Jeffrey Groman's guest appearances

Jeffrey Groman

Adventures in DevOps

Devchat.tv Episode Roundup

DevOps Speakeasy Podcast

Chris Short

Baruch Sadogursky

Alessandro Diaferia

JJ Asghar

Sean Porter

Björn Rabenstein

Slava Koltovich

Yann Stoneman

Jonathan Hall

D. Foy

Lance Albertson

Joe Garber

Ivan Krnic

Jillian Rowe

Oleg Chunikin

OwlTail

In this episode Kat (@Dixie3Flatline) and  Baruch (@jbaruch) interviewed Jeffrey Groman (@jeffrey_groman), a cybersecurity advisor, about cybersecurity in the age of DevOps and what the hell DevSecOps is. What is DevSecOps? SQL Injection, pwns you since 1998 Proactive vs reactive security Red team, Blue team and their games July 2020 F5 security incident Home router security report 2020 (it's bad, people) Your router should auto-update Continuous updates for security Texas Instruments blocked C execution on their calculators! No more Doom! IoT devices-based botnet is a reality for 2 years now "Do you want to keep this setting" is Win 95 flavor of local rollback List of self-updating routers (pick one of those next time) Jeffrey's LinkedIn with the motto "Assess, Advise, Educate"

In this episode Kat (<a href="https://twitter.com/Dixie3Flatline" rel="nofollow" target="_blank">@Dixie3Flatline</a>) and  Baruch (<a href="https://twitter.com/jbaruch" rel="nofollow" target="_blank">@jbaruch</a>) interviewed Jeffrey Groman (<a href="https://twitter.com/jeffrey_groman" rel="nofollow" target="_blank">@jeffrey_groman</a>), a cybersecurity advisor, about cybersecurity in the age of DevOps and what the hell DevSecOps is. <ul><li><a href="https://www.redhat.com/en/topics/devops/what-is-devsecops" rel="nofollow" target="_blank">What is DevSecOps?</a></li> <li><a href="https://www.esecurityplanet.com/network-security/how-was-sql-injection-discovered.html" rel="nofollow" target="_blank">SQL Injection, pwns you since 1998</a></li> <li><a href="https://thinktechadvisors.com/2020/01/proactive-vs-reactive-cybersecurity/" rel="nofollow" target="_blank">Proactive vs reactive security</a></li> <li><a href="https://www.csoonline.com/article/2122440/emergency-preparedness-red-team-versus-blue-team-how-to-run-an-effective-simulation.html" rel="nofollow" target="_blank">Red team, Blue team and their games</a></li> <li><a href="https://www.techradar.com/news/f5-issues-fixes-for-major-cybersecurity-flaw" rel="nofollow" target="_blank">July 2020 F5 security incident</a></li> <li><a href="https://www.fkie.fraunhofer.de/content/dam/fkie/de/documents/HomeRouter/HomeRouterSecurity_2020_Bericht.pdf" rel="nofollow" target="_blank">Home router security report 2020 (it's bad, people)</a></li> <li><a href="https://www.expressnews.com/news/local/article/If-your-WiFi-router-auto-updates-that-may-not-be-12988660.php" rel="nofollow" target="_blank">Your router should auto-update</a></li> <li><a href="https://liquidsoftware.com/blog/defeating-zero-day-attacks/" rel="nofollow" target="_blank">Continuous updates for security</a></li> <li><a href="https://www.lifehacker.com.au/2020/05/dont-update-your-ti-83-or-ti-84-calculators-firmware/" rel="nofollow" target="_blank">Texas Instruments blocked C execution on their calculators! No more Doom!</a></li> <li><a href="https://www.zdnet.com/article/this-botnet-snares-your-smart-devices-to-perform-ddos-attacks/" rel="nofollow" target="_blank">IoT devices-based botnet is a reality for 2 years now</a></li> <li><a href="http://www.helpwithwindows.com/windows95/tune-20.html" rel="nofollow" target="_blank">"Do you want to keep this setting" is Win 95 flavor of local rollback</a></li> <li><a href="https://routersecurity.org/firmware.selfupdating.php" rel="nofollow" target="_blank">List of self-updating routers (pick one of those next time)</a></li> <li><a href="https://www.linkedin.com/in/jeffrey-groman/" rel="nofollow" target="_blank">Jeffrey's LinkedIn with the motto "Assess, Advise, Educate"</a></li></ul>

DevOpsSpeakeasy Podcast S01E16: Jeffrey Groman on Cybersecurity, DevSecOps, and the relationship between the two

JavaScript Remote Conf 2020 May 13th to 15th - register now! Jeffrey Groman is a CyberSecurity expert. He joins the panel to answer our questions and lead a discussion on the basics of security as it applied to DevOps. We start out with a discussion on breaking down silos and making security everyone's job. Panelists   Nell Shamrell-Harrington   Tyler Bird   Scott Nixon   Charles Max Wood   Guest   Jeffrey Groman   Sponsors   Educative.io | Click here for 10% discount   CacheFly      "The MaxCoders Guide to Finding Your Dream Developer Job" by Charles Max Wood is now available on Amazon. Get Your Copy Today!    Links   Ghost in the Wires   Amazon S3 Features   Block Public Access   OWASP   Equifax Officially Has No Excuse   MageCart   sonatype   Sans   Picks Nell Shamrell-Harrington:   Controlled Chaos   The Witcher   Tyler Bird:   XKCD   What is a Stemcell?   Scott Nixon:   Pandemic   Sriracha   Offensive Security   Hack The Box   Python Dependency Security   Charles Max Wood:   Devchat.tv/conferences   Devchat.tv/meetups   Jeffrey Groman:   Mitre ATT&amp;CK 

<h1><a href="https://devchat.tv/conferences/javascript-remote-2020/" rel="nofollow" target="_blank">JavaScript Remote Conf 2020</a></h1> <h1><a href="https://devchat.tv/conferences/javascript-remote-2020/" rel="nofollow" target="_blank">May 13th to 15th - register now!</a></h1> Jeffrey Groman is a CyberSecurity expert. He joins the panel to answer our questions and lead a discussion on the basics of security as it applied to DevOps. We start out with a discussion on breaking down silos and making security everyone's job. <h3>Panelists</h3> <ul> <li> Nell Shamrell-Harrington </li> <li> Tyler Bird </li> <li> Scott Nixon </li> <li> Charles Max Wood </li> </ul> <h3>Guest</h3> <ul> <li> Jeffrey Groman </li> </ul> <h3>Sponsors</h3> <ul> <li> <a href="http://educative.io/" rel="nofollow" target="_blank">Educative.io</a> | Click here for 10% discount </li> <li> <a href="https://www.cachefly.com/" rel="nofollow" target="_blank">CacheFly</a> </li> </ul> <h2> </h2> <blockquote> "The MaxCoders Guide to Finding Your Dream Developer Job" by Charles Max Wood is now available on Amazon.<a href="https://www.amazon.com/gp/product/B081MBL5C9/ref=as_li_ss_tl?ie=UTF8&amp;linkCode=sl1&amp;tag=devchattv-20&amp;linkId=9d61363241636e2546ef46abba198746&amp;language=en_US" rel="nofollow" target="_blank"> Get Your Copy Today!</a> </blockquote> <h2> </h2> <h3>Links</h3> <ul> <li> <a href="https://www.amazon.com/Ghost-Wires-Adventures-Worlds-Wanted/dp/B005HBO3BY/ref=sr_1_1?dchild=1&amp;keywords=ghost+in+the+wires&amp;qid=1584569462&amp;sr=8-1" rel="nofollow" target="_blank">Ghost in the Wires</a> </li> <li> <a href="https://www.amazonaws.cn/en/s3/features/" rel="nofollow" target="_blank">Amazon S3 Features</a> </li> <li> <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html#console-block-public-access-options" rel="nofollow" target="_blank">Block Public Access</a> </li> <li> <a href="https://owasp.org/" rel="nofollow" target="_blank">OWASP</a> </li> <li> <a href="https://www.wired.com/story/equifax-breach-no-excuse/" rel="nofollow" target="_blank">Equifax Officially Has No Excuse</a> </li> <li> <a href="https://malpedia.caad.fkie.fraunhofer.de/actor/magecart" rel="nofollow" target="_blank">MageCart</a> </li> <li> <a href="https://www.sonatype.com/product-nexus-lifecycle" rel="nofollow" target="_blank">sonatype</a> </li> <li> <a href="https://www.sans.org/" rel="nofollow" target="_blank">Sans</a> </li> </ul> <h3>Picks</h3> Nell Shamrell-Harrington: <ul> <li> <a href="https://i.blackhat.com/USA-19/Wednesday/us-19-Shortridge-Controlled-Chaos-The-Inevitable-Marriage-Of-DevOps-And-Security.pdf" rel="nofollow" target="_blank">Controlled Chaos</a> </li> <li> <a href="https://www.netflix.com/title/80189685" rel="nofollow" target="_blank">The Witcher</a> </li> </ul> Tyler Bird: <ul> <li> <a href="https://xkcd.com/327/" rel="nofollow" target="_blank">XKCD</a> </li> <li> <a href="https://bosh.cloudfoundry.org/docs/stemcell/" rel="nofollow" target="_blank">What is a Stemcell?</a> </li> </ul> Scott Nixon: <ul> <li> <a href="https://www.netflix.com/title/81026143" rel="nofollow" target="_blank">Pandemic</a> </li> <li> <a href="https://www.amazon.com/Sriracha-David-Tran/dp/B00MLYNYDI/ref=sr_1_1?dchild=1&amp;keywords=sriracha+movie&amp;qid=1584572087&amp;sr=8-1&amp;tag=donorsclicks-20" rel="nofollow" target="_blank">Sriracha</a> </li> <li> <a href="https://www.offensive-security.com/" rel="nofollow" target="_blank">Offensive Security</a> </li> <li> <a href="https://www.hackthebox.eu/" rel="nofollow" target="_blank">Hack The Box</a> </li> <li> <a href="https://pyup.io/" rel="nofollow" target="_blank">Python Dependency Security</a> </li> </ul> Charles Max Wood: <ul> <li> <a href="https://devchat.tv/conferences/" rel="nofollow" target="_blank">Devchat.tv/conferences</a> </li> <li> <a href="https://devchat.tv/meetups" rel="nofollow" target="_blank">Devchat.tv/meetups</a> </li> </ul> Jeffrey Groman: <ul> <li> <a href="https://attack.mitre.org/" rel="nofollow" target="_blank">Mitre ATT&amp;CK</a> </li></ul>

DevOps 032: Where Does Security Fit In a DevOps World with Jeffrey Groman

JavaScript Remote Conf 2020May 13th to 15th - register now!Jeffrey Groman is a CyberSecurity expert. He joins the panel to answer our questions and lead a discussion on the basics of security as it applied to DevOps. We start out with a discussion on breaking down silos and making security everyone's job.Panelists Nell Shamrell-Harrington Tyler Bird Scott Nixon Charles Max Wood GuestJeffrey GromanSponsors  Educative.io | Click here for 10% discount CacheFly   "The MaxCoders Guide to Finding Your Dream Developer Job" by Charles Max Wood is now available on Amazon. Get Your Copy Today!  Links Ghost in the Wires Amazon S3 Features Block Public Access OWASP Equifax Officially Has No Excuse MageCart sonatype Sans PicksNell Shamrell-Harrington: Controlled Chaos The Witcher Tyler Bird: XKCD What is a Stemcell? Scott Nixon: Pandemic Sriracha Offensive Security Hack The Box Python Dependency Security Charles Max Wood: Devchat.tv/conferences Devchat.tv/meetups Jeffrey Groman:Mitre ATT&amp;CKSpecial Guest: Jeffrey Groman.   Advertising Inquiries: https://redcircle.com/brandsPrivacy &amp; Opt-Out: https://redcircle.com/privacy

<h1><a href="https://devchat.tv/conferences/javascript-remote-2020/" rel="nofollow" target="_blank">JavaScript Remote Conf 2020</a></h1><h1><a href="https://devchat.tv/conferences/javascript-remote-2020/" rel="nofollow" target="_blank">May 13th to 15th - register now!</a></h1>Jeffrey Groman is a CyberSecurity expert. He joins the panel to answer our questions and lead a discussion on the basics of security as it applied to DevOps. We start out with a discussion on breaking down silos and making security everyone's job.Panelists<ul> <li>Nell Shamrell-Harrington</li> <li>Tyler Bird</li> <li>Scott Nixon</li> <li>Charles Max Wood</li> </ul>Guest<ul><li>Jeffrey Groman</li></ul>Sponsors<ul> <li> <a href="http://educative.io/" rel="nofollow" target="_blank">Educative.io</a> | Click here for 10% discount</li> <li><a href="https://www.cachefly.com/" rel="nofollow" target="_blank">CacheFly</a></li> </ul> <blockquote> "The MaxCoders Guide to Finding Your Dream Developer Job" by Charles Max Wood is now available on Amazon.<a href="https://www.amazon.com/gp/product/B081MBL5C9/ref=as_li_ss_tl?ie=UTF8&amp;language=en_US&amp;linkCode=sl1&amp;linkId=9d61363241636e2546ef46abba198746&amp;tag=devchattv-20" rel="nofollow" target="_blank"> Get Your Copy Today!</a> </blockquote> Links<ul> <li><a href="https://www.amazon.com/Ghost-Wires-Adventures-Worlds-Wanted/dp/B005HBO3BY/ref=sr_1_1?dchild=1&amp;keywords=ghost+in+the+wires&amp;qid=1584569462&amp;sr=8-1" rel="nofollow" target="_blank">Ghost in the Wires</a></li> <li><a href="https://www.amazonaws.cn/en/s3/features/" rel="nofollow" target="_blank">Amazon S3 Features</a></li> <li><a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html#console-block-public-access-options" rel="nofollow" target="_blank">Block Public Access</a></li> <li><a href="https://owasp.org/" rel="nofollow" target="_blank">OWASP</a></li> <li><a href="https://www.wired.com/story/equifax-breach-no-excuse/" rel="nofollow" target="_blank">Equifax Officially Has No Excuse</a></li> <li><a href="https://malpedia.caad.fkie.fraunhofer.de/actor/magecart" rel="nofollow" target="_blank">MageCart</a></li> <li><a href="https://www.sonatype.com/product-nexus-lifecycle" rel="nofollow" target="_blank">sonatype</a></li> <li><a href="https://www.sans.org/" rel="nofollow" target="_blank">Sans</a></li> </ul>PicksNell Shamrell-Harrington:<ul> <li><a href="https://i.blackhat.com/USA-19/Wednesday/us-19-Shortridge-Controlled-Chaos-The-Inevitable-Marriage-Of-DevOps-And-Security.pdf" rel="nofollow" target="_blank">Controlled Chaos</a></li> <li><a href="https://www.netflix.com/title/80189685" rel="nofollow" target="_blank">The Witcher</a></li> </ul>Tyler Bird:<ul> <li><a href="https://xkcd.com/327/" rel="nofollow" target="_blank">XKCD</a></li> <li><a href="https://bosh.cloudfoundry.org/docs/stemcell/" rel="nofollow" target="_blank">What is a Stemcell?</a></li> </ul>Scott Nixon:<ul> <li><a href="https://www.netflix.com/title/81026143" rel="nofollow" target="_blank">Pandemic</a></li> <li><a href="https://www.amazon.com/Sriracha-David-Tran/dp/B00MLYNYDI/ref=sr_1_1?dchild=1&amp;keywords=sriracha+movie&amp;qid=1584572087&amp;sr=8-1&amp;tag=donorsclicks-20" rel="nofollow" target="_blank">Sriracha</a></li> <li><a href="https://www.offensive-security.com/" rel="nofollow" target="_blank">Offensive Security</a></li> <li><a href="https://www.hackthebox.eu/" rel="nofollow" target="_blank">Hack The Box</a></li> <li><a href="https://pyup.io/" rel="nofollow" target="_blank">Python Dependency Security</a></li> </ul>Charles Max Wood:<ul> <li><a href="https://devchat.tv/conferences/" rel="nofollow" target="_blank">Devchat.tv/conferences</a></li> <li><a href="https://devchat.tv/meetups" rel="nofollow" target="_blank">Devchat.tv/meetups</a></li> </ul>Jeffrey Groman:<ul><li><a href="https://attack.mitre.org/" rel="nofollow" target="_blank">Mitre ATT&amp;CK</a></li></ul>Special Guest: Jeffrey Groman. Advertising Inquiries: <a href="https://redcircle.com/brands" rel="nofollow" target="_blank">https://redcircle.com/brands</a> Privacy &amp; Opt-Out: <a href="https://redcircle.com/privacy" rel="nofollow" target="_blank">https://redcircle.com/privacy</a>