CISO at @sardineai. Treasurer of @OWASP Board of Directors. (he/him) qatta' mIghtaHghach.
Phoenix, AZ
Joined July 2009
- Tweets 8,305
- Following 139
- Followers 776
- Likes 17,402
Disappointing to hear about your experience with TI. I’m a donor, but will rethink it. I’m also a donor to CR, hopefully they’re better to work for.
1
I'm hiring a Senior Application Security Engineer (USA remote or in the office, your choice). Recurly is a well-funded fintech startup with an awesome security team.
If you're interested, DM me.
jobs.lever.co/recurly/421289…
1
3
1
I just re-read through your program and didn’t see where you clearly state that it’s 14 days from receiving the trade-in kit, which you can send before receiving my new purchase, making the return window very short.
That’s deceptive advertising.
apple.com/shop/trade-in
1
Or better yet, you know when I received my new device, start your return window then and not when I get the trade-in kit. That’s how I thought it worked and you can align with my (and likely other customer) expectations.
1
In case you're wondering which companies (and their financial backers) profit from the ongoing threat to humankind.
dontbankonthebomb.com/perilo…
1
1
I remember seeing the web for the first time and thinking, “what’s the big deal, this is just like gopher, but with pictures.”
1
2
Great resource! I didn’t see the WebEx one, in case you want another example.
securityweek.com/former-cisc…
1
When you’re murdered at your workplace and your employer does nothing to stop the video of it from circulating.
3. She didn't name the "news corporation", but anyone following this knows who it is--@GrayTelevision and its despicable leadership. @Google is evil. Gray is worse than evil. #socialmedia #Sociopaths
1
Please, if you're on a product security team and your company wants to use this anti-pattern, advocate for your users and push back. Or if you lose that battle, ensure there's a reasonable alternative, such as small deposit verification. Don't be like @TradeStation.
1
I'm not sure if @TradeStation product team is purposely trying to make the friction so high that I'll give in and hand over my banking credentials, or if they just don't care, but the experience has been entirely a negative one.
1
So I refuse to do it. Most of the time, there's an alterative flow where it's validated using small deposits, but it takes a few days.
Except @TradeStation, they make you fill out a paper form. After two weeks and 4 submissions, I still haven't linked my bank account.
1