Posts

My notes from a session on “Value Added Presentations”

My impressions from the DC9723 October 2017 meeting where I gave a talk on the 2015 Ukraine Power Grid Attack

My Impressions This is my first time speaking at OWASP and I found the experience exhiliirating :-) The venue was familiar from recent years (this was not the first time I attended OWASPs conference in Israel) but this year everything seemed to be much better organized. I volunteered at the “CV Review” workshop to assist people in reviewing and improving their CVs from my experience as a hiring manager, and I also gave talk - which unfortunately was the last talk of the day. ...

I was asked to mentor at the BIU Cyber/Crypto Hackathon, these are some of my insights…

UPDATE: I just learned today that Microsoft shared some of the decks and videos from BlueHat IL. They can be found here Microsoft Israel has successfully launched the BlueHat IL conference in Israel for the first time. Unexpectedly, this conference was not focused on marketing or pushing their agenda but rather on security related topics from excellent speakers. I attended the first day, and I am kind of sorry I missed the second day. Following are the talks I saw with some slides I took during the talks. ...

Personal Experience This is the 5th year that I’ve attended the CCC’s major event. I spent 4 days at the 33rd CCC conference in Hamburg (Germany), where a somewhat over 60,000 people attended this year, Other than an opportunity to catch up with old friends, and learn what’s new in the hacking scene - there were awesome talks (just like any year). I thought to dedicate this blog post to the best talks I saw, obviously this is very subjective (and suffers from a selection bias). ...

Yesterday I attended a “Meet the investors” meetup in Tel-Aviv. The meeting was held at a bar (which was nice). The meetup followed a non-conventional format, where the investors gave a short introduction about themselves and the answered some warm-up questions from Facebook and then opened the floor to questions from the crowd. I wanted to share my impressions and thoughts about their viewpoints and how that differed from the crowd’s expectations. ...

In a recent post (Docker in Production: A History of Failure ) I shared my thoughts about using Docker in production, based mainly on a widely spread blog post by the HFT guy. His post really brought up a storm of responses, where i think the best captured one is the following post. TL;DR: Docker can be used in production, if you take precautions and keep on top of tooling. I think this the main issue of the two approaches - would you prefer to be “cutting edge” and have the most recent tooling (with all of their disadvantages) in your production? or would you prefer to have the most stable production environment around? ...

I “attended” the online AllDayDevOps conference today. This was a new experience for me as the entire conference was given remotely. This was interesting both from a logistical point of view as well as an academic one. The conference itself was massive (over 12,000 attendees) sharing three simultaneous tracks through live youtube streaming. The track which i followed was security related (unsurprisingly). There were interesting conversations on slack as well as the chat feature of youtube, which helped keep people interested and focused on the conference itself. ...

I recently encountered a blog post about the troubles of usage of docker in a production environment. I have done some study into the meaning of using docker in a production environment and while it is very easy to get lost in the hype, glamour and overall excitement, the bottom line is that this post resonated well with me and my recent forays into the world of containers. I think the TL;DR of his blog post is: ...