Do you run any code that listens on an open port on the internet?

This could be a website, a restful web service, or gasp, even a database endpoint.

Troy Hunt, a renowned security expert, likes to say that you're doing free penetration testing for that product right there.

Join Troy and me on this episode of Talk Python to Me.

We discuss lessons learned from running the vulnerability monitoring website,

Have I Been Poned, as well as other lessons for developers to keep your code safe while providing

public services. This is episode 136 recorded October 26th, 2017. Welcome to Talk Python to me, a weekly podcast on Python, the language, the libraries, the ecosystem, and the personalities.

This is your host, Michael Kennedy.

Follow me on Twitter where I'm at M. Kennedy.

Keep up with the show and listen to past episodes at talk python.fm.

And follow the show on Twitter via at talk python.

This episode has been sponsored by Rollbar and GoCD.

Thank them both for supporting the podcast by checking out what they're offering during their

segments. Troy, welcome to Talk Python. Hey, thank you very much for having me. Yeah, it's really great to

have you on as a guest. I've respected the work you've done in the security space immensely.

And I'm looking forward to sharing what you've learned about software security and developers

with the audience.

Cool. Awesome. Let's do it. Yeah, let's do it. Now, before we get into all the details, let's start with how you got into programming in the first place. What's your story?

That's a good question. So I was a little bit anti-computer when I was a kid, probably up until about teenage years. And I was actually very frustrated by my friends

who'd, uh, who'd be inside on the computer. And I'm like, come on, man, I want to go outside and play

football or something like that. What, what do you nerds doing? And then, uh, I guess I got into it by,

uh, I, I moved overseas when I was a kid. So this was when I was almost 14. My family moved to the Netherlands.

...