CISO at @sardineai. Treasurer of @OWASP Board of Directors. (he/him) qatta' mIghtaHghach.
Phoenix, AZ
Joined July 2009
- Tweets 8,305
- Following 139
- Followers 776
- Likes 17,402
If you are curious what the @owasp Board is up to.
Hey everyone, I'll be posting OWASP related video updates (2-4 min each) on a regular basis. Here's today's clip it mainly talks about three things youtube.com/es_vfBD9xfY .../
Wow, Oracle is “marketing capabilities to increase the combat power of Chinese military”.
Taking a page from IBM’s playbook.
theintercept.com/2021/02/18/…
Bil Corry retweeted
But Macs don't get malware. Yes, you should run AV on your Macs. arstechnica.com/information-…
9
91
7
249
“This proves that SHA-1 signatures now offer virtually no security in practice.”
usenix.org/conference/usenix…
3
Bil Corry retweeted
Found secret tokens but not sure about it
Solution: github.com/streaak/keyhacks
7
163
4
524
Um, @Xfinity, I turned off your wifi a couple of months ago but glad it's providing reliable coverage. 🤔
2
Wow, @vvanedwards really delivers sage advice on landing that next job over a video call, but it equally helps with any video interaction.
I've included a small clip, see the rest here:
linkedin.com/video/live/urn:…
2
0
I weep for our planet.
1
Shocking court ruling of the week:
HIPAA encryption rule requires a "mechanism" to encrypt data, but does not actually obligate to encrypt data!
consumerprivacyworld.com/202…
1
1
Public packages get priority over private packages with the same name. You can see where this is going...
Major companies including Microsoft, Apple, PayPal, Shopify, Netflix, Yelp, Tesla, and Uber compromised in a novel software supply chain attack.
Malware was placed in open source repositories, which then got distributed downstream into the applications:
bleepingcomputer.com/news/se…
1
I think the bigger equitability issue (beyond the lack of smartphones) is the lack of the vaccine. If you are required to be vaccinated to participate in society yet cannot get (or afford it), what then? biometricupdate.com/202102/d…
1
Yikes, statistic of the day (from @PSACertified):
Only 47% of companies making IoT products (that responded to this survey) do threat modeling; for large companies it goes up to 63% and for small companies drops to 33%.
report.psacertified.org/
1
1
Bil Corry retweeted
Ever wondered how to make a career out of your hobby? Don't miss our March Lightning Conference speaker, STÖK as he shares the secrets to making a career of Bug Bounties. Registration is free. Reserve your seat today!
ow.ly/nTa150DrNgb
5
9
After a data breach, your company may embroiled in a class action lawsuit. The Eleventh Circuit just ruled that "speculative fears of hypothetical future identity theft were insufficient to confer standing" and must include allegations of actual misuse.
consumerprivacyworld.com/202…
3
1