CISO at @sardineai. Treasurer of @OWASP Board of Directors. (he/him) qatta' mIghtaHghach.
Phoenix, AZ
Joined July 2009
- Tweets 8,305
- Following 139
- Followers 776
- Likes 17,402
This lesson was learned early on with “Patient 31” in S. Korea who infected 5000+ people at a megachurch, turning the city of Daegu into a “disaster zone”.
graphics.reuters.com/CHINA-H…
1
Schools devoid of meaning and purpose produce graduates devoid of meaning and purpose.
We have the opportunity to redefine what education means in the 21st century and create meaningful environments for learning. pamroyblog.com/the-real-cost… #viktorfrankl #education #lifelonglearning #findmeaning #inspiringwisdom #21stcentury
1
1
Bil Corry retweeted
Come for the nested `<form>` parsing weirdness that 0.3% of page views (inadvertently?) rely upon (chromestatus.com/metrics/fea…), stay for the "foreign content" wildness that's confusing and strange!
Another blogpost by @SecurityMB just landed; this time he talks about his recent bypass of DOMPurify using namespace confusion. This is probably the first spec-compliant sanitizer bypass that worked in all browsers 😅
Here you go:
research.securitum.com/mutat…
5
17
Me: Wow, my textbook is free?!
Me after clicking: Nope, just false advertising by @amazon, unless you consider a 7-day free ebook access the same as a free paperback.
1
1
Bil Corry retweeted
A new version of the #OAuth #Security Best Current Practice Draft is out! ietf.org/id/draft-ietf-oauth…
The most important changes:
2
30
2
32
Bil Corry retweeted
Wrote a new blogpost! Had a great debate last week about where to store session tokens when building a SPA, so I decided to PoC the main strategies and discuss the pros/cons of each: blog.ropnop.com/storing-toke…
2
42
2
89
A reminder that there isn't a skills shortage in AppSec (or InfoSec). Just a shortage of companies willing to hire and train enthusiastic, yet inexperienced, people.
2
2
I'm going to rethink the streaming services we use, such as @PrimeVideo, @netflix, @disneyplus, and @hulu. They should either warn parents that a show is incomplete (thus creating demand for expensive remaining seasons), or refuse to carry partial content on their platforms.
For the shows that run on the network but are not included in their subscription (eg Disney's Mira, or Nick's Danger Force), that's disappointing.
1
The lesson from all of this:
It's obvious that the early seasons of kid shows are included in steaming services as a lead-in to selling the more recent seasons.
Hook the kids, then pressure the parents to purchase more.
Legal, but not ethical.
1
How about @NOGGINKids Paw Patrol? The @PrimeVideo NOGGIN subscription looks tempting instead of paying $30(!!!) per season, but note that only gets you the first 6 seasons. After your kids are hooked, the remaining 7 seasons also cost $30 per season ($210!!!).
1
I was able to get @PBSKIDS programming on Amazon via the PBS subscription that appears complete, such as Berenstain Bears and Odd Squad. Go PBS!
1
Or @Nickelodeon Danger Force (a spin-off of Henry Danger)? NickHits doesn't get you this one, sorry.
1
How about @Nickelodeon Henry Danger? With NickHits, you can watch first seven seasons, but have to buy the remaining five.
1
How about Hunter X Hunter? Yes, @netflix has the first four seasons, after that, you have to buy the remaining seasons and movies.
1
If you want to watch @Nickelodeon Loud House, don't rely on your NickHits add-on on @PrimeVideo, that only gets you the first four volumes, you have to buy the rest.
1
A bit of a tweet thread rant about streaming kid shows with a lesson learned for parents at the end...
If you want to watch Disney's "Mira, Royal Detective", don't rely on your @disneyplus subscription, it isn't there. You can buy it though.
1
