Best Liran Podcasts (2024)

1
Producing Secure Code by Leveraging AI - Stuart McClure - ASW #291 1:09:02

2h ago1:09:02

1:09:02

How can LLMs be valuable to developers as an assistant in finding and fixing insecure code? There are a lot of implications in trusting AI or LLMs to not only find vulns, but in producing code that fixes an underlying problem without changing an app's intended behavior. Stuart McClure explains how combining LLMs with agents and RAGs helps make AI-i…

1
פרק 141 - עם מידד פריינטא, יזם חלל 54:45

5h ago54:45

54:45

שם פרק: אופטימיות חסרת גבולות: כוח מניע ביזמות בחלל תכונה יזמית מעוררת השראה היא היכולת להיות אופטימי ללא גבול, במיוחד כשמנווטים בעולם בלתי צפוי בדרך להצלחה. מידד פריינטא מגלם תכונה זו כיזם חלוץ בתחום החלל בישראל. מאז שנחשף ל"חיידק החלל" בתפקידו הראשון כסטודנט, הוא צלל לעולם היזמות בחלל ללא מבט לאחור. לפני 14 שנים, כשאחרים פקפקו, מידד זיהה את הפוטנ…

51
State Of Application Security 2024 - Sandy Carielli, Janet Worthington - ASW #290 1:12:41

4d ago1:12:41

1:12:41

Sandy Carielli and Janet Worthington, authors of the State Of Application Security 2024 report, join us to discuss their findings on trends this year! Old vulns, more bots, and more targeted supply chain attacks -- we should be better at this by now. We talk about where secure design fits into all this why appsec needs to accelerate to ludicrous sp…

1
פרק 140 - עם יונתן מטוס, מייסד ומנכ"ל פיירמטיק 51:50

13d ago51:50

51:50

סקרנות שהובילה לאימוץ שינויים: יונתן מטוס על ניווט בנופים תרבותיים ושיאים יזמיים בפרק אנו צוללים אל העולם הדינמי של היזמות עם יונתן מטוס, שמסעו חוצה יבשות ותרבויות. כיזם ומשקיע, סיפורו של יונתן מלא בעליות ומורדות עזים שמלווים הובלת חברות חדשניות וניווט בשווקים גלובליים. מהלחץ העמוק של ניהול שתי חברות במקביל ועד לחוויה המרגשת של הצטרפות לצוות האנדרו…

1
OAuth 2.0 from Protecting APIs to Supporting Authorization & Authentication - Aaron Parecki - ASW #289 1:01:09

18d ago1:01:09

1:01:09

OAuth 2.0 is more than just a single spec and it's used to protect more than just APIs. We talk about challenges in maintaining a spec over a decade of changing technologies and new threat models. Not only can OAuth be challenging to secure by default, but it's not even always inter-operable. Segment Resources: https://oauth.net/2.1 https://oauth.n…

1
Learning EBPF - Liz Rice - ASW Vault 37:16

27d ago37:16

37:16

Check out this interview from the ASW Vault, hand picked by main host Mike Shema! This segment was originally published on April 4, 2023. Following on from her successful title "Container Security", Liz has recently authored "Learning eBPF", published by O'Reilly. eBPF is a revolutionary kernel technology that is enabling a whole new generation of …

1
Microsoft Recall's Security & Privacy, Hacking Web APIs, Secure Design Pledge - ASW #288 38:36

1M ago38:36

38:36

Looking at use cases and abuse cases of Microsoft's Recall feature, examples of hacking web APIs, CISA's secure design pledge, what we look for in CVEs, a nod to PHP's history, and more! Visit https://www.securityweekly.com/asw for all the latest episodes! Show Notes: https://securityweekly.com/asw-288…

1
Open Source Software Supply Chain Security & The Real Crisis Behind XZ Utils - Idan Plotnik, Luis Villa, Erez Hasson - ASW #287 1:12:08

1M ago1:12:08

1:12:08

Open source has been a part of the software supply chain for decades, yet many projects and their maintainers remain undersupported by the companies that consume them. The security responsibilities for project owners has increased not only in dealing with security disclosures, but in maintaining secure processes backed by strong authentication and …

1
Episode 139 - with Alon Leibovich, Managing Director Intel Ignite 46:45

1M ago46:45

46:45

How to strengthen resilience as a founder? As I say every episode, entrepreneurship is often described as an emotional rollercoaster, oscillating between the highest highs and lowest lows. Alon Leibovich experienced this firsthand when his company BrandTotal was sued by Facebook, throwing him into a crucible of immense mental stress for nearly two …

1
Securing Shadow Apps & Protecting Data - Guy Guzner, Pranava Adduri - ASW Vault 30:32

2M ago30:32

30:32

With hundreds or thousands of SaaS apps to secure with no traditional perimeter, Identity becomes the focal point for SaaS Security in the modern enterprise. Yet with Shadow IT, now recast as Business-Led IT, quickly becoming normal practice, it’s more complicated than trying to centralize all identities with an Identity Provider (IdP) for Single S…

1
Collecting Bounties and Building Communities - Ben Sadeghipour - ASW Vault 36:23

2M ago36:23

36:23

Check out this interview from the ASW Vault, hand picked by main host Mike Shema! This segment was originally published on April 18, 2023. We talk with Ben about the rewards, hazards, and fun of bug bounty programs. Then we find out different ways to build successful and welcoming communities. Show Notes: https://securityweekly.com/vault-asw-9…

1
Node.js Secure Coding - Oliver Tavakoli, Chris Thomas, Liran Tal - ASW #286 1:09:05

2M ago1:09:05

1:09:05

Secure coding education should be more than a list of issues or repeating generic advice. Liran Tal explains his approach to teaching developers through examples that start with exploiting known vulns and end with discussions on possible fixes. Not only does this create a more engaging experience, but it also relies on code that looks familiar to d…

2M ago35:15

35:15

3M ago26:49

26:49

1
פרק 136 - עם יוסי מלמד, עמית אטיאס ורן ריבנזפט 1:09:29

3M ago1:09:29

1:09:29

The Unique Mental Aspects of the CTO Role in a Startup הייתה לי הזכות לאסוף שלושה מוחות מבריקים – רן, עמית ויוסי – לדיון מלא תובנות על ההיבטים המנטאליים והייחודיים בתפקידו של מנהל הטכנולוגיה (CTO) בעולם היזמות. רן, המייסד וה- CTO של Epsagon, שנרכשה על ידי סיסקו תמורת 500 מיליון דולר, הוא חובב בניית מוצרים ואוהב לטייל ולבשל. הוא נשוי לנטע ואב לשני י…

1
Demystifying Security Engineering Career Tracks - Karan Dwivedi - ASW #281 1:03:23

3M ago1:03:23

1:03:23

There are as many paths into infosec as there are disciplines within infosec to specialize in. Karan Dwivedi talks about the recent book he and co-author Raaghav Srinivasan wrote about security engineering. There's an appealing future to security taking on engineering roles and creating solutions to problems that orgs face. We talk about the breadt…

1
Lessons That The XZ Utils Backdoor Spells Out - Farshad Abasi - ASW #280 1:00:18

3M ago1:00:18

1:00:18

We look into the supply chain saga of the XZ Utils backdoor. It's a wild story of a carefully planned long con to add malicious code to a commonly used package that many SSH connections rely on. It hits themes from social engineering and abuse of trust to obscuring the changes and suppressing warnings. It also has a few lessons about software devel…

1
S7 Ep13 Low Inventory FBA Fees: What FBA Sellers Need To Be Looking At In 2024 36:31

3M ago36:31

36:31

1
Episode 135 - with Adi Baron, Co-founder & CTO of Wevo Energy and Teddy Flatau, Co-founder & CEO of Wevo Energy 42:46

3M ago42:46

42:46

The Wevo Odyssey - A Startup's Evolution Leading to SolarEdge's Acquisition Teddy, is the Co-founder and CEO of Wevo Energy, a seasoned entrepreneur with a background in Electrical Engineering. His journey began with a childhood fascination for dismantling gadgets, a hobby that foreshadowed his future in technology. After earning his master's degre…

1
Infosec Myths, Mistakes, and Misconceptions - Adrian Sanabria - ASW #279 1:00:57

4M ago1:00:57

1:00:57

Sometimes infosec problems can be summarized succinctly, like "patching is hard". Sometimes a succinct summary sounds convincing, but is based on old data, irrelevant data, or made up data. Adrian Sanabria walks through some of the archeological work he's done to dig up the source of some myths. We talk about some of our favorite (as in most dislik…

Podcasts Worth a Listen

Liran Podcasts

Podcasts Worth a Listen

Quick Reference Guide