Ep. 50: How Serious is Username Enumeration

Ep. 50: How Serious is Username Enumeration

Author: Jardine Software Inc. July 28, 2016 Duration: 23:06
In this episode, James talks about what Username Enumeration is, how it can be used by attackers, and some ways to help reduce the risk of it. For more info go to https://www.developsec.com or follow us on twitter (@developsec). Presented by Jardine Software Inc. (https://www.jardinesoftware.com) Jardine Software provides application security consulting and training to add value to your application security program. Contact us today to see how we can help. Check out our 30 ...

Ever find yourself wondering how the digital tools you build every day can be made more resilient? DevelopSec: Developing Security Awareness, from Jardine Software Inc., digs into the practical realities of application security. This isn't about abstract theory; it's a grounded conversation for developers, engineers, and tech leaders who know that security is now a core part of the development lifecycle. Each episode focuses on a specific topic, breaking down how vulnerabilities emerge in code and, more importantly, how to identify and mitigate them before they become a problem. You'll hear straightforward discussions on everything from common coding flaws to emerging threats, providing actionable insights you can apply directly to your projects. The goal is to build a more intuitive security mindset, transforming it from a compliance checkpoint into a natural part of the development process. Tune into this podcast for a clear-eyed look at securing applications, where complex concepts are made accessible without sacrificing depth. It's a resource for anyone ready to move beyond curiosity and actively strengthen their work.
Author: Language: English Episodes: 100

DevelopSec: Developing Security Awareness
Podcast Episodes
Ep. 99: Shifting Left in the SDLC [not-audio_url] [/not-audio_url]

Duration: 19:56
In this episode, James talks about what it means to shift left in the SDLC. For more info go to https://www.developsec.com or follow us on twitter (@developsec). Join the conversations.. join our slack channel. Email jam…
Ep. 98: Efail and News Hype [not-audio_url] [/not-audio_url]

Duration: 18:07
In this episode we talk about efail and the HYPE around security news. For more info go to https://www.developsec.com or follow us on twitter (@developsec). Join the conversations.. join our slack channel. Email james@de…
EP. 97: Gmail / Netflix Potential Scam [not-audio_url] [/not-audio_url]

Duration: 18:27
** Check out our new Live Fundamentals of Application Security training starting on May 1, 2018. Don't wait to sign up. For schedules and information check out https://www.jardinesoftware.com/fundamentals-of-application-…
Ep. 96: Security Flaws as Defects [not-audio_url] [/not-audio_url]

Duration: 27:35
In this episode we talk about treating security flaws as defects and embedded vs. built-in security. Do you treat security flaws differently? What barriers does that create? For more info go to https://www.developsec.com…
Ep. 95: MyFitnessPal Breach Take-Aways [not-audio_url] [/not-audio_url]

Duration: 18:24
In this episode we talk about the MyFitnessPal breach and some of the key points that we as developers, security, and users can take away from it. Tweet with Graph of Largest Breaches mentioned: https://twitter.com/EricT…
Ep. 94: Penetration Testing [not-audio_url] [/not-audio_url]

Duration: 26:09
In this episode we talk about penetration testing and what you need to know to get the most out of the activity. Tune in to hear some of our thoughts on the topic. To take the training course survey go to https://forms.o…
Ep. 93: Code Review [not-audio_url] [/not-audio_url]

Duration: 25:53
In this episode we talk about secure code review with a mention of static analysis. Do you know the difference? What is the issue of doing one over the other, or just outright replacing actual code review with static ana…
Ep. 92: 2-Factor Authentication [not-audio_url] [/not-audio_url]

Duration: 21:41
In this episode James talks about 2-factor authentication, why we use it, and maybe why we don't. Is your 2-factor implementation getting in your way? The DevelopSec YouTube Channel - https://www.youtube.com/channel/UCdA…
DevelopSec Podcast #91 - OWASP Top 10 2017 Thoughts [not-audio_url] [/not-audio_url]

Duration: 28:45
The new OWASP Top 10 2017 is out. We look at some of the changes and how you can effectively use the list to better your security program. We are also launching a new DevelopSec Live broadcast. To check out the first epi…
Ep. 90: 5 Steps to Help Secure Your Database [not-audio_url] [/not-audio_url]

Duration: 44:12
James sits down with Perry Krug, from Couchbase to discuss some important steps to take to secure your database. Perry Krug - https://twitter.com/perrykrug Couchbase - https://twitter.com/couchbase Couchbase - https://ww…