CISO at @sardineai. Treasurer of @OWASP Board of Directors. (he/him) qatta' mIghtaHghach.
Phoenix, AZ
Joined July 2009
- Tweets 8,305
- Following 139
- Followers 776
- Likes 17,402
Bil Corry retweeted
amazon.com/dp/B0BN6VVCHB?ref…
This is my dad’s newly published book and here is the story behind it why I am asking you to read it.
3
5
1
17
Bil Corry retweeted
#Google has released an update for the #Chrome browser to patch a new, actively exploited zero-day #vulnerability (CVE-2022-4135) that resides in the GPU component.
Read: thehackernews.com/2022/11/up…
#infosec #cybersecurity #hacking
3
57
4
87
Very moving article about the Club Q hero.
nytimes.com/2022/11/21/us/co…
The “software company” is @discord and one of the findings is they didn’t have a data retention policy.
"@CNIL fines software company 800K euros for GDPR violations" (via @DailyDashboard) ow.ly/iFxr50LHoPQ
Twitter is sliding off the rails. This ad for a windshield snow guard is a curious choice for someone that lives in PHOENIX.
1
Crushing it!
Getting ready for my keynote at #GlobalAppSec #OWASP tomorrow, turning nervousness into excitement 💪 looking forward to it!
1
Bil Corry retweeted
Does anyone know a good "SAML as a service" for IDP? I know some services/libraries for SP side but implementing SAML as IDP seems less documented and tedious. want to implement "login with our service's account" for a documentation site hosted by a third party for instance.
2
1
The Payson Police Department (AZ): "[do not] use methamphetamine or you too may find yourself illegally purchasing a wild owl, for $100 dollars, in the middle of the night, from strangers, at a local gas station."
m.facebook.com/story.php?sto…
Bil Corry retweeted
From the TLS Newsletter: Szilárd Pfeiffer From Balasys has released information about DoS attacks based on Diffie-Hellman key exchanges, which he calls the DHEat attack. Balasys also released proof-of-concept code for the attack.
buff.ly/3Up3zzI
buff.ly/3Gh8P1A
4
3
Bil Corry retweeted
More cursed knowledge: at Mozilla, the perf team discovered that it is, in double-digit percentage of cases, faster to re-fetch data over the network from the original web server than to retrieve it from local disk cache.
32
374
48
2,220
I wish @Dropbox offered a way to set a default expiration for links that share content.
I’m obsessive about always setting an expiration, but it looks like others are not as diligent.
Btw Dropbox, the UI overhaul for links is now confusing. Try again.
abajournal.com/news/article/…
Vonage's 3-step strategy to retaining customers:
1. Make it near impossible to cancel
2. Charge absurd fees if a customer overcomes #1
3. Keep charging customers if they do manage to cancel
FTC action against Vonage results in $100 million to customers trapped by illegal dark patterns and junk fees when trying to cancel service. Vonage will be required to provide a simple way to cancel: bit.ly/3T1235y
Step 1: Learn how to fraudulently transfer wealth.
Step 2: Find someone wealthy.
Step 3: Profit!
For step 1, the @ABAesq has a new book out called "The Fraudulent Transfer of Wealth: Unwound and Explained"
americanbar.org/products/inv…
Pro-tip: When hiding weapons, drugs, $240k in cash, and $700k in gold and silver, just pay for your electricity. Stealing it will attract unwanted attention.
fox10phoenix.com/news/mcso-f…
3
Latest example of inane security questionnaires with poorly worded questions.
Will I alert customers when a material weakness is found? Sure if it impacts you, but absent that, no.
Which answer would you choose, yes or no? No is wrong, btw, per the questionnaire.
2
Bil Corry retweeted
1. @FTC has taken action against @Drizly (a subsidiary of @Uber) and its CEO James Cory Rellas for security failures that led to a data breach exposing the personal information of around 2.5 million consumers.
ftc.gov/news-events/news/pre…
7
55
11
103
Fortunately, chatting with @lyft customer service fixed it, but that was a very poor experience.
1
