John Aron, letters of marque, what does a "junior" job look like with AI?

Sep 3, 2023

John Aron, CEO of Aronetics, discusses 'letters of Marque' for hackers, overreliance on automation, and communication siloes in infosec. Also explores the role of AI in 'junior positions' and the challenges of automation. The podcast covers topics like the pros and cons of automation, communication issues, and the idea of 'letters of Marque' for hackers.

Ask episode

Chapters

Transcript

Episode notes

Introduction

00:00 • 4min

Financial Aspect, Personal Identity, and the Human Element in Cybersecurity

04:25 • 14min

Creating Solutions for Non-Existent Problems

18:26 • 26min

The Challenges and Evolution of Cybersecurity

44:27 • 17min

The Importance of Compliance in Company Certifications

01:01:09 • 4min

Taking Apart Electronic Devices and Fixing a Coolant Leak in a Car

01:04:47 • 8min

Reputational damage and the decline of engagement on social media platforms

01:12:26 • 12min

Disclaimer: The views, information, or opinions expressed on this program are solely the views of the individuals involved and by no means represent absolute facts. Opinions expressed by the host and guests can change at any time, and do not represent views of past, present, or future employers.

Guest Bio: John is the CEO of Aronetics. An avid climber and runner, John has spoken at many conferences about topics like ZeroTrust, BIOS/UEFI security, communication security, and malware. Aronetics is a technology-enabled service provider.

Youtube VOD: https://youtube.com/live/5dIVTwVZLAU

Linkedin VOD: https://www.linkedin.com/video/live/urn:li:ugcPost:7101738254823030784

Show Topic Summary:

John joins us to discuss “letters of Marque” in an effort for hackers to ‘hack back’... the overreliance on automation, and communication siloes. We also talk about what a ‘junior position’ in infosec looks like with AI doing all the “Level 1 SOC Analyst” type roles normally given to someone fresh to the security industry.

Questions and topics:

Is infosec over reliant on automation? Automation comes with its own challenges.
1. Documentation woes
1. Automation is usually found in userland

Aronetics’ Thor provides defense and counter-offense tamper-proof technology digitally tied to

Letter of Marque - good idea, or geopolitical disaster waiting to happen?

Siloes and communication -best ways to overcome those in an org and outside?

How do we overcome siloing?

Overcoming security challenges?Identity management - 2FA is everywhere, there’s already ways around 2FA, so what now? 3FA? Biometrics? Make everyone carry around physical tokens that we can lose?

Blog post: https://www.aronetics.com/post-quantum-cryptography/ What do we need to protect against? Nation states with quantum computers? Rubber hose cryptography?

Crime thrives in areas of low visibility. https://www.aronetics.com/unknown/

https://www.aronetics.com/inside-the-breach/ (threat detection - the crime thrives in low vis areas)

Show points of Contact:

Brakesec Website: https://www.brakeingsecurity.com

Youtube channel: https://youtube.com/c/BDSPodcast

Twitch Channel: https://twitch.tv/brakesec

Amanda Berlin: @infosystir@infosec.exchange (Mastodon) @hackershealth

Brian Boettcher: @boettcherpwned

Bryan Brake: @bryanbrake on Mastodon.social