June summary - 2017-06

06 June

Podcasts

These are suggestions, I did not listen yet:

• The Amp Hour http://theamphour.com/
• Embedded.fm http://embedded.fm/

Tech

• http://modeling-languages.com/experimentation-in-dsl-engineering/
• https://github.com/floyd-fuh/JKS-private-key-cracker-hashcat
• http://vertx.io/docs/guide-for-java-devs/
• Security (I was at SANS Paris ...)
  • SNORT alternative https://www.bro.org/
    • https://trends.google.com/trends/explore?q=snort%20ids,bro%20ids,suricata%20ids
  • PenTesting Execution Standard (community work): http://www.Pentest-Standard.org/
  • Open Source vulnerability scanner and manager http://www.OpenVAS.org/ (Greenbone) (alternative to Nessus)
  • Web Reconnaissance framework (Python) http://Recon-ng.com/  https://bitbucket.org/LaNMaSteR53/recon-ng
  • Multiple tools to assist administrators and auditors with assessment, measurement and
    enforcement of security baselines https://www.open-scap.org/
  • Global IT community to safeguard private and public organizations against cyber threats.
    https://www.cisecurity.org/
  • Threat Intelligence
    • Open Source Threat Intelligence Platform & Open Standards For Threat Information Sharing http://www.MISP-Project.org/
    • YARA The pattern matching swiss knife https://virustotal.github.io/yara/
    • AlienVault Open Threat Exchange https://otx.AlienVault.com/
    • https://www.DomainTools.com/
  • http://resources.infosecinstitute.com/20-popular-wireless-hacking-tools-updated-for-2016/
  • https://securitycafe.ro/2017/01/18/practical-jsonp-injection/ JSONP is as horrible and tricky as Javascript can be.

Politics

• John Safran's book about extremisms https://en.wikipedia.org/wiki/Depends_What_You_Mean_By_Extremist
  (via Patrick Gray)