Something About Security With Ben Hughes

When we talk about DevOps, often times we focus only on the two disciplines that feature in the name - Development and Operations. But DevOps, truly, is about collaboration across all areas of the business, even those security blokes. Ben Hughes, Security Manager at Etsy, joins the ADO crew to review how to work WITH your security teams, and show that they’re not really scary at all.

Show Notes

What exactly do you security folks do all day?
So let's talk about ZOMG SCARY CLOUDS
I'm a developer. What do I need to know to help me be pals with InfoSec?
Ops people know security, right? Or not?
Common security mistakes/misconceptions
How can InfoSec be better buddies with other functions?
Are you tired of Matt calling it "InfoSec"? Does it remind you of Information Society?

Check Outs

Matt

zsh and oh my zsh - http://github.com/robbyrussell/oh-my-zsh
zmojii plugin
all of the chef 12 things!
st. tom waits prayer candle - http://www.etsy.com/listing/177742614/saint-tom-waits-prayer-candle

Ben

http://cybersymposium.isis.poly.edu/symposium/ The NYU “Bridge to cyber security: a women's Symposium” which is a two day event aimed at introducing women of all ages and points in their career to security.
(if you’re gonna talk oh-my-zsh, you should really talk prezto - http://github.com/sorin-ionescu/prezto)
http://gauntlt.org/ by James Wickett (of Signal Science) and Mattjay (of Whitehat security) (and others) is pretty amazing CI/CD tool for security testing your code.
http://twofactorauth.org/ list of places that do and don’t have two factor authentication. *cough* iCloud drama *cough*

Trevor

http://www.strengthsfinder.com/home.aspx Strengthsfinder- recommended to me by Kay Johansen at FlowCon, interesting analysis of leadership strengths
Amazon Instant Video is F&$king finally on Android (still needs Chromecast support built in, but screencast works just fine)
Rampage the boardgame. http://boardgamegeek.com/boardgame/97903/rampage

Ben Hughes

Ben Hughes is not a CTO, is not an award winning thought leader, nor an accomplished playwright. He is however a senior security engineer at Etsy. Before that he was breaking operations at Puppet Labs. He’s also pretended to be a build engineer for cold hard cash, but he’d really rather not talk about it. He’s spoken at conferences throughout the world on subjects such as security, devops, and security and devops.

Trevor Hess

Trevor Hess is a Senior Product Manager at Progress Software working on Chef Software. He currently works on the Chef Application Delivery, Compliance and Infrastructure offerings.

Coming from a background in .NET Software Development and consulting, he has worked with several large multinational organizations to help kick start their journey to the cloud and the world of DevOps practices and principals. He is excited to engage in new experiences, and learning opportunities.

Trevor enjoys having hearty discussions about DevOps as well organizational change and transformation.

Matt Stratton (he/him)

Matty Stratton is the Director of Developer Relations at Aiven, a well-known member of the DevOps community, and a global organizer of the DevOpsDays set of conferences.

Matty has over 20 years of experience in IT operations and is a sought-after speaker internationally, presenting at Agile, DevOps, and cloud engineering focused events worldwide. Demonstrating his keen insight into the changing landscape of technology, he recently changed his license plate from DEVOPS to KUBECTL.

He lives in Chicago and has three awesome kids, whom he loves just a little bit more than he loves Diet Coke.