Hardware Podcasts

427: No Fisticuffs or Casting of Spells

Embedded.fm · 15 Sept 2022 · 1h 08m · Episode 427

What this episode covers

Liz Wharton, VP of Operations at Scythe.io, discusses the intersection of cybersecurity, law, and public policy, emphasizing her advocacy for privacy by design and de-identification by default. She critiques the Computer Fraud and Abuse Act (CFAA) for stifling security research and explains how Scythe’s adversary emulation platform helps organizations bridge the gap between red and blue teams. Wharton also highlights her work with the Rural Tech Fund to reduce the digital divide in underserved communities through education and access to technology.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
Scythe.io, Rural Tech Fund, disclose.io, Luta Security, Patreon, City of Atlanta, Instagram, Facebook, Twitter
Also
Computer Fraud and Abuse Act, CFAA, Katie Moussouris, Hack the Pentagon, Cybrary, CISA, SEC, FTC, BIPA, DefCon

Related episodes from other shows

Other shows on the same ground, closest first.

  • Unnamed Reverse Engineering Podcast · 1h 28m

    058 - Technically Met the Specs

    Eric Schlaepfer and Windell Oskay discuss their book 'Open Circuits,' detailing the process of cutting components in half with sandpaper and grinding wheels to reveal internal structures, while Jacob Creedon, Spencer Moss, Ken, and Will McGuiness share their perspectives on reverse engineering tools like IDA Pro and Ghidra, and the legal and social implications of technology. The group debates the future of AI, the validity of NFTs, and the importance of right-to-repair legislation, with Spencer Moss from Google and Ken from Somerset Recon highlighting the increasing complexity of hardware security. Mike Ryan from Ice 9 Consulting joins to discuss Bluetooth security, the obsolescence of passwords, and the dual-use nature of technology in the context of government regulation.

    Debugging & failure analysisSecurity & privacy
    7 chapters

  • Hackaday Podcast · 58m

    Ep 193: Found Computers, Internet Over WhatsApp, Two-Factor C64, Shifting Cars, and Self-Shooting Fighter Planes

    Editors Elliot Williams and Dan Maloney review a week of hacks, including tunneling IP over WhatsApp, generating 2FA codes on a Commodore 64, and emulating ISA cards with an FPGA. They discuss the security of a Zap Tech EV charger, the prevalence of Linux in scavenged smart TVs, and repurposing 3D printers for lab automation. The episode concludes with a discussion on the F-11 Tiger's self-shooting incident and the importance of physical modeling in engineering.

    Debugging & failure analysisSecurity & privacy
    9 chapters

  • Oxide and Friends · 1h 41m

    CrowdStrike BSOD Fiasco with Katie Moussouris

    Security expert Katie Moussouris joins Bryan Cantrill and Adam Leventhal to analyze the CrowdStrike outage, discussing the technical failure of a kernel-mode driver update that caused global Blue Screen of Death crashes. The conversation explores the role of the Cyber Safety Review Board (CSRB) in investigating such incidents, the challenges of software liability, and the complexities of securing ubiquitous third-party security tools. Moussouris also shares insights on her career, including pioneering Microsoft's bug bounty program and the limitations of open-source security models.

    Debugging & failure analysisPolicy, trade & tariffs
    8 chapters

  • The Amp Hour · 1h 57m

    Impedance Matching with Michael Ossmann and Dmitry Nedospasov

    Michael Ossmann of Great Scott Gadgets and Dmitry Nedospasov of Toothless Consulting discuss hardware security, training, and open-source tooling. They detail the development of the GreatFET platform and the next-generation HackRF 'Marzipan' using the i.MX7 processor, while Nedospasov outlines his FPGA-based protocol analyzer training. The conversation shifts to the ethical and legal complexities of hardware security, specifically the MedSec case involving St. Jude medical devices and the Volkswagen emissions scandal.

    Security & privacyMicrocontrollers & dev platforms
    8 chapters

  • Manufacturing Happy Hour · 48m

    Cybersecurity, Startups, and Examining Unconscious Bias with Galina Antova

    Galina Antova, Co-Founder of Claroty, explains why IT security tools fail in operational technology (OT) environments due to legacy devices, proprietary protocols, and uptime requirements, creating a 'perfect storm' for cyberattacks. She details how Claroty was founded after identifying a gap in visibility for critical infrastructure, leveraging her experience at Siemens and co-founders from Israel's Unit 8200. Antova discusses scaling the company to 200 employees and $100M in funding, leading through the uncertainty of the COVID-19 pandemic, and advocating for diverse leadership by calling out unconscious bias in male-dominated industries.

    Security & privacyStarting a product company
    7 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Embedded.fm. The episode itself belongs to its publisher.