Sean Glencross

hack the planet!

[Threat Modeling Connect @TMConnectHQ]

We’ve just launched our new community forum! 🎉 A dedicated space for our members to share challenges, explore best practices, and get input from one another about all things #ThreatModeling. 👉 Join the discussions now: https://t.co/tiwLEK8S0O

[Tanya Janca | Shehackspurple @shehackspurple]

Developers, if you're doing secure coding training, is it helpful to have first a "this is crappy code", then "this is better code" then "This is the best code" types of examples and walk throughs? Like "here's how we could call a secret management tool, and why" Thoughts?

[Tanya Janca | Shehackspurple @shehackspurple]

Also, would you rather write all the code yourself? Or walk through? Or review code? Or walk through then you code? Or, what do you like the best and how do you learn the best?

Thank you for your input. I may or may not be working on my next workshop. 😉

[Brian Baskin @bbaskin]

CTF players be like

[Jonathan Marcil @jonathanmarcil]

I had an amazing experience on stage with @CarolineWMWong
@izar_t @adamshostack @BrkSchoenfield Matt (human), Claude (AI) and Pi (AI) #threatmodcon SF 2024

[Sean Glencross @AppSecSeanner]

It's going to be so fun! See everyone tomorrow! P.S. don't make lunch plans we have you covered!

[Threat Modeling Connect @TMConnectHQ]

⏰ The wait is almost over—just 12 hours until #ThreatModCon, and we're SOLD OUT!🎉 Get ready for an action-packed day full of expert insights, hands-on workshops, and plenty of networking with your fellow threat modeling enthusiasts! What are you most looking forward to? 👀✨

[Sean Glencross @AppSecSeanner]

I highly recommend this book. That is a steal of a deal! If you are in #compsci #webdev #fullstack #appsec go get it.

[Tanya Janca | Shehackspurple @shehackspurple]

📉 Save 50% on the Alice and Bob Learn Application Security audiobook! Learn secure coding, threat modeling, and more for only $12.50 until October 11th. Grab your copy today!

https://t.co/ZjZ8IFb681

[Sean Glencross @AppSecSeanner]

Jealous!

[Kim Wuyts @Wuytski]

Woohoo!
Cards against AppSec 🃏

Thanks @shehackspurple 🫶

[Sean Glencross @AppSecSeanner]

Congratulations Tanya!

[Sam Stepanyan @securestep9]

Huge congratulations to @shehackspurple as she has been recognised by the #OWASP Foundation for extraordinary contributions to the OWASP community and awarded Distinguished Lifetime Membership at the OWASP Global AppSec Conference in San Francisco 👏🎉

[Jonathan Marcil @jonathanmarcil]

I'll be speaking as part of the un-keynote at #ThreatModCon 2024 in San Francisco next weekend. Will also moderate a session during lunch time.

It's a one day focused event on Threat Modeling, check it out if you're into or curious about it!

https://t.co/NoPUF3LSne

[Jonathan Marcil @jonathanmarcil]

Under the Radar: How we found 0-days in the Build Pipeline of OSS Packages by @francoisproulx at @OWASP Global AppSec San Francisco 2024

[Sean Glencross @AppSecSeanner]

@shehackspurple This is awesome. So obviously the next question is, what is the tractor's name!?

[Sean Glencross @AppSecSeanner]

@mattjay So now the importance and time to replace a lost/stolen key increases. This is where it gets interesting, I have not practiced replacing a #U2F key before... I can remove one and rely on my backup key. So should we have a spare ready? If you don't already have a backup setup 😳

[Threat Modeling Connect @TMConnectHQ]

Get ready for an unexpected keynote at #ThreatModCon 2024 San Francisco! 💥 Join Caroline Wong, Matthew Coles, @izar_t, @adamshostack, Zoe Braiterman, and a special guest as they tackle the hottest threat modeling topics LIVE! 👉 Get your ticket now: https://t.co/ozXNNHuf25

[TracketPacer @TracketPacer]

oh my god IT HAPPENED

[Tanya Janca | Shehackspurple @shehackspurple]

Thread 🧵about yelling

In my early twenties I had a boss that yelled and screamed at people. I was new, but had heard it happen to others. One day I reported a design flaw to him, for a new app we were about to build.
He started to get upset, like he was going to yell.

[Semgrep @semgrep]

🚨 CONTEST ALERT! 🚨

Want to win 1 of 3 decks of 'Cards Against AppSec' by Tanya Janca? Simply RT this post and make sure you're following us to enter! ⏳ You have 48 hours—good luck!

#AppSec #Giveaway #CardsAgainstAppSec

[Semgrep @semgrep]

Our previous post got deleted; we are sorry to everyone who has already re-tweeted. Please re-tweet again. For everyone who followed us, we have your names listed and you will still be entered! Thank you for understanding.

[Threat Modeling Connect @TMConnectHQ]

🚀 Discover how Laurent Bouchard and Léandre Forget Besnard changed the conversations about security at @Desjardins through #ThreatModeling. Don't miss out on their insights at #ThreatModCon 2024 San Francisco next month! Register: https://t.co/LoHkmxLTZX

[Tanya Janca | Shehackspurple @shehackspurple]

🔥 Get ready for an interactive session on Semgrep rule writing! On September 16th at 9AM PT, Brandon Wu and I will help you create and refine your own rules. Don’t miss it—sign up now!

https://t.co/qfplvB8vQq