Last night, we hosted Dr. Kelsey Fulton of the Colorado School of Mines. They talked about their research into the why and the how that software developers introduce security vulnerabilities into their code, and some potential solutions for it. We had some great conversations about the attitudes in software development spaces and how we might be able to change that for the future. Please reach out to Dr. Fulton if you are interested in working with them on further research!</description></item><item><title>Meeting 10/11/23</title><link>https://osusec.org/blog/meeting-10-11-23/</link><pubDate>Thu, 12 Oct 2023 13:41:15 -0700</pubDate><guid>https://osusec.org/blog/meeting-10-11-23/</guid><description>Howdy hackers!

Last night, we had the fantastic Jonathan Keller give a talk about how he used his pwn skills in order to get a world record in a Tool Assisted Speedrun of Super Metroid! Thank you everyone who showed up :) He discussed the game&amp;rsquo;s internal mechanics, how the exploit works, and his experience developing the real-world exploit as a cybersecurity student and as someone who enjoys retro games.</description></item><item><title>Meeting 10/04/23</title><link>https://osusec.org/blog/meeting-10-04-23/</link><pubDate>Thu, 05 Oct 2023 14:44:22 -0700</pubDate><guid>https://osusec.org/blog/meeting-10-04-23/</guid><description>Howdy hackers!

Thanks for showing up last night, and staying flexible with us! I know we weren&amp;rsquo;t able to host the meeting we wanted at the last minute, but hopefully you got to enjoy some memes, learn about the club, and possibly pick a lock for the first time! We hope to see you again in more meetings throughout the term. Please feel free to reach out to any officer if you have questions or need help!</description></item><item><title>WWT Blue Team CyberRange</title><link>https://osusec.org/blog/wwt-blue-team/</link><pubDate>Mon, 02 Oct 2023 17:24:37 -0700</pubDate><guid>https://osusec.org/blog/wwt-blue-team/</guid><description>Last Thursday, OSUSEC assembled a team of 4 students to compete in WWT&amp;rsquo;s fantastic blue team CyberRange! We had a ton of fun and are very proud to announce that we placed 3rd, going up against a mixture of teams including those from federal agencies &amp;amp; Fortune 500 companies! We played from 3pm to 3am the next morning, all in one shot. The crash afterwards was not pleasant but it was still worth it &amp;ndash; incident response and cyber competitions take on a wilder and much more creative tone when it&amp;rsquo;s an odd hour in the morning.</description></item><item><title>NCCDC 2023</title><link>https://osusec.org/blog/nccdc-2023/</link><pubDate>Thu, 11 May 2023 00:00:00 -0700</pubDate><guid>https://osusec.org/blog/nccdc-2023/</guid><description>The last weekend of April, OSUSEC’s Cyber Defense team competed in NCCDC, the National Collegiate Cyber Defense Competition. The competition required us to secure and administer a handful of networks full of virtual machines hosting common business services, as well as continuously respond to IT request tickets and deliver professional reports to supervisors. Students are tested not only on their cybersecurity skills, but also on their time management and interpersonal skills.</description></item><item><title>2023-2024 OSUSEC Officers Selected</title><link>https://osusec.org/blog/2023-2024-osusec-officers-selected/</link><pubDate>Mon, 24 Apr 2023 00:00:00 -0700</pubDate><guid>https://osusec.org/blog/2023-2024-osusec-officers-selected/</guid><description>This year’s elections were intense; every candidate was subjected to memes, music, and whiteboard art that led to a lot of laughs and a lot of great people elected. Without further adieu, here are your officers for the 2023-2024 academic year:

Last night, we hosted Dr. Kelsey Fulton of the Colorado School of Mines. They talked about their research into the why and the how that software developers introduce security vulnerabilities into their code, and some potential solutions for it. We had some great conversations about the attitudes in software development spaces and how we might be able to change that for the future. Please reach out to Dr. Fulton if you are interested in working with them on further research!</description></item><item><title>Meeting 10/11/23</title><link>https://osusec.org/blog/meeting-10-11-23/</link><pubDate>Thu, 12 Oct 2023 13:41:15 -0700</pubDate><guid>https://osusec.org/blog/meeting-10-11-23/</guid><description>Howdy hackers!

Last night, we had the fantastic Jonathan Keller give a talk about how he used his pwn skills in order to get a world record in a Tool Assisted Speedrun of Super Metroid! Thank you everyone who showed up :) He discussed the game&amp;rsquo;s internal mechanics, how the exploit works, and his experience developing the real-world exploit as a cybersecurity student and as someone who enjoys retro games.</description></item><item><title>Meeting 10/04/23</title><link>https://osusec.org/blog/meeting-10-04-23/</link><pubDate>Thu, 05 Oct 2023 14:44:22 -0700</pubDate><guid>https://osusec.org/blog/meeting-10-04-23/</guid><description>Howdy hackers!

Thanks for showing up last night, and staying flexible with us! I know we weren&amp;rsquo;t able to host the meeting we wanted at the last minute, but hopefully you got to enjoy some memes, learn about the club, and possibly pick a lock for the first time! We hope to see you again in more meetings throughout the term. Please feel free to reach out to any officer if you have questions or need help!</description></item><item><title>Meeting Notes 11/09</title><link>https://osusec.org/blog/meeting-notes-11-09/</link><pubDate>Wed, 09 Nov 2022 00:00:00 -0700</pubDate><guid>https://osusec.org/blog/meeting-notes-11-09/</guid><description>Howdy hackers! Last night, I covered cybersecurity in software development. I talked about how you can incorporate security into each stage of the Software Development Lifecycle, some examples of how that has gone wrong in real life software projects, and the different mitigations that have come about in an effort to control memory corruption attacks (an example of improper input handling).