When we talk about DevOps, often times we focus only on the two disciplines that feature in the name - Development and Operations. But DevOps, truly, is about collaboration across all areas of the business, even those security blokes. Ben Hughes, Security Manager at Etsy, joins the ADO crew to review how to work WITH your security teams, and show that they're not really scary at all.
- What exactly do you security folks do all day?
- So let's talk about ZOMG SCARY CLOUDS
- I'm a developer. What do I need to know to help me be pals with InfoSec?
- Ops people know security, right? Or not?
- Common security mistakes/misconceptions
- How can InfoSec be better buddies with other functions?
- Are you tired of Matt calling it "InfoSec"? Does it remind you of Information Society?
Check Outs
Matt
- zsh and oh my zsh - http://github.com/robbyrussell/oh-my-zsh
- zmojii plugin
- all of the chef 12 things!
- st. tom waits prayer candle - http://www.etsy.com/listing/177742614/saint-tom-waits-prayer-candle
Ben
- http://cybersymposium.isis.poly.edu/symposium/ The NYU “Bridge to cyber security: a women's Symposium” which is a two day event aimed at introducing women of all ages and points in their career to security.
- (if you’re gonna talk oh-my-zsh, you should really talk prezto - http://github.com/sorin-ionescu/prezto)
- http://gauntlt.org/ by James Wickett (of Signal Science) and Mattjay (of Whitehat security) (and others) is pretty amazing CI/CD tool for security testing your code.
- http://twofactorauth.org/ list of places that do and don’t have two factor authentication. *cough* iCloud drama *cough*
Trevor
- http://www.strengthsfinder.com/home.aspx Strengthsfinder- recommended to me by Kay Johansen at FlowCon, interesting analysis of leadership strengths
- Amazon Instant Video is F&$king finally on Android (still needs Chromecast support built in, but screencast works just fine)
- Rampage the boardgame. http://boardgamegeek.com/boardgame/97903/rampage
