Evan Dornbush: Desired Effect

Summary In this episode of the Phillip Wylie Show, host Phillip Wylie interviews Evan Dornbush, a seasoned cybersecurity professional with a rich history in the field. They discuss Evan's journey from a summer internship focused on cybercrime to his work with the NSA and his entrepreneurial ventures in cybersecurity. The conversation delves into the challenges of hiring in tech, the importance of proving technical skills, and the evolving landscape of security research. They also explore the impact of AI on cybersecurity, the economics of cybercrime, and Evan's new podcast aimed at educating listeners about vulnerabilities and exploits. Takeaways • Evan's journey into cybersecurity began with a summer internship focused on cybercrime. • The importance of hands-on experience in proving technical skills in cybersecurity. • Entrepreneurship in cybersecurity can lead to innovative solutions for hiring and skill assessment. • AI is changing the landscape of cybersecurity, creating both challenges and opportunities. • The economics of cybercrime are driven by profitability, making it a persistent issue. • Bug bounties provide a platform for researchers to monetize their skills and contribute to security. • The rise of CVEs reflects the increasing complexity and volume of software vulnerabilities. • Community involvement and education are crucial for the future of cybersecurity. • Evan's podcast aims to demystify vulnerabilities and educate the research community. • The need for better options for researchers to disclose and monetize their findings. Sound Bites "I was totally fanboying." "Research is protected free speech." "It's a shame there's nothing US based." Chapters 00:00 Introduction and Background 01:16 Evan's Hacker Origin Story 04:15 Transitioning from NSA to Entrepreneurship 06:53 The Mission of Point Three Security 09:32 Innovative Hiring Practices in Cybersecurity 12:32 Proving Technical Skills in Cybersecurity 14:42 Breaking into Security Research 17:51 The Evolving Landscape of Vulnerability Research 20:55 The Value of CVEs vs Certifications 23:59 The Economics of Cybercrime 26:20 The Future of Exploit Markets 30:07 Evan's New Podcast: Explain it Like I'm Five 37:36 Closing Remarks and Nonprofit Involvement Resources https://www.linkedin.com/in/evandornbush/ https://www.desiredeffect.io/ https://www.securityweek.com/ethical-zero-day-marketplace-desired-effect-emerges-from-stealth/ https://podcasters.spotify.com/pod/show/hackersontherocks4 https://goldstargamers.org/