In this episode of Security Headlines, we are joined by  
the Hacker Johnny Xmas. Johnny is a very interesting character   
with a lot of fun projects behind him.   
Join us as we get to hear Johnny's stories as we deep dive 
into this weeks episode of Security Headlines:



## Venmo
After giving a talk about it and releasing software that made everyone  
able to easily abuse this, Luckily venmo took action and limited the 
amount of data avaliable. Johnny found a way to generate api keys with  
just making a simple request to the 



## Bypassing Webb application firewalls   
A lot of firewalls just focus on IP filtering which is a huge problem  
when, in todays world it is really easy and cheap for a consumer   
to aquire a large sets off ip addresses.  
One provider of proxied ip addresses is Hola VPN that lets their free   
users act as exit nodes that they sell using platforms such as luminate.

Other people have adopted this approach but with mobile development toolkits.  


## Grimm    
Johnny is currently working for the security engineering firm Grimm, a company known for its involvement in the ICS(Industrial control system) security work.  
Currently working on developing 
Grimm is currently hiring people, do you want to get paid to develop security training platforms ?
then Grimm is the place for you!



External links:   
https://twitch.tv/j0hnnyxm4s
https://twitter.com/J0hnnyXm4s/
https://www.youtube.com/c/JohnnyXmas/
https://github.com/johnnyxmas/Talk_Decks/tree/master/2019/Sorry%20about%20your%20WAF
https://ghost.express/   
https://www.cnbc.com/2020/05/07/zoom-buys-keybase-in-first-deal-as-part-of-plan-to-fix-security.html  
https://www.twitch.tv/mr_horologist   
https://twitter.com/cigarsec   
https://www.icsvillage.com/   
https://www.grimm-co.com/careers   
https://en.wikipedia.org/wiki/Venmo   
https://www.technowize.com/grindr-security-flaw-lets-anyone-hijack-user-accounts/
https://en.wikipedia.org/wiki/Principle_of_least_privilege  
https://en.wikipedia.org/wiki/Branched-chain_amino_acid  
https://opihr.com/   
https://en.wikipedia.org/wiki/Sub7
https://nmap.org/book/man-nse.html  
https://en.wikipedia.org/wiki/Less_Than_Jake   
https://en.wikipedia.org/wiki/Oh,_Sleeper
https://luminati.io/  
https://selenium.dev/  
https://blog.firosolutions.com

Ver todos los episodios