Director of AppSec Security for @Shopify; https://nitter.cf/t.co/afrjdaWulN #AppSec | #Security | #CyberSecurity | #AI
Seattle, WA
Joined November 2008
- Tweets354
- Following393
- Followers222
- Likes20
This is awesome, our very talented security engineer Indiana Moreau wrote this up at @SecInnovation! I love to see this research getting out!
Repo Jacking: Exploiting the Dependency Supply Chain on Github
blog.securityinnovation.com/…
1
As bad as the wildfires are, climate change is making them worse. "Wildfire activity in the United States is changing dangerously, particularly in the west, as conditions become hotter and drier due to climate change,"
usatoday.com/in-depth/news/2…
1
This was such an awesome event, thanks to all who attended!
This year's #DEFCON was an excellent opportunity to give a sneak peek into our newest product. @joespikey recaps the event and shares some details about the upcoming cloud infrastructure CMD+CTRL Cyber Range blog.securityinnovation.com/…
@objective_see just released a #ransomware detection tool for #macos. It detects I/O events and tries to halt a process that is encrypting files. A straightforward hypothesis, well executed.
objective-see.com/products/r…
I'm tired of being #tracked and served #advertising everywhere I go. There has to be a better way.
#appsec professionals and leaders have an obligation to defend the #privacy of end users.
Check out my latest post on what you can do to minimize your #privacy risk online as an #app #developer and as a #consumer.
rethinksecurity.io/posts/you…
Just heard Reunions by @JasonIsbell, love the album, but what really shines is the bass lines! Awesome stuff @JimboHart! Careful, you'll steal the show!
1
1
What was the cause of the house fire?
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
Somebody saw Hackers recently! But honestly what hacker from the 90's didn't want to dress like this? vitalydesign.com/blogs/every…
#OpenAI model generates #python code from source comments. This is a pretty incredible use of the technology. Training on all of #github is a neat training set. youtube.com/watch?v=fZSFNUT6…
#darkpatterns in UI. A required Opt in to marketing checkbox. I heard this webcast was really good too! Too bad I won’t get to listen.
1
It was great to deliver my #Attacking Modern #API Based #WebApps talk for SecureWorld yesterday!
secureworldexpo.com/resource…
If you missed it you can grab the recording and get your CPE credits here!
#webapplication #hacking #webcast #webdevelopment
Excited to deliver this webcast on Thursday! Register today to learn more about how to #hack & defend #modern #API based #webapps!
Tune in Thursday, 5/14, as Joe Basirico, SVP of Engineering @SecInnovation, covers what you need to know to defend and attack modern API-based web applications. #RemoteSessions @joespikey REGISTER: hubs.ly/H0qrRch0
End users have a responsibility to identify #phishing content, but app #developers also have a responsibility to their users to be trustworthy in their comms and to be clear about what they’ll request.
@briankrebs has a great article on advanced attacks:
krebsonsecurity.com/2020/04/…
My #webcast for @CybersecurityNp is posted now. Go check out how an #Attacker #Audits your #Software
youtube.com/watch?v=uHS8CZpl…
Speaking of doing more #conference talks, I’m doing another one, this time for @SecureWorld on Thursday May 14th, on #attacking the modern #API based #webapp. It’s worth a #CPE credit, if you’re into that.
secureworldexpo.com/resource…
Anybody else participating in a lot more speaking opportunities lately? Now that everybody’s doing #remote conferences and webcasts I can speak whenever I want without needing to travel!
I’m OK with this #NewNormal change :)
2
This is such a cool framework for thinking about integrating security into a rapid dev process.
How @generalelectric was able to integrate #security into their #agile dev process. Great insight into how to pull this off for hundreds of applications!
youtube.com/watch?v=dkDQ-sfv…
2
Register now for my #webcast on Wed at 5:00 PM Pacific. You’ll learn some #hacking techniques on live systems and see how a #hacker who hacked into the Cayman National Bank used the same techniques. Attackers Have #Superpowers, find out what they are!
eventbrite.com/e/zoom-how-an…
