Five minutes in and I absolutely love her! “I’m trying to cram as many lifetimes as I can into my own lifetime” what an awesome quote! I LOVE that philosophy. LIVE A LIFE OF A THOUSAND LIVES.
@@asusd6161 If she is starting a film production company, all that $$$$ is as good as gone. Very few make it past year getting into that game and even fewer ever turn a ROI. Netflix themselves are struggling badly and lose money on most of their productions. Indies - don't stand much of a chance.
couple of things for newer devs 1. Never hard code API keys or tokens in your application. Use ENV variables 2. Sanitize form data 3. Test application before moving to production (test route logics, check middlewares, always use verified vetted packages etc...)
You are a strong woman indeed ,and that's what I thought first time started using API's if you want to make a successful startup you will use the API-s . They are like the lego cubes of today's biggest apps, take one out, and all falls down. then at the same moment as I write this i see your guest at the start of the vid hosting the show about AI that i could specify on a demand !,and i just asked myself how is possible this is mentioned now in 2022 and not before ,seriously guys/girls i mean whatever.
I'm at a loss for words David. You content is really pure gold. Would love to know more above ICS/SCADA hacking (how to learn about them), IoT and cars hacking
There's a lot courses on SCADA and ICS on the cisa platform, go check 'em out.. you'll even be given a certificate at the end of each course... Ya'll should really check em out. I forgot the link to the courses actually, because the cisa's web platform is wide and deep but then you can just find your way around to the courses offered by the DHS on SCADA and ICS and the likes.
I've done multiple David's courses on Udemy and I loved him right away, very hands-on and meticulous Alissa is by far, your Best guest. She is an absolute gem, what a character! 😊 I do relate to a lot of stuff that you guys have mentioned - I'm born in 87' I feel very privileged to have grown in the best times to be a kid and best to be a teenager and a young adult when technology entered our lives, and be part of the whole process. Since my kids, will experience a very different world in their youth, we're more connected, and yet we're more disconnected than ever - remote working, automation, AI, social media, I mean I could go on and on.
Alissa thank you so much for finishing that quote! I have been saying that for years! Even tried to make that statement during interviews and NO one knew that! I am twining with you right now!
I am finding that this community is really feeding my desire to learn new things. I have always liked figuring out how stuff works, and computers have always been the big black box but not anymore. I've been slowly learning more and more and the enthusiasm and encouragement this community provides has been really positive. The more I learn about cyber stuff, the more it will help me in my (non-cyber) career and is bringing back some interest and enthusiasm to the burnout I've had with it. I am learning ways to think about stuff that I might not have previously. And I like how there are so many different ways people have learned things in non linear ways. Keep it coming!
This is crazy information. The more I watch David the more I see how powerful IT is omg. Thanks David for the interview I'll buy the book the moment its released
Learnt a lot from her even in this short 1hr talk with David. Her emphasis is simply digging into the fundamentals and mastering the main concepts of any technology you want to use to build cool solutions with. That grit and quest for knowledge has deep-rooted as well as unseen benefits later on. Will definitely check out her ‘hacking connected cars’ book as well as her ‘hacking APIs’ one coming out later this year.
Phenomenal interview. To all young people watching this in their 20's or younger. Find a passion and self educate. Just drive in. I found my passion young while still working a 9 to 5 and started my own business in cell phone network unlocking at 38 years old after knowing my business inside and out over the years as a hobby. Dive in, dedicate yourself and the money will follow.
I got a copy of Alissa's book, and I think it's great that she has basically given us a template for creating a corporate umbrella, for software startups. I believe that there are a lot of API Testers that don't really want to be in front of one of Alissa's video cameras. Alissa's Book along with David's and Network Chuck's videos look like they will make for a very interesting 2022 for me! As Alissa implied, any control unit with an IP address, has an attack surface that you might be able to access.
@@abetterfuture4787 I think Alissa is referring to something much broader in scope than just cars. Anything with an IP address that is using wireless for communications, probably has an attack surface that you can access. That's really is everything inside of the cloud, that you might consider to be the internet of things (IoT). Think of how an IoT clock (a TCU) talks wirelessly to an IoT controller (HU) sitting on your kitchen counter. And also how the HU talks back to home base across the internet.
this is how i am i take on new things as much as i can. in 2 years i took on soldering keyboard building flashing json files building keyboard firmware to coding Arduino and then python to 3d printing now to put it all together. now i building 3d printing firmware from source code. thank you guys for being here. there is so much more that i have done. now to aplie it to real life to be my own boss would be the goal now.
AMAZING INTERVIEW. Thank you David for bringing such good guests and asking them so good questions while giving the the freedom to expatiate with amazing topics❤❤
I started out at 14 hacking radio to set up my own station. From there it was one thing or another. I think that type of drive to learn the misuse of tech isn’t in it for everyone. I really loved this video. A great guest!
Im always skeptical of people that say they have been in Cybersecurity for 20+ years. But listening to Alissa speak, there are no doubts. What an impressive career!
Probably one of the few guests on this channel that truly is worthy of a tittle Hacker. Not only her knowledge is impressive but her enthusiasm toward learning new things as well.
Thank you David, your education levels and methods are amazing. There are many people who are experts on their topic, but then cant teach it. You are a master of both. Thank you. (Alissa, thank you for this super informative session)
I ran a BBS back in the 80s. I enjoyed this interview. She said things that made me reminisce. Thank you for sharing. It's true; without passion, you will burn out quickly. Everyone has to pay their dues, though. There is no fast path. "A jack of all trades is a master of none, but oftentimes better than a master of one.” I love it!
Thanks to you and Alissa for an amazing video. "Long Live Old School!" I work for a Tech software company and always felt uneasy about API's and I can see now the feeling was correct. Your video gave me the motivation and drive to make sure we are secure.
I appreciate that she is a lifetime learner. I am a Jack of All Trades too. I am also a techie and in film production with multiple companies and interests. Now...I'm learning about Cyber Security.
Thanks David for interviewing such valuable person on your channel i personally learned a lot from this video as a software engineering student will be looking forward more into API and stuff like that ❤️ you made my day thanks ❤️
Who will watch this video and not subscribe... the lady is wow!!! I just watched her, saw some similarities between us, and imagine where I'm at, compared to her level... I'm like nothing. Definitely your follower from today. Thanks David for bringing this.
I am a jack of all trade, social worker, esl teacher, data analyst, I want to learn as much as I can do. I love that knowledge is out there for us to grow!
OMG what a treasure trove of information. She is right we all want the "magic pill" give it to me now! When she talked about mind maps it was like "BOOM" that's how, now where to start? API's duh! Thank you David and Alissa, what an awesome video!
A rare person. I connect with her on many levels and will definitely seek out her work. I consider myself a hardware hacker and follow people like you to at least become familiar with software/network hacking. My definition of hacking has always been “finding undocumented features and putting them to use” very similar to Alissa’s and that is what hooked me. Thank you for making this video I enjoyed every minute.
Legitimately every time I hear Alissa speak, I take something valuable away from it. What legends. Thanks David for the interview and thanks Alissa for sharing your thoughts!
All the time I read this quote, but this is the first I learn the complete quote: A JACK OF ALL TRADES IS A MASTER OF NONE, BUT OFTENTIMES BETTER THAN A MASTER OF ONE. I love learning everything, but when I read that quote, it's like should I stick to master only one. Thanks to you both.
I'm surprised that API hacking is apparently somehow exotic. I always assumed APIs are like the first to attack - like why would you try to enter a building through a window if you might be able to enter through the front door?
Thanks Alissa Knight, what you said on 13:48 "... but it's better than a master of one", this single segment of line is so so so inspiring for me that i can not describe in words.
Dig that you promote deeper understanding. I'm an analog generation guy that somehow became a pharmacist. Now I'm an engineer with a deeper interest in computers and why we get hacked. You can always continue to learn... never stay within the box
22:23 Yay Alissa, pcap analysis - Packet Monkey! Love it! Completely agree that analyzing protocols really helps to understand how things work. Great content!
1:37 oh my God I'm from Vancouver lived in Seattle grew up in the Pacific Northwest born in 82 but I still get carded even for lottery tickets and you only have to be 18 for them this is crazy I hope you show her TH-cam and everything below so I'm definitely going to try and connect Alyssa all about your book before this episode even over! I remember the sound of dial up. I remember the Seattle grunge scene. I remember growing up between Lower Mainland Vancouver in the Muddy Banks of the wishkah anyone from the Pacific Northwest will know exactly what I'm talking about:-) add most amazing of all this talk that you're giving about what you're doing is this is exactly what I've been seeking out to start up an all round penetration tester where no day is the same as the one before
Alissa Knight is from the old school of hacking!! She is the definition of the GOAT!! The mindset of learning is the key take away from this video! Thank you Alissa and David!!
This interview is so dope! Thank you so much for uploading this. It’s always refreshing (as a woman) to hear from other women in the industry and to make a correlation somewhere with their journey to where they are now. I can’t wait to read her books. She makes some GREAT points about the certs… and helped me put my finger on things I was thinking all along. Brilliant! ❤
I just loved this interview! Alisa is phenomenal. Thank you so much. The passion and desire I have for learning was so incredibly important to my long career in cybersecurity. I retired 5 years ago but still have that passion to learn and it's why I follow your channel and other similar ones such as Alisa's. I totally agree with her that the passion and desire to learn is the absolute key to success in the field. I also have believed for some time now that, as she put it, the future battlefront for cybersecurity is at the API level.
Is there even a point to retire? I do not think I would do that ever! Once you have years of experience there is no point to retire. My company tries to keep engineers even on part time so they can teach younger staff on the field.
I was a automotive technician for a European and exotic car dealership and we had a recall on one of the manufacturers we carried due to a security problem and the car was able to have certain controls taken over and we honestly weren't told very much besides how to perform the recall which was a control module swap and reflash but ive been so interested in this since...
David, great idea to bring Alissa to the show. Alissa, congrats girl! I'm also old school and believe on learning the core of things in order to use it better. I decided to stop teaching telecommunications because young students want magic pills. It's great people like you are touching their heart and telling that there is no short cut to perfection. Already signed to you YT channel.
A truly fantastic interview!! Alissa's way of thinking is brilliant! ♥️♥️ I'm Sysadmin network guy.. Been doing it for decades.. No official training.. Ran govt teams before.. So many people where I live memorize what the teacher tells them but can't even secure a basic network .. Drives me bonkers.. Get some experience 😂
I didnt know that about “jack of all trades”! Just like “Great minds think alike” & people forgot “fools seldom differ”! I really enjoyed this interview & how excited she became over so much about hacking! Pukka! Stafe Marc xxx
// MENU // 00:00 ▶ Coming up 00:44 ▶ Intro 00:53 ▶ Alissa Knight introduction and background 02:36 ▶ Published author and filmmaker 03:30 ▶ Alissa Knight TH-cam channel 05:02 ▶ Book on API hacking 06:05 ▶ The definition of hacking 10:25 ▶ How to approach hacking 14:10 ▶ The importance of learning 16:07 ▶ How to start hacking APIs 22:54 ▶ "The Desire" 25:35 ▶ Recommended certifications 28:35 ▶ Understanding Networking fundamentals 30:04 ▶ Do you have to be a programmer to hack? 33:09 ▶ Mastering tools 34:33 ▶ Hacking APIs 38:43 ▶ Shift left security, shield right 40:15 ▶ Bank app developed by marketing team 42:51 ▶ Smart phone takeover 45:10 ▶ How to learn to hack APIs 48:11 ▶ Process on how to hack APIs 55:05 ▶ Implementing authorization and authentication 56:43 ▶ APIs in nuclear plant systems 58:52 ▶ Wifi pineapple 01:01:23 ▶ Securing APIs in cars 01:03:18 ▶ "Exciting times" 01:05:45 ▶ Conclusion Nahamsec Interview: th-cam.com/video/Y2Y4Sk0PswU/w-d-xo.html // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: twitter.com/davidbombal Instagram: instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal TH-cam: th-cam.com/users/davidbombal // Alissa's SOCIAL // Twitter: twitter.com/alissaknight TH-cam: th-cam.com/users/alissaknight Instagram: instagram.com/alissaknight/ LinkedIn: www.linkedin.com/in/alissaknight/ Website: www.alissaknight.com/ Hacking Bank APIs: davidbombal.wiki/hackingbankapis // Katie Paxton-Fear // TH-cam: th-cam.com/users/InsiderPhD Twitter: twitter.com/insiderphd // David Sopas // Twitter: twitter.com/dsopas Github API mindmap: github.com/dsopas/MindAPI // Buy Hak5 Pineapple here // Buy Hak5: davidbombal.wiki/gethak5 // Hyperfocus daily task sheet // Alissa Knight's Daily Task Sheet: davidbombal.wiki/dailytasks // BOOKS // Hacking Connected Cars - Alissa Knight: amzn.to/3Ke00GO Hyper Focus - Chris Bailey: amzn.to/3vAocxO Self Journal by BestSelf: amzn.to/3ks1BhK Hacking APIs - Corey Ball: amzn.to/37PUwoI The Official (ISC)2 CISSP CBK Reference: amzn.to/3vxzjJ2 // MY STUFF // www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
Thank you so much Alissa for such a wonderful walkthrough on how to get started on API hacking 👍 And the best thing u said "If You Stay Still, You're Dead" ❤ Keeping learning each day as a student. Can't agree more!!
"The quieter you become, the more you are able to hear." Where as she know Who she is, knows where she wants to go, you are the one thats lost your way if petty genrer hints rubs you like that.
I am listening r to this because the level of security I work around my apis is insane ...that is application level....class level..then to object level kind ..so I am watching this
Had to pause at 14min to say thank you and Alissa was the perfect guest for you to have had on and right now is exactly when I needed to hear this discussion, much appreciative for the both of you.
I have been studying cyber for almost 20 years, since I was 9y/o and I do totally agree with her. Nowadays people are just to immediatist. I see that in the whole world. I am an instructor at a cyber security course and a lot of students just come in and just ask for the answers without even trying to think first it is annoying as hell. Also, lovely to see women who are a long time on the field :)
Wow very informative, am from Nigeria David Your TH-cam channel is Number in a million, and Alissa is a Genius. David you deserve 6 Million subscribers your content is as precious as a Diamond.
Iv litterally spent 2 months learning python and don't like it much but spent a few days looking at TH-cam videos on hacking and got hooked. I just wish my adhd brain was better at finding good paths I can stick to rather than learing so many different software paths... I just want to feel confident in knowing my time is going to something I can continue to use and enjoy.
One of the biggest problem we're facing today is that ''user experience'' tend to be at the #1 spot and security lays at the #2... They don't want to be secure if it changes the users habit too much. I see it everyday of the week. Companies don't want to talk to their own security team because they are ''complaining'' all the time and they mess too much with the ''not so well thought deadline'' that they wrote on paper. Money is more important than security and it's a well established mentality. Thanks for the content as always David :)
Hi David, great work! Cooperating with experienced, professionals and masters in technology systems like Alissa makes this channel more valuable and educative. I'm not even knowing about hacking but listening to your sharing makes me so grateful to know about how is it essential to protect our data. keep the good work!
Thank you for featuring Alissa. I don't have the technical background and more on the operations side but I've always have concerns in API security being that its open source and it is the "connector" of all apps and software in the network. Definitely subscribing to her YTC.
Sunday is my binge Bombal day haha. As a Network Technician I really do appreciate the information you share and the amount I am able to learn on your channel.
One question I have for her is I beat myself all the time for not being a better programmer. Honestly, I really am not one at all lol. But I get frustrated because all the experience I have with python I'm still very much a beginner. So I'm wondering how good she is at programming how much she uses it and what she did to improve specifically related to hacking?
This was such a great talk! Not because of that mysterious hacking topic but because of overall mood and honesty. In any case, security is really intriguing topic for me.
Personally, I think Alissa is pure gold. Mature, experienced, upbeat and knows what she's talking about. There is no good reason she is not doing a you tube hacking-training like David. Great interview and very enjoyable to listen to.
I am a desktop engineer and my knowledge is scattered but after hearing the whole conversation I realized we all need to keep old cars & phone to protect ourselves from hackers😁😉
Another inspiring and mind opening video, especially in the part about the mindset or mentality that makes Alissa as someone who expert in many things (skills).
OMG! What an interview! I wanna soak up all her knowledge like a wet sponge! Definitely would love to see more in-depth stuff instead of the higher level talks (tho, those are great too). Alyssa mentioned bladeRF, I wanna know more about that, how to use it, should I get one, and everything else SDR! APIs + SDRs! thank you so much, David and Alyssa!
That sounds exactly like me ,if I don't know something no matter what it is I want to learn so that I am self sufficient and when I have a need I can do it myself.
Excellent advice on just firing up Wireshark and getting to learn exactly what is coming in and out, what kinda packets, MAC addresses, Broadcasts, all the different types of packets should not look random to you but actually little clues for you to track down, filter, parse and display for analysis. Networking Fundamentals. If you can't do this shit why are you messing with Zero-days
Alissa said: “know how something works.”
After my 20 years and hundreds of cases, I would say that statement is at the center of great advice.
Agreed. This is great advice.
This is aswome indeed
@@davidbombal can you do a tutorial on how to download kali linux
@@anisselkhoukhi4613 David had already made a tutorial ont that topic, do a little search on his channel
fueled by the same curiosity, i know i aint keeping this info in the end game of organic life, but theres sooooooooo many cool things to luuuurn
Five minutes in and I absolutely love her! “I’m trying to cram as many lifetimes as I can into my own lifetime” what an awesome quote! I LOVE that philosophy. LIVE A LIFE OF A THOUSAND LIVES.
lifetimes = $$$$
@@asusd6161 If she is starting a film production company, all that $$$$ is as good as gone. Very few make it past year getting into that game and even fewer ever turn a ROI. Netflix themselves are struggling badly and lose money on most of their productions. Indies - don't stand much of a chance.
2:58 her wife?
couple of things for newer devs
1. Never hard code API keys or tokens in your application. Use ENV variables
2. Sanitize form data
3. Test application before moving to production (test route logics, check middlewares, always use verified vetted packages etc...)
We are together
You are a strong woman indeed ,and that's what I thought first time started using API's if you want to make a successful startup you will use the API-s . They are like the lego cubes of today's biggest apps, take one out, and all falls down. then at the same moment as I write this i see your guest at the start of the vid hosting the show about AI that i could specify on a demand !,and i just asked myself how is possible this is mentioned now in 2022 and not before ,seriously guys/girls i mean whatever.
True
If any of you are employed and tasked to make an api and you dont follow #1 ask for a new job LOL
@@raygun2180 been there, lmao. fortunately the company always did a code review before pushing to production and our automatic tools flagged it.
this is best podcast video till the date on this channel, She spoke about reality.
We always neglect the basic fundamentals in IT while learning.
I'm at a loss for words David. You content is really pure gold. Would love to know more above ICS/SCADA hacking (how to learn about them), IoT and cars hacking
learn the protocols they use ,huge key ,as Alissia said learn how it works then tell it to do something it doesn't know how 😉
There's a lot courses on SCADA and ICS on the cisa platform, go check 'em out.. you'll even be given a certificate at the end of each course... Ya'll should really check em out.
I forgot the link to the courses actually, because the cisa's web platform is wide and deep but then you can just find your way around to the courses offered by the DHS on SCADA and ICS and the likes.
more scada!!!!!!!!
@@oladapomiracle2125 thanks for the info man🙏
@@oladapomiracle2125 when u find it send to me please
I've done multiple David's courses on Udemy and I loved him right away, very hands-on and meticulous
Alissa is by far, your Best guest. She is an absolute gem, what a character! 😊
I do relate to a lot of stuff that you guys have mentioned - I'm born in 87'
I feel very privileged to have grown in the best times to be a kid and best to be a teenager and a young adult when technology entered our lives, and be part of the whole process.
Since my kids, will experience a very different world in their youth, we're more connected, and yet we're more disconnected than ever - remote working, automation, AI, social media, I mean I could go on and on.
'87 kid here too XD
Alissa thank you so much for finishing that quote! I have been saying that for years! Even tried to make that statement during interviews and NO one knew that! I am twining with you right now!
I am finding that this community is really feeding my desire to learn new things. I have always liked figuring out how stuff works, and computers have always been the big black box but not anymore. I've been slowly learning more and more and the enthusiasm and encouragement this community provides has been really positive. The more I learn about cyber stuff, the more it will help me in my (non-cyber) career and is bringing back some interest and enthusiasm to the burnout I've had with it. I am learning ways to think about stuff that I might not have previously. And I like how there are so many different ways people have learned things in non linear ways. Keep it coming!
Alissa would be the perfect mentor for this and other courses in a live environment. She connects very quickly. Brilliant to listen to.
This is crazy information.
The more I watch David the more I see how powerful IT is omg.
Thanks David for the interview I'll buy the book the moment its released
Learnt a lot from her even in this short 1hr talk with David.
Her emphasis is simply digging into the fundamentals and mastering the main concepts of any technology you want to use to build cool solutions with.
That grit and quest for knowledge has deep-rooted as well as unseen benefits later on.
Will definitely check out her ‘hacking connected cars’ book as well as her ‘hacking APIs’ one coming out later this year.
yeah, i could say that without wasting an hour ... research research research .... click bait.
great maybe next you can learn to spell smh, how you gonna start a sentence with "learnt" wtf?
@@Dreadz530 You don’t seem bright but it’s ok.
It’s TH-cam anyways.
@@Dreadz530 "Learnt" is the UK standard spelling for the past tense of "learn". Investigate before you speak.
@@Dreadz530 don't be that guy dude grow up
Phenomenal interview. To all young people watching this in their 20's or younger. Find a passion and self educate. Just drive in. I found my passion young while still working a 9 to 5 and started my own business in cell phone network unlocking at 38 years old after knowing my business inside and out over the years as a hobby. Dive in, dedicate yourself and the money will follow.
I got a copy of Alissa's book, and I think it's great that she has basically given us a template for creating a corporate umbrella, for software startups. I believe that there are a lot of API Testers that don't really want to be in front of one of Alissa's video cameras. Alissa's Book along with David's and Network Chuck's videos look like they will make for a very interesting 2022 for me!
As Alissa implied, any control unit with an IP address, has an attack surface that you might be able to access.
Are you talking about the hacking car book, or a different one?
@@abetterfuture4787 I think Alissa is referring to something much broader in scope than just cars. Anything with an IP address that is using wireless for communications, probably has an attack surface that you can access. That's really is everything inside of the cloud, that you might consider to be the internet of things (IoT). Think of how an IoT clock (a TCU) talks wirelessly to an IoT controller (HU) sitting on your kitchen counter. And also how the HU talks back to home base across the internet.
this is how i am i take on new things as much as i can. in 2 years i took on soldering keyboard building flashing json files building keyboard firmware to coding Arduino and then python to 3d printing now to put it all together. now i building 3d printing firmware from source code. thank you guys for being here. there is so much more that i have done. now to aplie it to real life to be my own boss would be the goal now.
AMAZING INTERVIEW. Thank you David for bringing such good guests and asking them so good questions while giving the the freedom to expatiate with amazing topics❤❤
David, Alissa..hats off. EDUCATION in its purest form. I tell my kids...SCHOOLING stops when you finish school...EDUCATION is LIFELONG
I started out at 14 hacking radio to set up my own station. From there it was one thing or another. I think that type of drive to learn the misuse of tech isn’t in it for everyone. I really loved this video. A great guest!
Hello Mack I read would like to have a conversation with you
Im always skeptical of people that say they have been in Cybersecurity for 20+ years. But listening to Alissa speak, there are no doubts. What an impressive career!
Probably one of the few guests on this channel that truly is worthy of a tittle Hacker. Not only her knowledge is impressive but her enthusiasm toward learning new things as well.
Thank you David, your education levels and methods are amazing. There are many people who are experts on their topic, but then cant teach it. You are a master of both. Thank you. (Alissa, thank you for this super informative session)
I ran a BBS back in the 80s. I enjoyed this interview. She said things that made me reminisce. Thank you for sharing. It's true; without passion, you will burn out quickly. Everyone has to pay their dues, though. There is no fast path. "A jack of all trades is a master of none, but oftentimes better than a master of one.” I love it!
Thanks to you and Alissa for an amazing video. "Long Live Old School!"
I work for a Tech software company and always felt uneasy about API's and I can see now the feeling was correct.
Your video gave me the motivation and drive to make sure we are secure.
I appreciate that she is a lifetime learner. I am a Jack of All Trades too. I am also a techie and in film production with multiple companies and interests. Now...I'm learning about Cyber Security.
Thanks David for interviewing such valuable person on your channel i personally learned a lot from this video as a software engineering student will be looking forward more into API and stuff like that ❤️ you made my day thanks ❤️
Who will watch this video and not subscribe... the lady is wow!!! I just watched her, saw some similarities between us, and imagine where I'm at, compared to her level... I'm like nothing. Definitely your follower from today. Thanks David for bringing this.
David you’re doing a great job always. You have the best videos on TH-cam and thank you for changing our lives David..👍
I am a jack of all trade, social worker, esl teacher, data analyst, I want to learn as much as I can do. I love that knowledge is out there for us to grow!
OMG what a treasure trove of information. She is right we all want the "magic pill" give it to me now! When she talked about mind maps it was like "BOOM" that's how, now where to start? API's duh! Thank you David and Alissa, what an awesome video!
I’m halfway and I think this is the best interview I’ve ever encountered about how to learn anything
Best interview yet 👏 more books to add to my list. Have already followed you on everything, excellent job both of you.
A rare person. I connect with her on many levels and will definitely seek out her work. I consider myself a hardware hacker and follow people like you to at least become familiar with software/network hacking. My definition of hacking has always been “finding undocumented features and putting them to use” very similar to Alissa’s and that is what hooked me. Thank you for making this video I enjoyed every minute.
Legitimately every time I hear Alissa speak, I take something valuable away from it. What legends. Thanks David for the interview and thanks Alissa for sharing your thoughts!
one of the best interviews yet. its hard to compare them though, theyre all so great in their own way and offer different wisdoms. i love it
Thanks David and Alissa for the awesome and motivating interview.
All the time I read this quote, but this is the first I learn the complete quote: A JACK OF ALL TRADES IS A MASTER OF NONE, BUT OFTENTIMES BETTER THAN A MASTER OF ONE. I love learning everything, but when I read that quote, it's like should I stick to master only one. Thanks to you both.
I'm surprised that API hacking is apparently somehow exotic. I always assumed APIs are like the first to attack - like why would you try to enter a building through a window if you might be able to enter through the front door?
But backdoor sounds cooler
its not rly that uncommon.
Interesting
Thanks Alissa Knight, what you said on 13:48 "... but it's better than a master of one", this single segment of line is so so so inspiring for me that i can not describe in words.
If Alissa were 100 years old I would still be amazed at how much she has done in her life so far. What an inspiring person.
Dig that you promote deeper understanding. I'm an analog generation guy that somehow became a pharmacist. Now I'm an engineer with a deeper interest in computers and why we get hacked. You can always continue to learn... never stay within the box
22:23 Yay Alissa, pcap analysis - Packet Monkey! Love it! Completely agree that analyzing protocols really helps to understand how things work. Great content!
Yes it is the defenition of protocol.
1:37 oh my God I'm from Vancouver lived in Seattle grew up in the Pacific Northwest born in 82 but I still get carded even for lottery tickets and you only have to be 18 for them this is crazy I hope you show her TH-cam and everything below so I'm definitely going to try and connect
Alyssa all about your book before this episode even over! I remember the sound of dial up. I remember the Seattle grunge scene. I remember growing up between Lower Mainland Vancouver in the Muddy Banks of the wishkah anyone from the Pacific Northwest will know exactly what I'm talking about:-) add most amazing of all this talk that you're giving about what you're doing is this is exactly what I've been seeking out to start up an all round penetration tester where no day is the same as the one before
Awesome conversation! Love Alissa’s energy, thanks for fueling motivation 👍👍
Glad you enjoyed it! Alissa is amazing!
Interested and her book already ordered!
Alissa Knight is from the old school of hacking!! She is the definition of the GOAT!! The mindset of learning is the key take away from this video! Thank you Alissa and David!!
Thank you David, this is inspiring, awesome and futuristic.
So happy to hear that Sam! Glad you enjoyed the video.
This is the best so far. Love it. Thank you for summing-up 20+ years of insights in 1 hour.
Another amazing 1 hour + video! Can’t wait to watch this!
Thank you! Hope you enjoy the video!
@@davidbombal just learning APIs with JS so this is interesting to hear and learn about.
This interview is so dope! Thank you so much for uploading this. It’s always refreshing (as a woman) to hear from other women in the industry and to make a correlation somewhere with their journey to where they are now. I can’t wait to read her books. She makes some GREAT points about the certs… and helped me put my finger on things I was thinking all along. Brilliant! ❤
I just loved this interview! Alisa is phenomenal. Thank you so much. The passion and desire I have for learning was so incredibly important to my long career in cybersecurity. I retired 5 years ago but still have that passion to learn and it's why I follow your channel and other similar ones such as Alisa's. I totally agree with her that the passion and desire to learn is the absolute key to success in the field. I also have believed for some time now that, as she put it, the future battlefront for cybersecurity is at the API level.
Is there even a point to retire? I do not think I would do that ever! Once you have years of experience there is no point to retire. My company tries to keep engineers even on part time so they can teach younger staff on the field.
I was a automotive technician for a European and exotic car dealership and we had a recall on one of the manufacturers we carried due to a security problem and the car was able to have certain controls taken over and we honestly weren't told very much besides how to perform the recall which was a control module swap and reflash but ive been so interested in this since...
David, great idea to bring Alissa to the show.
Alissa, congrats girl! I'm also old school and believe on learning the core of things in order to use it better. I decided to stop teaching telecommunications because young students want magic pills. It's great people like you are touching their heart and telling that there is no short cut to perfection. Already signed to you YT channel.
Thank You David for introducing us to Alissa! I could listen to Alissa all day and look forward to following her on youtube.
A truly fantastic interview!! Alissa's way of thinking is brilliant! ♥️♥️
I'm Sysadmin network guy.. Been doing it for decades.. No official training.. Ran govt teams before.. So many people where I live memorize what the teacher tells them but can't even secure a basic network .. Drives me bonkers.. Get some experience 😂
Loved this. Bought her book. Will read. She is very intelligent and I learned a lot
The only thing I learned from this video is she has been doing this for 22 years
😂
😅 how far did you skip to the end?
Api long road trips what was she saying
Then you weren’t listening.
He’s right this was more of a life story than anything
I could listen to Alissa talk about hacking all day, very easy to get where she is coming from..
The first 49 minutes is Alissa bragging and ranting. She finally talks tech after that.
I didnt know that about “jack of all trades”!
Just like “Great minds think alike” & people forgot “fools seldom differ”!
I really enjoyed this interview & how excited she became over so much about hacking!
Pukka!
Stafe Marc xxx
// MENU //
00:00 ▶ Coming up
00:44 ▶ Intro
00:53 ▶ Alissa Knight introduction and background
02:36 ▶ Published author and filmmaker
03:30 ▶ Alissa Knight TH-cam channel
05:02 ▶ Book on API hacking
06:05 ▶ The definition of hacking
10:25 ▶ How to approach hacking
14:10 ▶ The importance of learning
16:07 ▶ How to start hacking APIs
22:54 ▶ "The Desire"
25:35 ▶ Recommended certifications
28:35 ▶ Understanding Networking fundamentals
30:04 ▶ Do you have to be a programmer to hack?
33:09 ▶ Mastering tools
34:33 ▶ Hacking APIs
38:43 ▶ Shift left security, shield right
40:15 ▶ Bank app developed by marketing team
42:51 ▶ Smart phone takeover
45:10 ▶ How to learn to hack APIs
48:11 ▶ Process on how to hack APIs
55:05 ▶ Implementing authorization and authentication
56:43 ▶ APIs in nuclear plant systems
58:52 ▶ Wifi pineapple
01:01:23 ▶ Securing APIs in cars
01:03:18 ▶ "Exciting times"
01:05:45 ▶ Conclusion
Nahamsec Interview: th-cam.com/video/Y2Y4Sk0PswU/w-d-xo.html
// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: twitter.com/davidbombal
Instagram: instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
TH-cam: th-cam.com/users/davidbombal
// Alissa's SOCIAL //
Twitter: twitter.com/alissaknight
TH-cam: th-cam.com/users/alissaknight
Instagram: instagram.com/alissaknight/
LinkedIn: www.linkedin.com/in/alissaknight/
Website: www.alissaknight.com/
Hacking Bank APIs: davidbombal.wiki/hackingbankapis
// Katie Paxton-Fear //
TH-cam: th-cam.com/users/InsiderPhD
Twitter: twitter.com/insiderphd
// David Sopas //
Twitter: twitter.com/dsopas
Github API mindmap: github.com/dsopas/MindAPI
// Buy Hak5 Pineapple here //
Buy Hak5: davidbombal.wiki/gethak5
// Hyperfocus daily task sheet //
Alissa Knight's Daily Task Sheet: davidbombal.wiki/dailytasks
// BOOKS //
Hacking Connected Cars - Alissa Knight: amzn.to/3Ke00GO
Hyper Focus - Chris Bailey: amzn.to/3vAocxO
Self Journal by BestSelf: amzn.to/3ks1BhK
Hacking APIs - Corey Ball: amzn.to/37PUwoI
The Official (ISC)2 CISSP CBK Reference: amzn.to/3vxzjJ2
// MY STUFF //
www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
No methods only show😁😁😁😁
Oof bro... steer this gal better
Thank you so much Alissa for such a wonderful walkthrough on how to get started on API hacking 👍
And the best thing u said "If You Stay Still, You're Dead" ❤ Keeping learning each day as a student. Can't agree more!!
The moment she said "gender" I switched off ... what the F does your gender have to do with anything?
when prejudices get in the way of your goals.
Yep same for me. As soon as I hear non-binary and disenfranchised I shut it off. Keep your political ideology out of cyber.
When wokism gets in the way of facts.
It was a non-threatening comment.
There's no need to be fragile.
"The quieter you become, the more you are able to hear." Where as she know Who she is, knows where she wants to go, you are the one thats lost your way if petty genrer hints rubs you like that.
I am listening r to this because the level of security I work around my apis is insane ...that is application level....class level..then to object level kind ..so I am watching this
She literally told nothing information. Just was here to brag about herself. Deserved a dislike
Had to pause at 14min to say thank you and Alissa was the perfect guest for you to have had on and right now is exactly when I needed to hear this discussion, much appreciative for the both of you.
This video should be required in schools. Thank you Alissa and David!
I have been studying cyber for almost 20 years, since I was 9y/o and I do totally agree with her. Nowadays people are just to immediatist. I see that in the whole world. I am an instructor at a cyber security course and a lot of students just come in and just ask for the answers without even trying to think first it is annoying as hell. Also, lovely to see women who are a long time on the field :)
Im studying comptia security cert, do you think that’ll help me land a cyber job?
Shift left security, shield right THIS A BIG LESSON FOR ME
THANK Alissa's
So crazy everything she says word for word I tell my friends about getting into hacking. Made me feel good about myself
Wow very informative, am from Nigeria David Your TH-cam channel is Number in a million, and Alissa is a Genius. David you deserve 6 Million subscribers your content is as precious as a Diamond.
One of my favorite guest, had to pause watching while i work because i couldn't focus enough on the vid.
Truly one of the best interviews I have ever watched. You are both very inspirational.
wow!!! this lady is knowledgeable!! what an insight!!!! I love this interview! A lot to take from this. Thank you David, Thank you Alissa!
Iv litterally spent 2 months learning python and don't like it much but spent a few days looking at TH-cam videos on hacking and got hooked. I just wish my adhd brain was better at finding good paths I can stick to rather than learing so many different software paths... I just want to feel confident in knowing my time is going to something I can continue to use and enjoy.
I'm almost 40 and an aspiring n00b, I regret not getting into this when I was younger
...what a cool freakin story you both have! 🙏🏼💯
Thanks David, your instruction is awesome. I say this as someone who is regularly frustrated by teachers who miss the basics of where exactly to click
Good advice. The more you learn, the more you know, the more you can connect the dots in creative new ways.
One of the biggest problem we're facing today is that ''user experience'' tend to be at the #1 spot and security lays at the #2... They don't want to be secure if it changes the users habit too much. I see it everyday of the week. Companies don't want to talk to their own security team because they are ''complaining'' all the time and they mess too much with the ''not so well thought deadline'' that they wrote on paper. Money is more important than security and it's a well established mentality.
Thanks for the content as always David :)
PURE GOLD ! I NEVER FELT THAT MOTIVATED TO TURN ON MY COMPUTER AND JUST LEARN. 💻🔥
Hi David, great work! Cooperating with experienced, professionals and masters in technology systems like Alissa makes this channel more valuable and educative. I'm not even knowing about hacking but listening to your sharing makes me so grateful to know about how is it essential to protect our data. keep the good work!
You're welcome! And thank you 😀
David your interviews are amazing lectures!. I learn so much, Thank you 😊.
Thank you for featuring Alissa. I don't have the technical background and more on the operations side but I've always have concerns in API security being that its open source and it is the "connector" of all apps and software in the network. Definitely subscribing to her YTC.
Incredible interview! I didn't know Alissa and I love her already. Super smart woman.
Sunday is my binge Bombal day haha. As a Network Technician I really do appreciate the information you share and the amount I am able to learn on your channel.
One question I have for her is I beat myself all the time for not being a better programmer. Honestly, I really am not one at all lol. But I get frustrated because all the experience I have with python I'm still very much a beginner. So I'm wondering how good she is at programming how much she uses it and what she did to improve specifically related to hacking?
This was such a great talk! Not because of that mysterious hacking topic but because of overall mood and honesty. In any case, security is really intriguing topic for me.
This woman is a monster!!! An Enciclopedia of knowledge.
When i grow up, i want to be like her.😂😂😂😂😂😂😂😂
I just subscribed to her chanel🎉🎉❤
She is so enthusiastic, i love her!
Personally, I think Alissa is pure gold. Mature, experienced, upbeat and knows what she's talking about. There is no good reason she is not doing a you tube hacking-training like David. Great interview and very enjoyable to listen to.
I am a desktop engineer and my knowledge is scattered but after hearing the whole conversation I realized we all need to keep old cars & phone to protect ourselves from hackers😁😉
i never heard of her before and i fell in love with her story haha this woman is amazing
Loved the technical stuff at the end, made alot of notes on what to study and how they work together.
Goodness!! I'm on a role watching all these interviews and love this!! Thank you, thank you...THANK YOU!!
I love her definition.
That's my thought: "hmm, what would happen if I did this?"
Another inspiring and mind opening video, especially in the part about the mindset or mentality that makes Alissa as someone who expert in many things (skills).
OMG! What an interview! I wanna soak up all her knowledge like a wet sponge! Definitely would love to see more in-depth stuff instead of the higher level talks (tho, those are great too).
Alyssa mentioned bladeRF, I wanna know more about that, how to use it, should I get one, and everything else SDR! APIs + SDRs!
thank you so much, David and Alyssa!
I'm new to your channel and thus far have loved your presenters and their history. Your channel has sparked my interest in Cyber. Thank you
That sounds exactly like me ,if I don't know something no matter what it is I want to learn so that I am self sufficient and when I have a need I can do it myself.
Excellent advice on just firing up Wireshark and getting to learn exactly what is coming in and out, what kinda packets, MAC addresses, Broadcasts, all the different types of packets should not look random to you but actually little clues for you to track down, filter, parse and display for analysis. Networking Fundamentals. If you can't do this shit why are you messing with Zero-days
What a fantastic video, David and Alissa. I purchased your book Alissa, and I'm excited to learn more.
I love your smile Alissa. Doing a great job Dave
I would like to thank you for opening my eyes to the job opportunities , and a special thank you to Allissa knight for decoding the matrix🙌🙌
this was an exciting Video...Alissa is a great human who share her knowledge openly, helpful and inspiring