CISO at @sardineai. Treasurer of @OWASP Board of Directors. (he/him) qatta' mIghtaHghach.
Phoenix, AZ
Joined July 2009
- Tweets 8,305
- Following 139
- Followers 776
- Likes 17,402
Me via email: "I get an app error, can't log in, site doesn't work" Bank via email: "Please log in to communicate, email isn't secure" #fail
RT @mckt_: Mozilla is finally fixing the CSS history hack. http://blog.mozilla.com/security/2010/03/31/plugging-the-css-history-leak/
Mixed-content warning at Facebook http://yfrog.com/0ab4jcj #SSLFAIL (@ivanristic)
www.gmail.com gives SSL cert for mail.google.com http://is.gd/b8sti #SSLFAIL (@asteingruebl)
773 Twitter links out of 1,314,615 harbor malware -> Analysis of more than 1 million of Twitter URLs http://is.gd/b7Fjb
US State Dept report on China/Tibet "extrajudicial killings, torture, arbitrary arrests, extrajudicial detention, ..." http://is.gd/b6V2N
1
@securityninja Microsoft's "proprietary crypto" is XOR, hardly proprietary or crypto ;)
RT @wascupdates: WASC Web Hacking Incident Database (WHID) Project Update - http://bit.ly/aH5uo1 (@wascwhid)
Yahoo! Lecture in Sunnyvale (March 31) - Douglas Crockford talking on Style and Performance in JavaScript http://is.gd/b5Qtf
RT @DidierStevens: "Escape From PDF" http://bit.ly/cSMnwL <- "execute an embedded executable without exploiting any vulnerability"
Microsoft is using XOR encryption for their wireless keyboard?!?! http://is.gd/b5rKw (via @securityninja)
RT @rickdeaconx: RT @MarioVilas Injecting XSS in EXIF tags http://bit.ly/c3V1cm
RT @sambowne: The war on WikiLeaks and why it matters http://bit.ly/9a8Wzu <- interesting read
RT @DinisCruz: The World's Most Ingenious Thief. (WARNING: you will not be able to stop reading this) http://bit.ly/cmxNqt /via @wired
RT @DinisCruz: RT How Mint.com acquired a mint load of users: http://bit.ly/dmVv7F #startup /via @loggly
RT @garethheyes: Lighting effect with canvas http://bit.ly/9sXmtR //this is pretty cool
RT @DidierStevens: http://twitpic.com/1b0440 - Do you think this would fool your average user? BTW, no vulnerabilities were exploited.
RT @securityninja: RT @daveaitel: Pwn2Own Winner Tells Apple, Microsoft & Adobe to Find Their Own Bugs http://dlvr.it/M3lF
RT @jeremiahg: VERY interesting -- OS X has built-in sandbox for applications, "Run Firefox in a protected sandbox" http://bit.ly/bULcHJ