CISO at @sardineai. Treasurer of @OWASP Board of Directors. (he/him) qatta' mIghtaHghach.
Phoenix, AZ
Joined July 2009
- Tweets 8,305
- Following 139
- Followers 776
- Likes 17,402
Yes, the problem is definitely the research tool and not the poor design of contactless credit card payments 🙄
BTW, @Visa says it isn’t feasible to skim cards this way (see 🧵), maybe they can educate @Amazon.
gizmodo.com/amazon-bans-flip…
1
3
Looking forward to receiving my 16 cents from the Apple class action settlement. And in case you're wondering, the attorneys walked away with $3.7 million and another $2.4 million was set aside to pay for the cost of sending me 16 cents.
1
1
3
Great way to recruit AppSec talent!
Are you looking to hire new talent? Consider participating in one or both of the #OWASP virtual Career Fairs. September 28 6am-6pm EDT, and October 11 6am-6pm SGT. owasp.org/events/career_fair… #jobfair #careerfair #hiring #appsec #developers #devsecops #security #cybersecurity #jobs
DNA has unlocked an interesting family secret of Beethoven. Fascinating read, this link will let you read the NYT article for free.
nytimes.com/2023/03/22/healt…
I live next to a park. I guess Google has my address as the park because they now want me to advertise my “business”.
I’m tempted to lean into it…
I think the hardest thing about having your arm ripped off by a zebra in Ohio is that no one is going to believe you.
"Why is your arm jacked?"
"A zebra ripped it off"
"Ok, so don't tell me"
Even the police dispatcher asked twice.
insider.com/ohio-police-shot…
Tools used for Hollywood special effects now illegal.
As AI tools become more advanced & accessible, fraudsters can use them to make realistic but fake content. Making or selling a tool that is effectively designed to deceive can violate the FTC Act—even if that’s not the intended or sole purpose of the tool. ftc.gov/business-guidance/bl…
1
In case you want to read how Ronald Regan's circle kept Americans held hostage to win the US presidency.
("no paywall" link to NYT article)
nytimes.com/2023/03/18/us/po…
Safety by design:
Early refrigerants for "ice boxes" were highly toxic and/or flammable, and caused the deaths of many.
Thomas Midgley Jr. was tasked with finding a safer alternative. He invented Freon.
The entire NYT piece is an interesting read:
nytimes.com/2023/03/15/magaz…
It's funny how old calendar reminders live on. This one comes from my middle school calendar (which was paper-based), and in college was copied into an electronic calendar that was further copied to the calendar I use today. That's how scared I was of getting pinched!
2
I'm taking a fraud class and this advice is in our textbook on how to minimize employee fraud, which can be summarized as: don't be an asshat to your employees.
Source: Corporate Fraud Handbook: Prevention and Detection by Joseph T. Wells
1
1
1
4
It was great seeing @Trollgodfather again and meeting @StevenSCrompton.
They signed “Monsterary of Zimrala” for me and taught me the “troll handshake”.
BTW, if you buy the book, the Deathhead Spider was created by me.
drivethrurpg.com/m/product/4…
1
2
What started life on earth?
“Nickelback”
Gotta love scientists with a sense of humor.
phys.org/news/2023-03-scient…
I've been a long-time @hulu subscriber and they have a special gift for us. Except I waited too long to claim it (45 minutes from when the email came) and all the gifts are gone.
Seems like they could have just mailed these out and delighted us, versus the hunger games race.
1
Short thread on how @sardine and @magic_labs have greatly simplified buying NFT collectibles.
1/ The hardest part of digital collectibles (NFTs) today is UX.
You can purchase a Pokemon card online in seconds but a digital collectible requires perseverance and technical know-how.
How can my mom or grandpa purchase a digital collectible without needing a crypto PhD?
1
4
Bil Corry retweeted
The Catalan DPA @apdcat released yesterday at #4YFN #MWC23 a Developer's Guide for Privacy by Design and Privacy by Default, which is also available in English! #PbD #DPbD
Link to the Guide: apdcat.gencat.cat/web/.conte…
apdcat.gencat.cat/en/sala_de…
10
18
Bil Corry retweeted
☘️OWASP, if you missed Global AppSec Dublin or could not attend all of the talks you wished to, there is no need to worry. Dublin videos are published on the event website dublin.globalappsec.org/
12
1
28
"Let's build a Chrome extension that steals everything"
"Grinch-plundering-Whoville levels of data theft"
Excellent write up of Chrome extensions and their ability to steal your data.
mattfrisbie.substack.com/p/s…
When your 2-year-old is abducted during a car jacking, and you’re pregnant and run over trying to save them, know that @VW will have your back. Just be sure to pay the Car-Net fee first. 🙄
kansascity.com/news/nation-w…
1
1