The Security Podcast of Silicon Valley, a YSecurity.io Production

Rod Schultz, VP of Product at Dust Identity

Rod Schultz reflects on his childhood experiences and heroes, how he got into security, how that led him to Apple's DRM FairPlay team, Zoom's Head of Product Security and Privacy, and now DUST Identity's VP of Product.

David Carpe - How to Network, and The Myth of The Great Silent Resignation

In this enlightening episode of a YSecurity.io production, David Carpe, Founder of Carpe Search Partners, shares deep insights on the professional value of networking (connecting with and offering service to the people around us) in the security community. We explore how to network effectively, offer a give, and how networking differs from charity, philanthropy, and everyday friends. Davides some profoundly personal views on the supposedly Great Silent Resignation, which may surprise you. We end with some gre. Youvice, you don't want to miss it.

David breaks down the art of effective networking, highlighting the distinction between simply expanding one's contact list and genuinely offering value to those we connect with. He elucidates on the nuanced differences between networking, charity, philanthropy, and maintaining everyday friendships, offering listeners a comprehensive understanding of how meaningful connections can be forged and nurtured.

Furthermore, David shares his provocative perspectives on the so-called Great Silent Resignation, challenging common perceptions and inviting listeners to consider deeper, more personal implications of this phenomenon. His views not only provoke thought but also encourage a reevaluation of the ways in which we engage with our professional journeys and the communities we are part of.

The episode concludes with David offering invaluable advice that transcends the conventional wisdom on networking and career development. This guidance is not just practical but grounded in the real-life experiences and successes of someone who has mastered the delicate balance of professional growth and personal fulfillment.

Tune into this YSecurity.io production for a session filled with profound insights and actionable advice from David Carpe. Whether you're deeply embedded in the security community, navigating the complexities of professional networking, or simply looking for ways to enrich your professional and personal life, this episode is packed with wisdom you won't want to miss. Join us as we explore the depths of networking, service, and community, guided by one of the most insightful minds in the industry.

Colin Bitterfield - Head of Security (Acting CISO) People Data Labs

In this episode of a YSecurity.io production, Colin Bitterfield, a key figure at People Data Labs, offers a compelling narrative on how intertwining growth with security through standardization and meticulous documentation can propel a business forward. Colin unveils his strategic blueprint for constructing and sustaining a business-first security team, where the emphasis on people ensures a win-win scenario for all stakeholders involved.

Delving into the essence of his approach, Colin articulates the significance of aligning security measures with the overarching goals of the organization. By championing standardization and proper documentation, he underscores how these practices not only enhance security postures but also streamline operations, making security an enabler rather than a bottleneck for growth.

Throughout the conversation, Colin emphasizes the importance of prioritizing people—both within the team and the broader organization. He shares insights into how a security team, when built with a business-first mindset, can foster an environment of trust, collaboration, and mutual respect. This approach not only elevates the security function but also integrates it seamlessly into the fabric of the company, ensuring that security considerations are woven into the decision-making process at every level.

Listeners will gain a wealth of knowledge on tactics for building a resilient, agile security team that is deeply attuned to the business's needs. Colin's strategies for engaging team members and stakeholders alike highlight the critical role of communication, empathy, and shared objectives in achieving security that supports and drives business outcomes.

Join us on this YSecurity.io production for an insightful discussion with Colin Bitterfield. Whether you're a security professional looking to elevate your team's impact, a business leader seeking to integrate security more effectively, or simply interested in the nexus of security and business growth, this episode offers valuable lessons on creating a security culture where everyone truly wins.

Andrew Spangler, Head of Security and Compliance at Harness, on Building Trust in Security

In this enriching episode of a YSecurity.io production, Andrew Spangler, the esteemed Head of Security and Compliance at Harness, invites us into the world of security through his experiences, offering a blend of light-hearted banter and profound insights. Andrew's journey in the security field, marked by both humility and vast expertise, serves as the backdrop for a discussion that delves into the core of building trust, leading effectively, and nurturing career growth within the security community.

Andrew shares candidly about the art of building trust—not just within teams but also in the broader context of the organization and its stakeholders. He offers personal anecdotes and strategies for leading teams with integrity, fostering an environment where transparency and accountability are paramount. His approach to interviewing strangers, a task often fraught with challenges, reveals the nuances of establishing rapport and assessing compatibility beyond technical skills.

The conversation also covers the critical aspects of overcoming security challenges and celebrating victories. Andrew emphasizes the importance of acknowledging the hard work and successes of security teams, recognizing that these moments of celebration are crucial for morale and team cohesion. This balanced perspective on addressing challenges and valuing achievements provides listeners with a holistic view of what it means to lead in the ever-evolving landscape of security.

Career development is another key theme of this episode. Andrew offers guidance and encouragement for professionals navigating their paths in the security field, highlighting the importance of continuous learning, mentorship, and community engagement. His reflections on career development are not just advice but a call to action for individuals at all stages of their security careers to pursue growth with purpose and passion.

Tune in to this YSecurity.io production for a conversation with Andrew Spangler that is as engaging as it is enlightening. Whether you're a seasoned security professional, someone just starting out, or simply interested in the human aspects of the security field, this episode offers valuable insights into the dynamics of trust, leadership, and career progression. Join us for a journey into the heart of security, led by one of the most thoughtful voices in the community.

David Gurle - Founder and Executive Chairman at Hive, on Empathy, Innovation, and Disruption

In this heartfelt episode of a YSecurity.io production, we sit down with David Gurle, a visionary serial entrepreneur whose influence spans across some of the most transformative companies in secure communication and collaboration. From his early days at Thomson Reuters, Skype, Microsoft, Perzo, and Symphony Communications, and now as the Founder and Executive Chairman of Hive, David has consistently been at the forefront of driving positive change in how we connect and collaborate securely.

David's journey is deeply rooted in his formative years in Beirut, Lebanon, amid the backdrop of a civil war. He shares touching personal stories that highlight how these experiences instilled in him a profound understanding of the value of empathy and diversity. These principles have not only shaped his approach to technology and business but have also fueled his ambition to innovate and disrupt traditional paradigms.

At Hive, David is challenging the costly, error-prone, and insecure centralized compute and storage models by introducing a distributed cloud computing and storage platform. His insights into the genesis and mission of Hive offer a fascinating glimpse into the future of technology, where security, efficiency, and accessibility are paramount.

Throughout the episode, David reflects on the lessons learned throughout his career and the role of empathy in fostering innovation and driving change. His stories are a testament to the power of diverse experiences and perspectives in creating solutions that address some of today's most pressing challenges in communication and data security.

Join us on this YSecurity.io production for an inspiring conversation with David Gurle. Whether you're an entrepreneur, a tech enthusiast, or someone interested in the intersection of technology and human values, this episode offers a unique blend of personal narrative and professional insight that is sure to resonate. Discover the journey of a man who has made it his life's work to redefine the boundaries of secure collaboration and communication, driven by a commitment to empathy, diversity, and innovation.

Aman LaChapelle, Early Engineer at Modular AI, on Redefining AI Infrastructure

In this episode of a YSecurity.io production, we delve into the innovative world of Aman LaChapelle, whose fresh engineering perspective is shaping the future of security, privacy, AI, big data, and scalable compute infrastructure. As a key figure at Modular, Aman is at the helm of a transformative project aimed at rebuilding AI infrastructure to make it accessible and privacy-conscious for all.

Aman shares his insights into the complexities of balancing the need for robust data privacy with the demands of building scalable AI systems. His approach, deeply rooted in a nuanced understanding of both the technical and ethical dimensions of AI, highlights the critical importance of privacy in the age of big data.

The conversation takes an exciting turn as we explore what Aman perceives as the missing elements in the current tech ecosystem. His observations challenge conventional wisdom and spark a lively discussion on the gaps and opportunities for innovation in AI infrastructure. The revelations shared by Aman are not only thought-provoking but also underscore the urgency of addressing these shortcomings to advance the field.

Listeners will be captivated by Aman's vision for a future where AI infrastructure is democratized, ensuring that advancements in technology are leveraged responsibly and inclusively. His passion for integrating privacy considerations into the fabric of AI development is a powerful reminder of the need for a holistic approach to technological innovation.

Tune into this YSecurity.io production for an enlightening conversation with Aman LaChapelle. Whether you're an engineer, a tech enthusiast, or someone interested in the intersections of AI, privacy, and infrastructure, this episode offers a fresh perspective on the challenges and possibilities that lie ahead. Join us as we uncover the missing pieces in the tech ecosystem and explore Aman's groundbreaking work at Modular.

David M’Raihi: CPSO at Rivian, on Cryptography, Cars, and the Craft of Security

In this episode of a YSecurity.io production, we dive deep into the world of cryptography and software security with David M'Raihi, the Chief Product Security Officer at Rivian. With a wealth of experience in the field, David shares his insights on the multifaceted challenges and opportunities in protecting innovative technologies in the automotive industry.

David and host Jon McLachlan engage in a fascinating discussion on the essentials of building a robust security team, the intricacies of cryptographic systems, and the potential vulnerabilities that could lead to breaking RSA encryption. Beyond the technicalities, David offers a glimpse into his philosophy on leading an intentional and deliberate life, both within and outside the realm of cybersecurity.

Listeners will gain a rare look into the strategic thinking and technical prowess required to safeguard the future of mobility at Rivian, where cutting-edge vehicles and sustainable technology meet. David's approach to product security encompasses not only the protection of sophisticated software and hardware but also a commitment to fostering a culture of security awareness and resilience within the organization.

This episode is a must-listen for anyone interested in the crossroads of cryptography, automotive innovation, and personal growth. David M'Raihi's journey and reflections provide valuable lessons on leadership, the importance of a proactive security posture, and the pursuit of excellence in one's professional and personal life.

Tune into this YSecurity.io production for an enlightening conversation with David M'Raihi. Whether you're a cybersecurity professional, a technology enthusiast, or someone curious about the intersection of innovation and security in the automotive industry, this episode offers a unique blend of expertise, wisdom, and inspiration. Join us as we explore the complexities of securing the future of transportation and the deliberate choices that shape a meaningful life.

Michael Crandell, CEO at Bitwarden Inc., on Open Source Security

In this inspiring episode of a YSecurity.io production, we are joined by Michael Crandell, CEO of Bitwarden Inc., who shares the vision, journey, and the profound wisdom behind Bitwarden's success. Bitwarden stands at the forefront of enhancing collaboration, bolstering security, and amplifying productivity through the synergy of open source and community engagement, offering an intuitive solution for securing passwords and sensitive information.

Michael delves into the ethos of Bitwarden, emphasizing how the open-source model not only fosters innovation and transparency but also cultivates a sense of belonging and contribution among its users. He reflects on the journey of Bitwarden, from its inception to becoming a pivotal tool for individuals and organizations worldwide in managing their digital security.

Listeners will be captivated by Michael's insights into the challenges and triumphs of building a security platform that prioritizes ease of use without compromising on robustness. The conversation sheds light on the unique advantages of leveraging community feedback and collaboration to refine and evolve security solutions, underscoring the critical role of open-source principles in the dynamic landscape of cybersecurity.

This episode is a testament to the power of community-driven development and the potential of open source to revolutionize how we think about and implement security in our digital lives. Michael's vision for Bitwarden and his deep understanding of the interplay between technology, security, and community engagement offer invaluable perspectives for anyone interested in the future of cybersecurity.

Tune into this YSecurity.io production for an engaging and enlightening conversation with Michael Crandell. Whether you're deeply involved in the tech industry, passionate about open-source projects, or simply looking for effective ways to secure your digital footprint, this episode provides a compelling look at the impact of community and open source on advancing security and productivity. Join us as we explore the inspirational journey of Bitwarden and the vision that drives its mission to make the digital world a safer place for everyone.

Sergej Dechand, Co-Founder and CEO of Code Intelligence, on Fuzzing the Future

Sergej Dechand shares his security journey from usable security research to Co-Founding Code Intelligence, where he is CEO. Code Intelligence delivers open-source static analysis-guided fuzz testing that enables developers to simplify software security testing without modifying their code.

 

In this episode of a YSecurity.io production, we dive into the compelling world of software security with Sergej Dechand, Co-Founder and CEO of Code Intelligence. Sergej takes us through his fascinating journey from conducting usable security research to leading a company that's revolutionizing the way developers approach software security testing through open-source static analysis-guided fuzz testing.

Sergej explains how Code Intelligence is making sophisticated security testing accessible and efficient for developers, enabling them to detect vulnerabilities without the need to modify their existing code. By leveraging the power of fuzz testing, Code Intelligence empowers developers to build safer applications, highlighting Sergej's commitment to improving software security from the ground up.

Throughout the conversation, Sergej shares insights into the challenges and opportunities in the field of software security, emphasizing the importance of making security tools both powerful and user-friendly. He discusses the inspiration behind Code Intelligence, the impact of open-source contributions, and the future of security testing in an increasingly digital world.

Listeners will gain a deeper understanding of the critical role of security testing in software development and the innovative approaches being developed to tackle these challenges. Sergej's journey from a researcher to a tech entrepreneur provides a unique perspective on the intersection of usability and security, showcasing the potential for technology to create safer digital environments.

Join us on this YSecurity.io production for an enlightening conversation with Sergej Dechand. Whether you're a developer, a security professional, or someone interested in the evolving landscape of software development and security, this episode offers valuable insights into the cutting-edge of security testing technology. Tune in as we explore how Code Intelligence is simplifying and strengthening software security, one fuzz test at a time.

Benoit Chevallier-Mames, Team Lead of Machine Learning at Zama, On Open Source Homomorphic Encryption

Dive into the world of cryptography with Benoit Chevallier-Mames in this episode of a YSecurity.io production, where he shares his remarkable journey through the realms of encryption, engineering, and leadership. From making significant contributions at Apple to his current role at Zama, Benoit's work has profoundly impacted data security for billions of users worldwide, all while maintaining a humble demeanor.

Benoit opens up about the valuable lessons learned during his tenure at Apple, offering insights into the challenges and breakthroughs that come with working on security for one of the most influential tech companies in the world. His transition to Zama marks a new chapter in his mission to enhance data protection, focusing on pioneering work in Fully Homomorphic Encryption (FHE) tailored for Machine Learning applications. Zama's open-source SDK represents a leap forward in making advanced cryptographic techniques accessible and practical for developers, underscoring Benoit's commitment to democratizing data security.

Throughout the conversation, Benoit delves into the technical intricacies behind Zama's approach to FHE, shedding light on how this cutting-edge technology can revolutionize privacy and security in the age of AI and big data. His explanations demystify complex concepts, making them understandable for both cryptography experts and enthusiasts alike.

The episode culminates in Benoit sharing profound words of wisdom, reflecting on his experiences and the philosophical underpinnings of his work. His perspective not only inspires but also offers guidance to those navigating the ever-evolving landscape of technology and security.

Join us in this YSecurity.io production for an enlightening discussion with Benoit Chevallier-Mames. Whether you're deeply embedded in the field of cryptography, fascinated by the intersection of security and technology, or seeking inspiration from those who've made a silent yet indelible impact on our digital lives, this episode promises a wealth of knowledge, insight, and inspiration.