Derek 🇮🇱

Security engineer, amateur programmer, work mostly with web applications. My opinions are my own and do not represent my employer.

[Derek 🇮🇱 @StackCrash]

@UK_Daniel_Card The guy's response after she dismissed him is cringe but he was talking about zero trust architecture. So pretty cringe interaction from both.

[Derek 🇮🇱 @StackCrash]

@RBReich None of the deregulation had anything to do with why SVB failed.

[Derek 🇮🇱 @StackCrash]

@nnwakelam Try to upload htm/html files into the root web directory to chain into ATO or similar attacks.

[Derek 🇮🇱 @StackCrash]

@TrustIsEarnd @robertgraham That's not how it works. Injecting more money into the economy increases inflation.

[Derek 🇮🇱 @StackCrash]

@dman4835 @JameelJaffer Unions very much do have the same ability. A company cannot prevent union related messages on company property like messages boards (physical and digital).

[Derek 🇮🇱 @StackCrash]

@dman4835 @JameelJaffer In privately owned public spaces it's often ruled in favor of preserving the individuals rights over the private owners.

[Derek 🇮🇱 @StackCrash]

@dman4835 @JameelJaffer There have been first amendment challenges to NLRA/NLRB. Forcing an employer to allow unions or union workers is compelling speech in the same way as stopping a social media company from banning users. More so social media companies operate like privately owned public spaces.

[Derek 🇮🇱 @StackCrash]

@JameelJaffer Honest question what's the difference here and with NLRA/NLRB? Both seem to uphold an individual's right to free speech over an organization's right to limit it.

[Derek 🇮🇱 @StackCrash]

@kurtopsahl That's why I ask about NLRB, because that isn't about protecting speech from the government either.

[Derek 🇮🇱 @StackCrash]

@kurtopsahl Correction: NLRB

[Derek 🇮🇱 @StackCrash]

@kurtopsahl Which right is greater an individuals right to free speech or an organization's rights to limit speech? Under the same principle is NRLB not compelling speech?

[Derek 🇮🇱 @StackCrash]

@Lee_Holmes To be fair it's the SecureString class from C#

https://t.co/6MsJHiA20l

[Derek 🇮🇱 @StackCrash]

@fregante @troyhunt That's a new one, I admit it's been a while since I had a need to use it.

[Derek 🇮🇱 @StackCrash]

@troyhunt WeChat has been doing that with foreign accounts for years. If I need WeChat I basically have to make a new account each time. Which itself becomes a hassle each time.

[Derek 🇮🇱 @StackCrash]

@JaumeTeixi @robertgraham Just want to point out the paradox doesn't mean society must censor. It only means people should voice their intolerance. In the case of using censorship it actually fuels the persecuted mentality and can actually make things worse.

[Derek 🇮🇱 @StackCrash]

@WSSMomma @RepThomasMassie @KerryPicket Interesting how that article skipped that the cuts started under the Clinton administration over a decade prior.

[Derek 🇮🇱 @StackCrash]

@DoorDash_Help No thanks, I tried via in app support and got nothing but the standard missing order treatment. If you don't care enough to take care of it via your official support channel there is no point to trying outside that channel.

[Clint Gibler @clintgibler]

🛠️ Building an AppSec Pipeline for Continuous Visibility

@c0d3G33k describes @chargebee's approach using free and open-source tools

* SAST: Semgrep
* SCA: @owasp Dependency Check
* Secrets Scanning: Gitleaks
* SBOM: CycloneDx

Results ➡️ @defectdojo

https://t.co/EArAqJbpxj

[Derek 🇮🇱 @StackCrash]

@Zovanget @TheFeeneyFactor @litcapital Maybe not, I've seen SaaS companies outsource their website and all it's non-SaaS related pages to small companies.

[FIRE @TheFIREorg]

Applications are open for FIRE’s 2022 Free Inquiry Grant program.

The program will offer 🔥 $150,000 🔥 to support research on free speech!

For more information on the program and eligibility please visit:

https://t.co/wUw8fpwk19