Artwork
iconShare
 
Manage episode 300249062 series 2971726
Content provided by Firo Solutions. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Firo Solutions or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://staging.podcastplayer.com/legal.

In this episode, we talk with Maksymilian Arciemowicz, security research

that has found bugs in a large chunk of systems, active in the security field

since 2005. He is the founder and maintainer of cxsecurity which is a website

that index and host security vulnerabilities for everyone.

Cxsecurity is home to a lot of exploits and security research, in this episode

we get to hear the story of how it got created by its founder Maksymilian!

One of these types of communities is a mailing list called bugtraq.

Maksymilian learned how to find security bugs thanks to that mailing list and

soon after finding his first couple of bugs he teamed up with a friend to start a

website called *securityreason.com*. SecurityReason took the security research from the mailing list

and displayed it in a nice web interface.

The two founders wanted to go different ways, Maksymilian wanted the research to stay open and not

commercialize on it.

The website got shutdown and Maksymilian forked it into a new better version called cxsecurity.com!

In nature, the power lays in the entity with the most muscles but on

the internet, the power is in the person with the most knowledge, the power comes

from the intellect. Whoever comes up with new ideas and is able to prove it wins

the intellectual battle, Maksymilian explains.

Since 2005 Maksymilian has been able to find security holes in:

* IPFilter in openbsd, which was used before they switched to

* Freebsd

* Magento

* Mac osx

* phpmyadmin

* PHP

* NetBSD

* Vsftpd

* apache

* Solaris

* Thunderbird

* Opera

* libc

and a lot more!

We are super happy to have a true hacker spirit with us in this episode

on Security Headlines!

In this episode, we cover topics such as:

How the security landscape has changed since 2005 and how easy it was

to hack back then.

Using regular expressions to make security research better and faster!

How to submit security exploits to software vendors.

CVE, lack of description

Stories from the heart of the security scene

Suricata and Artificial Intelligence

How to protect your systems.

Development and a lot more!

static code analyzer, he has written his own static code analyzer for PHP.

We of course sidetrack a bit into OpenBSD and when a person such as Maksymilian says:

*OpenBSD is the most secure operating system in the world*

We can just smile :)

External links:

https://cxsecurity.com

https://cifrex.org

https://cxib.net

https://www.exploit-db.com/history

  continue reading

25 episodes