Category: speaking
-

Mirroring known vulnerability data globally, for free.
If you just want the answer to “where do I find a reliable global mirror of NVD vulnerability data?” the answer is https://cveb.in/ . It is being mirrored on the same servers used for major open source projects so you’re probably already trusting them. If you want to hear the story of how we got…
-

Vulnerability Scanning for Free (as in Puppies)
I’m giving a talk at pyCascades this afternoon and I just wanted to share the slides for folk who like that kind of thing. PDF: https://drive.google.com/file/d/125cCmmk8k5UtfV3QajNOXml1YW5nxM2i/view?usp=sharing ODP (LibreOffice Impress) : https://drive.google.com/file/d/1u3_5LQUYYPiv9hSCbcgG_gOGn96a-di2/view?usp=sharing (Contains notes but they’re an early talk draft) Google Docs version (not the original, probably has minor formatting issues but may be easier to…
-
Video of my Python Security Tools talk at PyCon 2019
I’m hoping to put together a post with all the text of my talk and slides in a non-video format (because I like having my talks in non-talk format!), but in the meantime, enjoy the video of the talk I gave at PyCon this year! The talk is on Python Security Tools, because I found…
-

Is Open Source Software Really More Secure? (Pycon Pune 2017 Keynote)
Back in February, I keynoted at Pycon Pune in India. I decided to start with one of the questions that comes up frequently when I tell people that my day job is in open source security: “Is open source software really more secure?” Here’s the video! Hopefully one of these days I’ll get the slides…
-

Taking No for an Answer (Open Source Bridge 2016 talk)
I gave one talk and ran one tutorial at Open Source Bridge 2016 back in June. For those of you not familiar with it, Open Source Bridge is an open source conference with a focus on “open source citizenship” that leads to a great combination of technical and social thought from people who are part…
-

OSB 2015 – Internet of Things Militia: Paramilitary Training for your IoT devices (Video & Slides)
Security folk generally talk about how the Internet of Things is bad for security, but it also brings new sensors and connected devices that could co-operate in new and interesting ways. Could we use internet things to enhance security?
-

OSB 2015 – Bringing Security to Your Open Source Project (Video & Slides)
With high profile breaches in open source projects, the issue of security has become one of great import to many people. But many projects, especially smaller ones, are intimidated by the idea of a security audit. This talk will discuss ways for smaller projects to experiment, learn, and even have fun improving their security. No…