Evan Dornbush: Desired Effect
Summary
In this episode of the Phillip Wylie Show, host Phillip Wylie interviews Evan Dornbush, a seasoned cybersecurity professional with a rich history in the field. They discuss Evan’s journey from a summer internship focused on cybercrime to his work with the NSA and his entrepreneurial ventures in cybersecurity. The conversation delves into the challenges of hiring in tech, the importance of proving technical skills, and the evolving landscape of security research. They also explore the impact of AI on cybersecurity, the economics of cybercrime, and Evan’s new podcast aimed at educating listeners about vulnerabilities and exploits.
Takeaways
• Evan’s journey into cybersecurity began with a summer internship focused on cybercrime.
• The importance of hands-on experience in proving technical skills in cybersecurity.
• Entrepreneurship in cybersecurity can lead to innovative solutions for hiring and skill assessment.
• AI is changing the landscape of cybersecurity, creating both challenges and opportunities.
• The economics of cybercrime are driven by profitability, making it a persistent issue.
• Bug bounties provide a platform for researchers to monetize their skills and contribute to security.
• The rise of CVEs reflects the increasing complexity and volume of software vulnerabilities.
• Community involvement and education are crucial for the future of cybersecurity.
• Evan’s podcast aims to demystify vulnerabilities and educate the research community.
• The need for better options for researchers to disclose and monetize their findings.
Sound Bites
“I was totally fanboying.”
“Research is protected free speech.”
“It’s a shame there’s nothing US based.”
Chapters
00:00 Introduction and Background
01:16 Evan’s Hacker Origin Story
04:15 Transitioning from NSA to Entrepreneurship
06:53 The Mission of Point Three Security
09:32 Innovative Hiring Practices in Cybersecurity
12:32 Proving Technical Skills in Cybersecurity
14:42 Breaking into Security Research
17:51 The Evolving Landscape of Vulnerability Research
20:55 The Value of CVEs vs Certifications
23:59 The Economics of Cybercrime
26:20 The Future of Exploit Markets
30:07 Evan’s New Podcast: Explain it Like I’m Five
37:36 Closing Remarks and Nonprofit Involvement
Resources
https://www.linkedin.com/in/evandornbush/
https://www.securityweek.com/ethical-zero-day-marketplace-desired-effect-emerges-from-stealth/
https://podcasters.spotify.com/pod/show/hackersontherocks4
Podcast: Play in new window | Download
