Inside Cyber Minds S3E13 — Ted Harrington on application security, penetration testing, IoT hacking, and the hacker mindset. Ted is Executive Partner at Independent Security Evaluators (ISE) — first to hack the iPhone — #1 bestselling author of Hackable and Inner Hacker, and founder of IoT Village. Recorded onsite at DEF CON. Free Cyber Security Career Guide — the roles, skills, certs, and shortest route into cybersecurity (bonus: unlocks a free LufSec lesson): https://www.lufsec.com/products/digital_downloads/cyber-security-career-guide?utm_source=youtube&utm_medium=onramp&utm_campaign=career-guide-funnel&utm_content=s3e13 ️ Build hands-on application security and penetration testing skills with LufSec courses: https://www.lufsec.com/courses/?utm_source=youtube&utm_medium=onramp&utm_campaign=career-guide-funnel&utm_content=s3e13-course ------------------------------------------------------- Ted's team at ISE was first to hack the iPhone — and has since hacked cars, medical devices, and password managers to make them safer. In this episode we cover what real penetration testing looks like (and why most "pen tests" are just vulnerability scans), how to do application security right, what a decade of running IoT Village at DEF CON reveals about IoT security, how anyone can build the hacker mindset, and what happens to appsec when AI writes the code. Topics Covered Penetration testing vs. vulnerability scanning Application security done right (the Hackable method) First to hack the iPhone: the ISE story IoT security: lessons from a decade of IoT Village The Inner Hacker: thinking like an attacker AI-generated code and the future of appsec People can connect with Ted on LinkedIn: https://www.linkedin.com/in/securityted/ ISE: https://www.ise.io/ Hackable: https://www.hackablebook.com/ Inner Hacker: A New Way of Thinking — https://www.amazon.com/Inner-Hacker-New-Way-Thinking/dp/B0FQ7GTY1R Inside Cyber Minds is a cybersecurity podcast by LufSec — unscripted conversations with hackers, CISOs, researchers, founders, and security leaders on mindset, emerging threats, and the human side of cybersecurity. ▶️ Subscribe on YouTube: https://youtube.com/@Lufsec ️ Spotify: https://open.spotify.com/show/6hWg94SxRjHUMCMXoKutlc Apple Podcasts: https://podcasts.apple.com/us/podcast/inside-cyber-minds/id1851011640 Amazon Music: https://music.amazon.com/podcasts/87069409-9772-4c83-821a-d5607e52be51/inside-cyber-minds LinkedIn: https://www.linkedin.com/company/lufsec/ Stop worrying about artificial intelligence as a menace and start viewing it as a neutral instrument for your goals. This talk explains why the outcome of using new technology depends on the person wielding it. Captured at IoT Village, this presentation addresses the common anxiety surrounding automated systems. Just as a kitchen knife is neither inherently evil nor virtuous, the impact of software depends entirely on the operator. We break down the responsibility of the developer, moving the conversation away from abstract fear and toward practical, ethical usage. If you build or manage digital products, this perspective provides a framework for evaluating your daily tech stack. Understanding how we apply these capabilities determines our future success. By focusing on the human intent behind the code, we can better navigate the landscape of modern artificial intelligence without getting lost in the hype. This session is designed for anyone looking to ground their workflow in reality rather than speculation. Subscribe for weekly tech strategy breakdowns, and comment below on how you are currently using artificial intelligence in your own projects. 0:00 The Hacker Mindset and Ethical Security 0:53 From Career Transition to Security Leadership 3:59 Debunking the Security Myth 7:25 The Dual Reality of IoT Security 12:50 Mastering Threat Modeling for New Devices #Cybersecurity #ApplicationSecurity #PenetrationTesting #IoTSecurity #EthicalHacking #AppSec #DEFCON #InfoSec #InsideCyberMinds #LufSec