CISO at @sardineai. Treasurer of @OWASP Board of Directors. (he/him) qatta' mIghtaHghach.
Phoenix, AZ
Joined July 2009
- Tweets 8,305
- Following 139
- Followers 776
- Likes 17,402
Joking with my kids that we're celebrating Festivus this year. Son wants to do Feats of Strength, now have to buy metal pole and wrestle him
#baythreat - Already planning 2011. Ping me with ideas for speakers & sponsors or ways to improve the conference.
#baythreat was awesome! Much thanks to our sponsors, speakers, volunteers and attendees. Some slidedecks on site and video should be soon.
Awesome day. Loved #baythreat then had a blast at SF City Hall for my work's holiday party.
Peter Eckersley of EFF speaking today at Stanford on "How Unique is Your Browser?" and "An Observatory for the SSLiverse" 11:45 am Gates 498
Google Ads is showing me an ad for a medical condition I have. #creepy #noprivacy
An Empirical Study of Privacy-Violating Information Flows
in JavaScript Web Applications http://cseweb.ucsd.edu/~d1jang/papers/ccs10.pdf
1
@jeremiahg ModSecurity Handbook by Ivan Ristic amazon.com/gp/product/190711…
@jeremiahg Web Application Obfuscation: \'-/WAFs..Evasion..Filters//alert(/Obfuscation/)-\'... amazon.com/gp/product/159749…
@steve_piercy Glad Duke is doing well and you were not hurt. Very scary!
@mikkohypponen FYI, domains such as "paypal.рф" are not allowed by the Russian registry: https://www.nic.ru/dns/service/en/faq_rf.html#p2
Latest Cookie draft from HTTPState WG: http://tools.ietf.org/html/draft-ietf-httpstate-cookie <- almost ready to request publishing!
PSA for greybeards: You can't crumple cellophane into a ball. If you insist on trying, please don't do it in a techtalk with 100 other ppl.
Tap-jacking and Geo-localization: Framing Attacks on Smart Phones http://seclab.stanford.edu/websec/framebusting/tapjacking.pdf
2
New CPR Guidelines released today: http://www.heart.org/HEARTORG/CPRAndECC/Science/Guidelines/Guidelines_UCM_303151_SubHomePage.jsp