Summary

Talkback is a smart infosec resource aggregator, designed to help security enthusiasts, practitioners and researchers be more productive.

The system works by continuously monitoring several resource mediums for infosec news and publications, parses all content, classifies and hydrates the data-set, then presents this via a simple UI.

Key Features

Curators List

A key feature of Talkback is highlighting resources that have been featured by a handful of infosec curators. This list of curators has been specially chosen due to their quality and experience, and we recommend following and supporting them.

The curators list is as follows:

FAQ

We built Talkback to help improve productivity for technical infosec enthusiasts/practitioners. We wanted it to be a fully automated living infosec library that can support many use-cases.

Search works by indexing resource content in Elasticsearch, including PDFs and other document types. The resource <title> and <description> meta tags are also indexed. Advanced search queries can be done using the query string syntax.

The resource ranking works by factoring in several attributes associated with a resource. This includes if a resource has been featured by a curator, the popularity of cross-referenced resources, and also its popularity on social media and news sites.

A few new features in our backlog include:
  • Breakdowns by CVE data, including CWE and CPE
  • Improvements for the resource type classifier and ranking
  • Improvements for content parsing
  • Mastodon integration
  • Basic web API to extract details and trends

Yes, there is a GraphQL API available. Start here.

Not at the moment. We may consider open sourcing the system or at least specific components in the future.

The resource type classifier is in its infancy with some known limitations that we will incrementally improve.

Talkback is a rewrite of a tool from 2010-2012 by @volvent. The original version focused on leveraging social media to identify research and trends of vulnerabilities and also included a prototype for browsing trending infosec resources - a presentation on this can be found here. This is a new version by @lanjelot and @volvent with a revamped design to focus on technical resources and news.

Please email talkback at elttam.com with the details.