Episode 229: Security with Rey Bango
52:21 Share

`const podcast = {   episode: 229,  title: 'Security',  topics: [     'Security', 'business', 'insurance'  ],  guest: 'Rey Bango'  hosts: [    'Craig Shoemaker', 'Ward Bell'  ]};`

Recording date: 03/30/2023

John Papa @John_Papa)

Ward Bell @WardBell)

Dan Wahlin @DanWahlin)

Craig Shoemaker @craigshoemaker)

Rey Bango @ReyBango)

Brought to you by

- AG Grid)

)

- Narwhal)

Visit nx.dev) to get the preeminent open-source toolkit for monorepo development, today.

)

Resources:

• LastPass Issues Update on Data Breach, But Users Should Still Change Passwords - CNET)

• How to Think Like a Hacker)

• How to Write Secure Code)

• Static Application Security Testing)

• Veracode)

• Snyk)

• Typosquatting)

• Open Worldwide Application Security Project (OWASP))

• What is Dynamic Application Security Testing (DAST)?)

• Attack IQ)

• Red Canary)

• Zero Trust Security)

• Wazuh - The free and open source XDR platform)

• Defcom)

• Security Courses on Udemy)

Timejumps

• 00:30) Welcome
• 01:12) Guest introduction
• 02:53) What does offensive security mean?
• 07:42) Sponsor: Ag Grid
• 08:46) How do you balance security and ease for developing?
• 14:00) Is there a tool or AI for security?
• 21:22) Where are the guard rails for people?
• 34:02) Sponsor: Narwhal
• 34:39) How do you deal with the humans using the apps?
• 40:18) Dealing with supply chain and npm
• 47:28) Final thoughts

Podcast editing on this episode done by Chris Enns of Lemon Productions).