May 28, 2013

In this episode...

• John discusses some of the foundational principles of Threat Modeling
• We talk about why threat modeling is like your time in high school
• We discuss why threat modeling is such an incredibly important tool to the enterprise
• John gives us some nuggets of his experience with threat modeling enterprise...

May 20, 2013

Welcome to Monday, May 20th 2013 as James and I discuss the last 2 weeks' worth of Information Security news and relate it (attemptively) to your enterprise day-job. This week was a bit on the lighter side, with the quote of the year (as far as I'm concerned) winner going to the Washington State Administrative Office of...

May 13, 2013

In this episode...

• Kevin, James and I discuss why penetration testing reports are often so worthless
• Kevin and I disagree. Then we agree, sort of.
• We discuss the major differences between the 'builder' and 'breaker' mindset, and whether they're actually different people
• Kevin gives some fantastic examples of how...

May 6, 2013

It's another beautiful Monday (somewhere) and we've got the news of the last 2 weeks covered, and we're breaking it down for you. The news this week is, well, quite frankly kind of dark. Everything tells us we're in for a rough ride for the rest of the year, and it's only getting worse.

If I sound a little funny, it's...