Sunday, April 21, 2013

security links / podcasts / meetups for dfw infosec newcomers

***minor updates 9/11/2017


Twitter:

If you don't use twitter, wipe away your hipster-anti-hipster and sign up! .  If you are wondering where to start find me @hhopk, look at the people I am following, and follow some or all of them.

 

Training/Videos:   

Irongeek's Hacking Illustrated (Adrian Crenshaw's library of Conference presentations)

securitytube.net/  (long standing list of excellent training video)

https://www.cybrary.it/  Cybrary, courses and whitepapers on Secuirty


Meetups / Chapter meetings (DFW area):


UTDallas Computer Security Group:  Excellent documents and technical presentations:
https://csg.utdallas.edu/
**runs the gamut of high to low tech.. don’t get discouraged, but don’t start with “reverse Engineering”… look at Network Security / Penetration Testing / Pivoting ·  
      

North Texas Cyber Security Group (NTCSG) @
https://www.meetup.com/NTXCSG/ 


Security bSides DFW
http://www.securitybsides.com/w/page/118353951/DFW_2017

DC214 (Defcon local chapter)
http://dc214.org/

Dallas Hackers Associations (DHA) @Dallas_Hackers 
http://www.meetup.com/Dallas-Hackers-Association/

Plano Maker/Hacker Space @theroxyd
http://www.thelab.ms/



OWASP Dallas meet-ups
https://www.owasp.org/index.php/Dallas   



Dallas Makerspace
www.dallasmakerspace.org


Podcasts:




Infosec Daily (recently retired)
http://www.isdpodcast.com/

Security Weekly (formerly Pauldotcom)
http://securityweekly.com/podcasts 


Network Security:
http://netsecpodcast.com/

Exotic Liability:  (basically off the air)
http://www.exoticliability.libsyn.com/webpage/category/podcasts

GrumpySec Podcast:
http://www.grumpysec.com/

Down the Security RabbitHole:
http://podcast.wh1t3rabbit.net/

DevOps Cafe:
http://devopscafe.org/

Security / DevOps Mailing lists:






Cisco:
http://tools.cisco.com/security/center/home.x

OSS:
http://www.openwall.com/lists/oss-security/

Blogs:


Fun tools:

https://censys.io/ 
https://www.shodan.io/
https://riddler.io/
https://www.threatcrowd.org/
https://community.riskiq.com
https://www.threatminer.org/


challenges: (WIP)

infoseclabs • infoseclabs.net

If you want your site added here or know one I am missing hit me up at @hhopk on ze tweetz
Posted by Unknown at 8:13 PM 2 comments
Labels:

Sunday, March 10, 2013

Who really profits from vulnerable Java?

What another Java update? They are almost as frequent as blogs complaining about Java updates.  
However,  few seem to consider the real value of theses vulnerabilities and their subsequent patches.  Value to?  consumers? fuzzers?  Security?
People seem to be looking right past the profit model for java exploits to Oracle.  I hear often in the infosec community "it would suck to Oracle"  or "why dont they clean up their filthu bug ridden code.?"

To put it simply ,  they profit from every patch release.  They load up the not so savvy consumers with bloatware,  adware,  and just plain crap with each Java update.   I am still trying to find the exact relationship between Ask and Oracle.  And what the per install payout is. 

Posted by Unknown at 5:01 PM 0 comments

going Pro Se to Dissolve a Writ Of Garnishment concluded

ill save you the essay.

Feb 15th was my court date, and I won.  The judge only needed to hear that 100% of funds in the account were mine and mine only.

case law supports that my parent did have bare legal title to the funds,  but the true owner is the signor who maintains equitable ownership.  The attorney from Regent & Associates had nothing to say.

thanks to my wife, Google Scholar, and my father inlaw for their moral support.

Posted by Unknown at 4:47 PM 0 comments
Labels:
Subscribe to: Posts (Atom)