This year I learned to be vulnerable.
I am writing this from the waiting area at McCarran airport in Las Vegas. It’s around 106 degrees outside and I am waiting 7 hours for a flight. My defcon and BlackHat badges are tucked up in my carry-on bag. It’s time to go home.
At the core of introducing security to an environment is change. Change is an interesting and sometimes scary thing, especially if you are meddling is someone else’s workflow or domain.
The one question that security consultants and penetration testers are asked regardless of how big or mature their clients are.
Whether it came to you as a sudden epiphany or a growing acceptance, deciding to integrate security into your application and development culture is no minor decision.