Skip to main content

Posts

Showing posts with the label infosec

Learn (and remember) all the things!

Infosec for Auditory learners

I'm more of an auditory learner. At one point I did use to sit down for hours and read but that is no longer the case. Now when I want information I  want it structured as efficiently as possible and in a format that I can pipe to my headphones. I've found some good resources that allow me to convert books to audio and awesome podcasts. Infosec books and coding book are tricky because you need to see the diagrams and output snippets but I tend to lean heavily on youtube for that. I also love the kindle apps reading feature that lets it read books you've bought. That way you get the book and the narration with one purchase. Some audio resources and online youtube classes to supplement your learning include: Podcasts:  https://risky.biz/netcasts/risky-business/ Online classes:  Sam Bowne's  class CNIT 129S: Securing Web Applications https://www.youtube.com/watch?v=s8lS2V5thhY&list=PL7gCgFw1RV1M6vJFX1RPDhgPZbg9qU3ub

Your attitude matters

A more senior member of my team gently chided me today. I expressed doubts that someone would do the right thing if there was no ticket / incentive to correct what could be considered a weakness in the design. I was worried that they would go on to use the same design with the same weakness in the future. "You must expect the person we're talking about to do the right thing T. If your attitude doesn't reflect that you may even encourage them to do the wrong thing. " I wonder if our attitude leads to insecurity? Certainly I'm stubborn enough to do something stupid out of spite. -T