
The Changelog: Software Development, Open Source
Attack of the Canaries! (Interview)
Sep 13, 2023 · 1 hr 43 min · 99.6 MB
0:00-1:43:36
Streams straight from the publisher. podnod never proxies or re-hosts episode audio.
This week we’re joined by Haroon Meer from Thinkst — the makers of Canary and Canary Tokens. Haroon walks us through a network getting compromised, what it takes to deploy a Canary on your network, how they maintain low false-positive numbers, their thoughts and principles on building their business (major wisdom shared!), and how a Canary helps surface network attacks in real time.
Changelog++ members get a bonus 4 minutes at the end of this episode and zero ads. Join today!
Sponsors:
- Statsig – Build faster with confidence. Startups to Fortune 500s rely on Statsig to make data-driven decisions. Ship smarter and faster with the unified platform for feature flags, experimentation, and analytics. Our listeners get free white-glove onboarding, migration support, and 5 million free events per month.
- Sentry – Watch Lazar Nikolov livestream on YouTube at youtube.com/@nikolovlazar. Use the code
CHANGELOGand get the team plan FREE for three (3) months. - Changelog News – A podcast+newsletter combo that’s brief, entertaining & always on-point. Subscribe today.
- Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com
Featuring:
- Haroon Meer – Website, LinkedIn, X
- Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X
- Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X
Show Notes:
Something missing or broken? PRs welcome!
Join the discussion
changelog.zulipchat.comChangelog++
changelog.comStatsig
statsig.comSentry
sentry.ioyoutube.com/@nikolovlazar
youtube.comChangelog News
changelog.comFastly
fastly.comfastly.com
fastly.comWebsite
thinkst.comLinkedIn
linkedin.comX
x.comWebsite
adamstacoviak.comGitHub
github.comLinkedIn
linkedin.comMastodon
changelog.socialX
x.comWebsite
jerodsanto.netGitHub
github.comLinkedIn
linkedin.comMastodon
changelog.socialX
x.comThinkst Canary
canary.toolsPRs welcome!
github.com
- 0:00This week on The Changelog
- 1:00Sponsor: Statsig
- 4:28Start the show!
- 5:32Canary tokens
- 10:03The footprint of a Canary
- 14:23The Homelab lens
- 16:43Fingerprinting a Canary
- 18:45Masquerading as many things
- 24:02Ratio of Canaries to real hardware?
- 28:47Sponsor: Sentry
- 32:26False positives
- 34:11How are attackers getting in?
- 39:10How do you masquerade well?
- 41:45Bootstrapping Thinkst and Canary
- 53:31Adding too many things
- 59:35Just be kind
- 1:03:21Regarding dead Canaries
- 1:05:53How Canaries get deployed
- 1:12:00Sponsor: Changelog News
- 1:13:44Do you care about hardware?
- 1:20:06Adam's attack!!
- 1:25:10Where else can/will you go?
- 1:29:04Thoughts on the VC model
- 1:40:51Save it for ++
- 1:41:40Up next!