Henrique Pereira (@ikkebr) header
Henrique Pereira (@ikkebr) profile picture

Python, Django e Testador Sênior de Penetração na Microsoft

Canada
Joined March 2009
Photo by Henrique Pereira (@ikkebr)Photo by Henrique Pereira (@ikkebr)Photo by Henrique Pereira (@ikkebr)Photo by Henrique Pereira (@ikkebr)Photo by Henrique Pereira (@ikkebr)Photo by Henrique Pereira (@ikkebr)Photo by Henrique Pereira (@ikkebr)Photo by Henrique Pereira (@ikkebr)
Henrique Pereira retweeted
A Piauí tem as imagens da orgia.
177
1,301
46
10,313
176,045
O domínio do MasterWhats, a plataforma que reunia numa inteface semelhante ao do WhatsApp as mensagens contidas no processo do Banco Master para que cidadãos conhecessem o teor das conversas foi bloqueado por ordem judicial sigilosa, da qual nem o mantenedor do site (Lucas Matheus) foi notificado. Não foi dada a oportunidade dele se defender dessa ordem judicial nem apontar um advogado. Não sou operador do direito e sim de redes e do que acompanho na imprensa, o STF retirou o sigilo desse processo. O conteúdo do site MasterWhats é de amplo interesse público e precisa ser restabelecido. Há 3 anos venho denunciando por aqui, em entrevistas e em palestras que nossas autoridades se habituaram a determinar bloqueios de domínios, endereços IP e perfis nas redes sociais sem o devido processo legal, sem intimar as partes, sem a oportunidade de instituir um advogado e apresentar a defesa. Esse cacoete não é antigo. Nesta mesmíssima rede social, o perfil @AlexandreFiles vazou ordens do STF que determinavam o bloqueio de contas nesta rede social sem que os seus usuários fossem intimados e devido ao sigilo, impedindo que a própria rede social avisasse ao bloqueado que a ordem foi de autoria do judiciário, não da própria empresa. Farei nesse thread um compilado de conteúdos meus a respeito do tema para todos que estão interessados nele. Enxergue esse megathread como o principal e cada post a seguir é seu próprio thread caso queira aprofundar-se. Mas não se perca. Retorne sempre para o thread principal. Siga o fio: 🧶
88
918
83
4,193
150,091
Neo Financial must be starved for money. The new fees/subscriptions are horrible. Time to go back to a trad bank?
1
114
Given that they reduced 10% of the headcount and are pushing for inflated recurring revenue, sounds like an acquisition might be in the near future
13
Earlier this year I set a goal to end the year with a couple CVEs to my name. So far, the year is going great: - CVE-2026-48579 (9.1 on MS Exchange) - CVE-2026-33102 (9.3 on M365 Copilot) - CVE-2026-21532 (8.2 on Azure Functions) - CVE-2026-44848 (9.4 on Portainer) - CVE-2026-55092 (8.0 on Trivy) Plus a plethora of other vulns I reported and got fixed without CVEs…
2
21
2,059
These guys got over 50 important and above MSRC cases. Insane. #bluehat @MSFTBlueHat
2
166
Henrique Pereira retweeted
Good morning, BlueHat! ☀️We’re excited to start Day 1 with you. Grab some breakfast and join us for opening remarks from Tom Gallagher, VP of Engineering, MSRC, followed by our keynote from Taesoo Kim, VP of Security Research at Microsoft. You can find the full agenda here: aka.ms/bh26agenda #BlueHat
1
4
536
Henrique Pereira retweeted
🎤 BlueHat Redmond speaker announcement We're excited to announce Varsha Chahal and Henrique Pereira (@ikkebr), Senior Security Engineers at Microsoft, will be speaking at BlueHat Redmond with their talk, “Gotta Catch’em All: Hunting Azure Anonymous Functions in the Wild.” Azure Functions often expose anonymous HTTP endpoints, creating a broad and overlooked attack surface. In this session, Varsha and Henrique share how they identified and exploited vulnerabilities at scale, leading to 40+ MSRC cases, including multiple high-impact issues. From CodeQL to automated exploitation pipelines, learn how small misconfigurations can turn into critical cloud risks and how defenders can better secure serverless workloads. #BlueHat
3
8
654
Fica poppando esses chats do Vorcaro na minha timeline e eu fico angry. Se é pra falhar em English, então fala tudo em English caralho. Não fica writing texto em Portuguese com half a dozen palavras em English. Coisa chata.
1
134
Henrique Pereira retweeted
⏰ Just 3 days left to submit to the BlueHat Redmond CFP! Don’t miss the chance to share your work with the security community. Submit your abstract: aka.ms/BH26CFP #BlueHat
1
2
1
1
4,394
Over-taxation and under-representation. Our Edmonton provincial government is pushing the biggest property tax hike in Calgary’s history. Nearly half your property tax bill now goes to Edmonton as a transfer payment. Their take is up 57% in four years. Now they're demanding 21% more -- about $339 per household -- this year alone. By comparison, Edmontonians are being asked to pay $154 more. Let’s work together for a fair deal for Calgary.
108
75
19
363
49,368
Henrique Pereira retweeted
Still thinking about submitting to BlueHat Redmond? We're opening a final Call for Papers submission windows through Friday, March 6. If you’ve got research, lessons learned, or a perspective worth sharing, now’s the time to share your work with the security community. Submit your abstract here: aka.ms/BH26CFP #BlueHat
Kicking off the Call for Papers for BlueHat Redmond ⚽️ BlueHat brings together security researchers and responders to exchange ideas, experiences, and best practices. We’re looking for talks covering vulnerability research, mitigations, emerging threats and techniques, and more. Bring your best ideas, because security is a team sport. Submit your paper by February 28, 2026: aka.ms/BH26CFP
7
1
16
8,452
Did you know? The Provincial government has increased their property taxes on Calgarians by 57% over four years, well above inflation and population growth. They're now imposing the largest property tax hike in Calgary's history with a 21% increase, or about $350 for the typical family. This is MORE THAN DOUBLE what they're asking Edmonton to pay. Meanwhile, our City Council team cares about affordability. We controlled costs, reduced a 5.4% tax increase to 1.6%, and are delivering on safety and core infrastructure investments.
91
169
11
433
19,545
Henrique Pereira retweeted
🚨 Last call 🚨 The BlueHat Call for Papers closes Feb 28. If you have original security research, hard won lessons, or insights the community can learn from, now’s the time to submit. Submit before the CFP closes tomorrow: aka.ms/BH26CFP
Kicking off the Call for Papers for BlueHat Redmond ⚽️ BlueHat brings together security researchers and responders to exchange ideas, experiences, and best practices. We’re looking for talks covering vulnerability research, mitigations, emerging threats and techniques, and more. Bring your best ideas, because security is a team sport. Submit your paper by February 28, 2026: aka.ms/BH26CFP
4
8
6,005
Henrique Pereira retweeted
The UCP squandered Alberta’s near-record resource wealth and still produced a $9.4 -billion deficit—a failure of basic financial management. Somehow, under some of strongest economic conditions in a generation, life is going to cost you more.
510
281
36
842
64,073
The provincial government has just imposed the largest property tax increase on Calgarians in history. In 2026, Alberta is increasing its share of your property tax bill by 21.05%. Nearly 42% of every residential property tax dollar now goes directly to the Province, and the City is legally required to collect this massive tax increase. For a typical $706,000 home: 🔺 Province: +$339 🔹 City: +$49 We did our work to restrain spending while focusing on safety and core infrastructure. The City’s increase is 1.81%. The total increase is about $388, with the overwhelming majority driven by the Province. Check your estimate at calgary.ca/taxcalculator.
166
390
74
844
189,074
This was the first computer interaction I ever had. I was 4/5 years old, didn’t understand what was happening, but it was awesome.
The Mother of All Games Scorched Earth, by Wendell Hicken, was released as shareware in 1991. Not easy on the eyes, but one of the best multiplayer games ever! It let you customize everything - from gravity, wind, and meteor showers. Building on earlier games like QBasic Gorillas, it took the concept to a new level, supporting up to 10 players with far more complexity and variety. You could set the angle and power to aim, combined with a wide choice of weapons (unlike the banana in QBasic Gorillas). Computer-controlled enemies could be set from difficulty 1 (Moron) to 10 (Cyborg). No other game has named its lowest difficulty level so perfectly! Here’s to Wendell Hicken - thank you, wherever you are!
1
66