CISO at @sardineai. Treasurer of @OWASP Board of Directors. (he/him) qatta' mIghtaHghach.
Phoenix, AZ
Joined July 2009
- Tweets 8,305
- Following 139
- Followers 776
- Likes 17,402
That time Madonna uploaded a fake song on P2P networks to swear at the music pirates.
mtv.com/news/1471321/madonna…
3
8
"Hello, thank you for inquiring about log4j. This company was vulnerable, however, I exploited it, took over their entire infrastructure, then patched it. This company is no longer vulnerable to log4j."
2
I wonder if it’s possible to move all the accounts to Personal Gmail accounts? I don’t need any of the admin features.
1
Just got mine too. If you have 6 or less accounts, Microsoft 365 Family at $99 per year might be an option.
Looking forward to another year with these awesome people!
Welcome the 2022 OWASP Global Board of Directors
Vandana Verma - Chair
Grant Ongers - Vice Chair
Glenn ten Cate - Treasurer
Avi Douglen - Secretary
Bil Corry - Member at Large
Joubin Jabbari - Member at Large
Martin Knobloch - Member at Large
owasp.org/www-board/
1
5
“That’s the problem with randomness, you can never be sure.”
dilbert.com/strip/2001-10-25
2
You know those companies that collect vendor security surveys on behalf of their clients?
I just had one use the information they collected to solicit us.
Pro-tip: unethical behavior is not the best way to win new clients.
1
4
@ADP I thought it was well-known at this point, but can you ask your CISO to read this article then put in a feature request to remove forced password rotation outside of evidence of compromise? Kthx!
ftc.gov/news-events/blogs/te…
"The Giving Tree" IRL
tldr; a popular massive sand dune is discovered to make beautiful blue glass, and is slowly hauled away until the dune is entirely gone.
blog.newspapers.com/indianas…
Let me guess, their contract did not offer a warranty. It's (not?) surprising how many security contracts disclaim suitability and performance of their product/service. I always insist they either warrant their product or allow immediate termination if it fails.
1
I’m reminded of the time that I created an endorsement of “Babysitting” for @jeremiahg.
I’m pleased to see it’s still there #lulz
2
I saw that a class-action lawsuit is being considered.
androidpolice.com/google-gsu…
1
I loved Marathon. There's an open-source version if you're into it.
alephone.lhowon.org/
Super random, but TIL that railroad workers don't pay into Social Security, they have their own retirement program called RRB.
en.wikipedia.org/wiki/Railro…
I show this “juice jacking” video as part of my security awareness training. Then laugh and tell my audience that NO ONE calls it juice jacking.
da.lacounty.gov/community/fr…
1