The Basic Basics

10 minute read | Last updated 17-Sep-2018 |  Security

Watch the episode on YouTube

Join the discussion on LinkedIn

Share on Twitter

Bad Robot Transcript

Morning, everybody. How you doing today? It is Monday. It is a beautiful day where I am. I hope it’s a fantastic day where you are as well. Thanks for joining the show on last week. I had to mention that we kind of wrapped up a lot of the cyber security Basics.

I might have some conversations over the weekend had some wheels turning in the head and I realize what we may be done with a lot of the first round of cyber security Basics. Obviously, there’s a lot more to cover what really would be important would be having a conversation and I’m doing a series of segments on the basic Basics and what I mean by that is fine when I have conversations with folks even folks a couple years into their cyber-security career.

There is a fundamental lack of understanding of how about how this technology works and buy this technology. I mean pretty much all the technology. We are decades into building upon layers and layers and layers and layers of stuff. It’s an inordinately complex system that allows me to hit. Go on my phone and stream to you.

That’s an amazing set of Technologies as wonderful ability that we have. It is built on layers and layers and layers of past decisions some of those good some of those some of those stretched beyond what they were originally intended for so you look back and why did everyone ever decide to make that protocol work that way until you realized back then it was for a completely different reason.

I was thinking of starting to do a segment on some of the basics some of the understanding sort of the plumbing of the internet Plumbing of how some of the key tools we use you work. So things like him a lot of people don’t know how email works under the covers on basic routing.

I’m in by running that means you how to get from point A to point B on the Internet. It’s not a direct line and there’s a lot of nuances epoxy there. So that’s my idea for a next set of series is sort of this it base if what I want to hear from you guys is at what level should I address that should I address that to the stand? General audience au24 anybody out there.

So anybody using technology through it all. Take a dive in should I go a little more on the developer level? And so that’s an area where I’ve been focusing a lot on security professionally giving talks about development process to security folks giving talks about security to developers because there’s a big mismatch and that’s led to a lot of the problems why you continue to see security challenges is because of a lack of awareness of these layers also a sort of the implications in the repercussions of all these decisions.

So I’ll give me an anecdote was involved with somebody and had a conversation about Junior developers. This is not a knock against you need about a person but it was interesting in that they another senior person in the industry and they asked them up fundamental question about how a protocol would work or how they would not see how they would develop a tool to get information out to somebody and I’m in the city.

We just want to publish the following information how would you do it and you know as a totally reasonable and understandable response was essentially a while. I build a react web page. I set up this way. I do this and then it was a good solution and it was from the senior point of view was that what is Junior person had just generated with a significantly heavy stack.

Should have just been a few lines of HTML to publish a page right and said they had all these Frameworks and play. So there was extensive is modular is really interesting approach. I meant it would have worked provided a correct solution. However, it was at such a high level in the stack that from a security or privacy Pointview.

You’re adding a whole bunch of complexity that you don’t need and that is a trend I see over and over again because I think people don’t understand some of the fundamentals, you know, and I think that’s where I want to come and go with that bass. Siri so I’m more of a question episode today.

What do you guys think? Could you think that would be valuable covering some of the basics and if so what time so I mentioned already know email. I’m rotating call. I work. This thing called The OSI stack, which is a model to think about networking. We could talk about operating systems.

We could talk about how your browser Works basic things like this or at least they look basic and things. I would say categorize that we take for granted and start to talk about the complexities underneath the challenges underneath NY from a security and privacy point of view. We are kind of in the you-know-what sandwich that we are in a lot of cases.

So let me know. Hit me up online at Mark NCAA for those of you on the blogs in the comment down below and as always offer anybody, especially our podcast listeners. Hit me up by email me at Mark and. CA love to hear your thoughts. And unfortunately, you can see on the blog from the leaves falling down it is I don’t know how many more of these outdoor segment I can make it and I hope you have a fantastic day.

I look forward to talking to you on And seeing you on the show tomorrow. Morning, everybody. How you doing today? It is Monday. It is a beautiful day where I am. I hope it’s a fantastic day where you are as well. Thanks for joining the show on last week.

I had to mention that we kind of wrapped up a lot of the cyber security Basics. I might have some conversations over the weekend had some wheels turning in the head and I realize what we may be done with a lot of the first round of cyber security Basics.

Obviously, there’s a lot more to cover what really would be important would be having a conversation and I’m doing a series of segments on the basic Basics and what I mean by that is fine when I have conversations with folks even folks a couple years into their cyber-security career.

There is a fundamental lack of understanding of how about how this technology works and buy this technology. I mean pretty much all the technology. We are decades into building upon layers and layers and layers and layers of stuff. It’s an inordinately complex system that allows me to hit. Go on my phone and stream to you.

That’s an amazing set of Technologies as wonderful ability that we have. It is built on layers and layers and layers of past decisions some of those good some of those some of those stretched beyond what they were originally intended for so you look back and why did everyone ever decide to make that protocol work that way until you realized back then it was for a completely different reason.

I was thinking of starting to do a segment on some of the basics some of the understanding sort of the plumbing of the internet Plumbing of how some of the key tools we use you work. So things like him a lot of people don’t know how email works under the covers on basic routing.

I’m in by running that means you how to get from point A to point B on the Internet. It’s not a direct line and there’s a lot of nuances epoxy there. So that’s my idea for a next set of series is sort of this it base if what I want to hear from you guys is at what level should I address that should I address that to the stand? General audience au24 anybody out there.

So anybody using technology through it all. Take a dive in should I go a little more on the developer level? And so that’s an area where I’ve been focusing a lot on security professionally giving talks about development process to security folks giving talks about security to developers because there’s a big mismatch and that’s led to a lot of the problems why you continue to see security challenges is because of a lack of awareness of these layers also a sort of the implications in the repercussions of all these decisions.

So I’ll give me an anecdote was involved with somebody and had a conversation about Junior developers. This is not a knock against you need about a person but it was interesting in that they another senior person in the industry and they asked them up fundamental question about how a protocol would work or how they would not see how they would develop a tool to get information out to somebody and I’m in the city.

We just want to publish the following information how would you do it and you know as a totally reasonable and understandable response was essentially a while. I build a react web page. I set up this way. I do this and then it was a good solution and it was from the senior point of view was that what is Junior person had just generated with a significantly heavy stack.

Should have just been a few lines of HTML to publish a page right and said they had all these Frameworks and play. So there was extensive is modular is really interesting approach. I meant it would have worked provided a correct solution. However, it was at such a high level in the stack that from a security or privacy Pointview.

You’re adding a whole bunch of complexity that you don’t need and that is a trend I see over and over again because I think people don’t understand some of the fundamentals, you know, and I think that’s where I want to come and go with that bass. Siri so I’m more of a question episode today.

What do you guys think? Could you think that would be valuable covering some of the basics and if so what time so I mentioned already know email. I’m rotating call. I work. This thing called The OSI stack, which is a model to think about networking. We could talk about operating systems.

We could talk about how your browser Works basic things like this or at least they look basic and things. I would say categorize that we take for granted and start to talk about the complexities underneath the challenges underneath NY from a security and privacy point of view. We are kind of in the you-know-what sandwich that we are in a lot of cases.

So let me know. Hit me up online at Mark NCAA for those of you on the blogs in the comment down below and as always offer anybody, especially our podcast listeners. Hit me up by email me at Mark and. CA love to hear your thoughts. And unfortunately, you can see on the blog from the leaves falling down it is I don’t know how many more of these outdoor segment I can make it and I hope you have a fantastic day.

I look forward to talking to you on And seeing you on the show tomorrow.