CISO at @sardineai. Treasurer of @OWASP Board of Directors. (he/him) qatta' mIghtaHghach.
Phoenix, AZ
Joined July 2009
- Tweets 8,305
- Following 139
- Followers 776
- Likes 17,402
RT @garethheyes: The root cause of most XSS holes in PHP http://bit.ly/bhBuqu 894,000 tutorials with bad advice.
2
RT @jeremiahg: but if you are really l33t, you could do this by ear alone. ;) "The sounds of typing can be decoded" - http://bit.ly/aDhGmo
RT @chiefmonkey: 1024-bit RSA encryption hacked by starving CPU of electricity: http://is.gd/br5Qz
"How much wood would a woodchuck chuck if a woodchuck could chuck wood?" <- password reset question at https://www.virginamerica.com/
RT @tferriss: Public Speaking – How I Prepare Every Time: http://ping.fm/DrWy8 <- great tips!
RT @tferriss: How to raise kids to be entrepreneurs - from former $100M+ COO: http://ping.fm/svM6x
I'm being chastised by my HP printer for not using the "On" button to shut it down before I unplugged it.
RT @unmaskparasites: BBEdit seems to have a bug(?) that may hide certain lines of code (in this case, malicious code) http://bit.ly/bR6OLT
RT @hypatiadotca: RT @gvwilson Twitter (n): a web-based tool to help you see which of your friends are procrastinating.
RSA 2010 videos available now https://365.rsaconference.com/community/connect/rsa-conference-usa-2010?view=video
RT @jeremiahg: RT "Stroke triggered XSS & StrokeJacking" sounds pornographic, but very cool @danielkennedy74 The rage: http://bit.ly/dqz2Bn
RT @mmurray: Awesome PDF attack... http://ow.ly/1vgRI <- ACTION: Uncheck PDF File Attachments via Edit > Preferences > Trust Manager
RT @leighhollowell: RT @justin_foster: Good post by @dewzi on getting started in InfoSec: http://bit.ly/altJ3K
RT @chiefmonkey: Still no mention of @wikileaks video in mainstream US press. #NEWSFAIL Watch it: http://is.gd/bfZfG <- http://is.gd/bhg27
Would you reduce web traffic from 1.8m to only 180k hits over 6 months to instead collect $1400 in royalties? http://is.gd/bheNM
1
MitM attack? One of the DNS root servers, i.root-servers.net, was returning wrong results from China node http://is.gd/bhcgv
RT @daveaitel: Mozilla contains unidentified root certificates http://is.gd/bhbQR <- moz thread http://is.gd/bhbSL
@gorantq Thanks! Pseudo-random number generators are important for crypto http://is.gd/bhafA http://is.gd/bhawF http://is.gd/bhaxi
@steve_piercy CentOS follows RHEL, so if/when RHEL adds OpenSSL 1.0.0, CentOS will follow suit shortly after.