CISO at @sardineai. Treasurer of @OWASP Board of Directors. (he/him) qatta' mIghtaHghach.

Phoenix, AZ
Joined July 2009
Filter
Exclude
Time range
-
Near
Replying to @jasonhuck
@jasonhuck at least you have a keyboard shortcut, Windows is inconsistent.
1
@mdennedy coupled with "performance"-based incentives that actually have the opposite effect, leaves one to wonder the actual value of HR
I'm at hack4kids in Luxembourg and they're teaching kids about IP routing and MitM. One kid gets to be the NSA.
Replying to @AnuInternet
@AnuInternet Independent of Anu, I'm seeing packet loss in Luxembourg on my fiber connection. VPN to States avoids it.
1
Replying to @ndm
@ndm I'm guessing for your wife, the distinction is moot.
There's some irony that xfinity.com presents their privacy policy in a pop-up, which is blocked by the pop-up blocker.
Replying to @ConManSeries
@ConManSeries @SethGreen @PJhaarsma Did he reprise his guest role from X-Files?
How is it Silicon Valley will obsessively shave off milliseconds online, but then will accept a two hour commute to work?
1
Replying to @jasonhuck
@jasonhuck take the blue pill
Replying to @jasonhuck
@jasonhuck Urgent for them != urgent for you.
Replying to @PrivacySecurity
@PrivacySecurity @mdennedy Does this apply to the President and members of Congress? If so, Twitter is going to get a lot more interesting.
@lcamtuf Fairly certain next attack will be blamed because Patriot Act expired.
Replying to @ndm
@ndm You will not sleep well. It's essentially a jet-lag simulator.
Ever taken a mandatory information security training at your company and wanted to do it better? Here's your chance: j.rfer.us/EBRoOamYu
Want to help fight phishing at PayPal, one of the most phished brands in the world? Here's your opportunity: jobs.ebayinc.com/jobs/236586…
Replying to @freddyb
@freddyb With hashes, wouldn't every update require two pushes (CDN, HTML)? Signatures would only require one (CDN), is that an option?
Replying to @hillbrad
@hillbrad You'd think the GUI lawsuits involving Apple, Microsoft, and Xerox was lesson enough.
1
Listening to @__apf__ keynote #W2SP on usable security
Well this makes it easy to tell what is spam.
"Websites, mail servers, and other TLS services that support DHE_EXPORT ciphers are at risk for the Logjam attack" weakdh.org/