# 028 - Everyone Has a Bag of Tricks

- Show: [Unnamed Reverse Engineering Podcast](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast)
- Published: 2019-09-15
- Length: 1h 14m
- Page: https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2019-09-15-028-everyone-has-a-bag-of-tricks
- Listen: https://unnamedre.com/episode/28

## Summary

Johnny Xmas (@J0hnnyXm4s), a security architect and reverse engineer, discusses his career path from pharmacy to infosec and details the community effort to reverse engineer TSA master keys. He explains how the keys were leaked via a vendor catalog and Instagram, and how the community used 3D printing and lock disassembly to create working copies, highlighting the security implications for luggage and encryption. Xmas also describes his work at Kasada, a company that defends web infrastructure against automated abuse by detecting client-side automation rather than relying on traditional Web Application Firewalls (WAFs).

## Chapters

- [0:28](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2019-09-15-028-everyone-has-a-bag-of-tricks#t=28) Introduction and Background
- [2:09](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2019-09-15-028-everyone-has-a-bag-of-tricks#t=129) Career Path from Pharmacy to Infosec
- [7:48](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2019-09-15-028-everyone-has-a-bag-of-tricks#t=468) ICS Security and Stuxnet
- [20:10](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2019-09-15-028-everyone-has-a-bag-of-tricks#t=1210) Reversing TSA Keys
- [28:04](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2019-09-15-028-everyone-has-a-bag-of-tricks#t=1684) Safe Skies Lock Reversal
- [36:15](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2019-09-15-028-everyone-has-a-bag-of-tricks#t=2175) Favorite Tools: Basin Wrench and Postman
- [47:55](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2019-09-15-028-everyone-has-a-bag-of-tricks#t=2875) Kasada and Automated Abuse Defense
- [54:10](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2019-09-15-028-everyone-has-a-bag-of-tricks#t=3250) IP Rotation and Proxy Networks
- [1:06:13](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2019-09-15-028-everyone-has-a-bag-of-tricks#t=3973) Creativity and Arts in Hacking

## Topics

- [Debugging & failure analysis](https://hardwarepodcasts.com/topic/debugging-and-failure-analysis)
- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [Careers & education](https://hardwarepodcasts.com/topic/engineering-careers-and-education)
- [AI & machine learning](https://hardwarepodcasts.com/topic/ai-and-machine-learning)
- [Chips, FPGAs & semiconductors](https://hardwarepodcasts.com/topic/chips-and-fpgas)

## Most relevant to

companies scaling up

## Mentioned

- Kasada (company)
- Postman (tool)
- Burp Suite (tool)
- Luminati (company)
- Hola VPN (product)
- MonkeySocks (company)
- Deviant Ollam (other)
- IronGeek (other)
- DarkSim905 (other)
- Nite 0wl (other)
- Zach Whittaker (other)
- Stuxnet (product)
- Target (company)
- MS08-067 (other)
- StackOverflow (other)

## Related episodes from other shows

- [259: Calculators Changed My Life](https://hardwarepodcasts.com/podcast/embedded-fm/2018-09-07-259-calculators-changed-my-life) (Embedded.fm)
- [519: The Password Is All Zeros](https://hardwarepodcasts.com/podcast/embedded-fm/2026-01-23-519-the-password-is-all-zeros) (Embedded.fm)
- [Ep 182: Sparkpunk Photography, Anti-Xiomi Air Filters, and Keyfob Foibles](https://hardwarepodcasts.com/podcast/hackaday-podcast/2022-08-19-ep-182-sparkpunk-photography-anti-xiomi-air-filters-and-keyfob-foibles) (Hackaday Podcast)
- [New Life Skills with Joe Grand](https://hardwarepodcasts.com/podcast/the-amp-hour/2022-01-31-new-life-skills-with-joe-grand) (The Amp Hour)
- [Ep 193: Found Computers, Internet Over WhatsApp, Two-Factor C64, Shifting Cars, and Self-Shooting Fighter Planes](https://hardwarepodcasts.com/podcast/hackaday-podcast/2022-11-18-ep-193-found-computers-internet-over-whatsapp-two-factor-c64-shifting-cars-and-s) (Hackaday Podcast)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2019-09-15-028-everyone-has-a-bag-of-tricks. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to Unnamed Reverse Engineering Podcast.