Zoom Online - See link at Meetup page

Abstract Cryptography is tricky. Sure, everybody knows not to roll out their own crypto, but is it enough? Are the standard algorithms, libraries, and utilities always used the right way? This is of course a rhetorical question! Humans keep making mistakes that other humans can exploit, and Murphy’s law continues to prove true: “If there is a wrong way to do something, then someone will do it.” In this talk, not only will we discuss what can go wrong, but also how attackers could take advantage of that. Insufficient entropy? Static initialization vector? Key reuse in stream cipher? Lack of ciphertext integrity? We’ve heard these terms and may be familiar with them in theory, but let’s see actual examples of these and other crypto mistakes and corresponding exploits, and understand how they could lead to real life problems. Are you not on an offensive team and not interested in exploitation? Then this talk is for you too! Come and learn how to avoid common crypto mistakes in your code!

Bio Alexei began his career as a software developer. A decade later, he realized that breaking code was way more fun than writing code, and decided to switch direction. He is now a full-time application security professional, with several years of assisting various development teams in delivering secure code, as well as security consulting. He holds OSCP and CISSP, and currently works as a lead product security engineer for Salesforce.

RSVP: https://www.meetup.com/OWASP-Portland-Chapter/events/270404725/

They told me to use encryption and it will solve all our problems! What is encryption and cryptography, and why is it important? The web uses certificates to encrypt. How do they fit in? What are they? We will discuss the 3 types of encryption: symmetric, asymmetric and hashing, what they do, how are they different, and how are they used in the real world.

Bio: Brian Ventura is an Information Security Architect with 20 years of industry experience. With a diverse background in consulting, public and private sector, and project management; Brian brings a comprehensive view of security and technology. As an architect, he currently focuses on enterprise information security governance, risk and compliance. Brian advises public and private entities on security best practices generally and within large projects.

Additional meeting details will be messaged to all Meetup RSVP attendees later.

RSVP: https://www.meetup.com/OWASP-Portland-Chapter/events/269992111/

AgilePDX is providing a forum for Agile Project Managers, Agile Facilitators, and Scrum Masters to gather online once a month and discuss all things project, program, and portfolio related. Please join us for a Lean Coffee style event facilitated by experience Agile PM's and instructors in the PMI Agile Certified Practitioner prep program.

You'll be dialing in from your desktop with your favorite early morning brew. Please join with your camera on. The Zoom URL will be provided to confirmed attendees. Feel free to post questions to this meetup prior to the event.

We welcome divergent opinions and experience reports. Bring your challenges for groups feedback and support. Plan to join 15 minutes early for coffee clatch chat and networking or stay 15 minutes for the same networking experience.

AgilePDX is providing a forum for Agile Project Managers, Agile Facilitators, and Scrum Masters to gather online once a month and discuss all things project, program, and portfolio related. Please join us for a Lean Coffee style event facilitated by experience Agile PM's and instructors in the PMI Agile Certified Practitioner prep program.

You'll be dialing in from your desktop with your favorite early morning brew. Please join with your camera on. The Zoom URL will be provided to confirmed attendees. Feel free to post questions to this meetup prior to the event.

We welcome divergent opinions and experience reports. Bring your challenges for groups feedback and support. Plan to join 15 minutes early for coffee clatch chat and networking or stay 15 minutes for the same networking experience.