CISO at @sardineai. Treasurer of @OWASP Board of Directors. (he/him) qatta' mIghtaHghach.
Phoenix, AZ
Joined July 2009
- Tweets 8,305
- Following 139
- Followers 776
- Likes 17,402
What happens when developers copy/paste insecure code from @StackOverflow? Spoiler: "a major and dangerous problem" aisec.fraunhofer.de/content/…
2
Intel platforms from 2008 and newer are exploitable: semiaccurate.com/2017/05/01/…
Google and Facebook phished for $100mm: theguardian.com/technology/2…
eTrade's XSS control:
"remove any of the following characters
Double Quote (")
Less Than (<)
Greater Than (>)
Caret (^)
Vertical bar (|)"
lolz "If you're selected, you'll receive a free SamKnows Whitebox. Just connect it to your modem and plug the power cord into an outlet."
Apple and Google also found out the hard way, friction-free is great for business, until it isn't.
1
Python ebook bundle for $15, includes a couple of security books: humblebundle.com/books/pytho…
That makes more sense. Thought is was one 24 hour period, which meant new BB program or poorly written :)
Oh how I hate April Fools Day on the internet. It ranks right up there with Daylight Saving Time and enhanced airport screenings.
