and Plans - Building Apps Securely

Episode #029: Does anyone REALLY do DevSecOps, and succeed?

Episode #028: Non-technical management and Email as your IDE

Episode #027: Hot Takes on Blogs: Part I - Are QA, BA, and DBAs Dead?

Episode #026: Starting right by shifting left - what to do at build time

Episode #025: Warm blankets around your cloud with CSPM and Michael McCabe

Episode #024: The first line of defense for MicroServices - AUTH

Episode #023: A call back to Microservices - do we even get it yet?

Episode #22: From Engineer to CTO and what security means along the way w/ Jonathan Schwartz

Episode #021: An Outside-In Look at Application Inventory

Episode #20: Security Operations ain't what it used to be

Episode 019: Welcome to 2021 - R2DSO goes visual and more

Episode #18: Was 2020 just a giant Chaos Engineering Experiment? Part Deux: Tooling and Security Experiments

Episode #017: Chaos in your Engineering, what to do if Zombies attack your cloud

Episode #016: Terraform CDK, finishing the Infra as Code series with its final form?

Episode #015: Quest to Terraform CDK through the Amazon CDK

Episode #014: Approaching Terraform and other "as-code" fun

Episode #013: How a backend engineer looks at XSS

Episode #012: What DevSecOps means to a SCRUM master with Jenn Molyneaux

Episode #011: Bugs vs Vulns - what's your opinion?

Episode #010: Security Configs, Default Configs, and other decisions we regret

Episode #009: OWASP Top 10: Awareness, not Measurement

Episode #008: Testing Depths of the DevSecOps River with Both Feet

Episode #007: Service Mesh, more than a Sean Connery sidecar to your Indiana Jones App

Episode #006: How Engineering Titles Affect Your Communication with Development and Product Engineering Teams

Episode #005: Know Your Audience, the Face of Documentation and Training in a DevSecOps World

Episode #004: Be careful with your logs aka a hand grenade with a dictionary attached to it

Episode #003: Bookending DevSecOps starting with Threat Models