In this episode, we talk with Maksymilian Arciemowicz, security research    
that has found bugs in a large chunk of systems, active in the security field   
since 2005. He is the founder and maintainer of cxsecurity which is a website   
that index and host security vulnerabilities for everyone.   

Cxsecurity is home to a lot of exploits and security research, in this episode   
we get to hear the story of how it got created by its founder Maksymilian!   


One of these types of communities is a mailing list called bugtraq.   
Maksymilian learned how to find security bugs thanks to that mailing list and  
soon after finding his first couple of bugs he teamed up with a friend to start a    
website called *securityreason.com*. SecurityReason took the security research from the mailing list   
and displayed it in a nice web interface.   
The two founders wanted to go different ways, Maksymilian wanted the research to stay open and not    
commercialize on it.   
The website got shutdown and Maksymilian forked it into a new better version called cxsecurity.com!


In nature, the power lays in the entity with the most muscles but on    
the internet, the power is in the person with the most knowledge, the power comes  
from the intellect. Whoever comes up with new ideas and is able to prove it wins    
the intellectual battle, Maksymilian explains.   

Since 2005 Maksymilian has been able to find security holes in:  
* IPFilter in openbsd, which was used before they switched to   
* Freebsd      
* Magento   
* Mac osx    
* phpmyadmin    
* PHP       
* NetBSD        
* Vsftpd       
* apache      
* Solaris        
* Thunderbird       
* Opera         
* libc         
and a lot more!

We are super happy to have a true hacker spirit with us in this episode     
on Security Headlines!
In this episode, we cover topics such as:    
How the security landscape has changed since 2005 and how easy it was    
to hack back then.    
Using regular expressions to make security research better and faster!    
How to submit security exploits to software vendors.    
CVE, lack of description       
Stories from the heart of the security scene       
Suricata and Artificial Intelligence      
How to protect your systems.      
Development and a lot more!      
static code analyzer, he has written his own static code analyzer for PHP.   

We of course sidetrack a bit into OpenBSD and when a person such as Maksymilian says:    
*OpenBSD is the most secure operating system in the world*   
We can just smile :)        

External links:
https://cxsecurity.com
https://cifrex.org
https://cxib.net
https://www.exploit-db.com/history

Ver todos los episodios