Senior Security Engineer, Blue Team @betterhelp ✨
Los Angeles, CA
Joined January 2014
- Tweets1.5K
- Following463
- Followers4.6K
- Likes2.8K
Pinned Tweet
Imagine being frozen 20 years ago and waking up this weekend to find Java is still and thing and it’s even worse than before.
Should I start posting more resources about AppSec?
I’m down to start a blog series and GitHub repo if that’s something people would benefit from.
This is a gold mine of knowledge for anyone who is in AppSec or wants to be in Appsec.
So many examples of challenges faced in the Modern Application Security Realm and what skillsets to arm yourself with to be impactful.
Jeevan Singh (@askjeevansingh) describes an #AppSec Engineer superpower -- teaching.
Did infosec wake up and decide to be into praise or have we always been like this? Asking for a friend
Throwback to 2016 when I was talking about XXE at a conference and someone said it wasn’t a thing because they had never heard of it.
Then it was in the Owasp Top Ten 2017.
As of 2023 there are 879 Mitre CVE’s including the word XXE.
This is so cute 🥰
i wanted to share the new pins i’m bringing to sjmade—the terminally embarrassed pin! have you ever debugged for hours just to find out that you left off a semicolon? have you ever accidentally committed a log line that outputs “poop”? join the terminally embarrassed club >_<
ALT hand holding a backing card with the text “terminally embarrassed” and “bubblesort.io” backing card holds a pin shaped like a terminal, but with an extra < symbol so that the terminal forms an embarrassed wincing face. the terminal is dark purple and the pin has rose gold edging.
Nice approach for discovering XSS vulnerabilities (but also can apply in general as a process for bug hunting 🕵️♀️)
In some org somewhere:
> r u srs I can’t believe they said you didn’t parameterize the queries you would obviously NEVER
> I didn’t 🤭🫣
> purr as u should queen tf period 👑
Dope Defcon opportunities for AI interested folks ✨✨
Hey hacker fam!
The AI Village team are working on an EPIC event this year.
🥷 Talks
👩🔬 Labs
🎨 Art
🏴☠️ CTF
🎧 Music
🐞and a HUGE AI Red Teaming event🐞
We need volunteers! 👇🏼
docs.google.com/forms/d/1VzL…
Oh did I mention free limited edition swag? 😉
@aivillage_dc @defcon
Google Bard considers me a “popular cybersecurity expert and meme connoisseur” and that’s all the validation I need.
