Infosec Myths, Mistakes, and Misconceptions - Adrian Sanabria - ASW #279 - podcast episode cover

Infosec Myths, Mistakes, and Misconceptions - Adrian Sanabria - ASW #279

Apr 02, 20241 hr 1 min
--:--
--:--
Download Metacast podcast app
Listen to this episode in Metacast mobile app
Don't just listen to podcasts. Learn from them with transcripts, summaries, and chapters for every episode. Skim, search, and bookmark insights. Learn more

Episode description

Sometimes infosec problems can be summarized succinctly, like "patching is hard". Sometimes a succinct summary sounds convincing, but is based on old data, irrelevant data, or made up data. Adrian Sanabria walks through some of the archeological work he's done to dig up the source of some myths. We talk about some of our favorite (as in most disliked) myths to point out how oversimplified slogans and oversimplified threat models lead to bad advice -- and why bad advice can make users less secure.

Segment resources:

The OWASP Top 10 gets its first update after a year, Metasploit gets its first rewrite (but it's still in Perl), PHP adds support for prepared statements, RSA Conference puts passwords on notice while patching remains hard, and more!

Visit https://www.securityweekly.com/asw for all the latest episodes!

Show Notes: https://securityweekly.com/asw-279

For the best experience, listen in Metacast app for iOS or Android
Open in Metacast
Infosec Myths, Mistakes, and Misconceptions - Adrian Sanabria - ASW #279 | Application Security Weekly (Audio) podcast - Listen or read transcript on Metacast