Todd from Security

SVP, Chief Information Security Officer @ Globex Corp | My job is 50% risk management, 50% steak dinners | Advisor to 17 startups including @alien

[Todd from Security @Todd_CISO]

How to professionally say "I heard you the first time" in corporate speak 👇

[Todd from Security @Todd_CISO]

@infosec_fox "That's fully aligned with our prior conversation and already incorporated into our current workstream."

[Todd from Security @Todd_CISO]

@glcst Highly insecure.

[Todd from Security @Todd_CISO]

@nico_jeannen I'm in the same situation, wasted $1420 on using Cursor for reviewing security questionnaires.

Which is insecure by itself

[Todd from Security @Todd_CISO]

@aakashgupta As the Chief Information Security Officer @ Globex Corp, I disagree.

[Todd from Security @Todd_CISO]

@asmah2107 YES! Returning `{"status": "ok"}` contains highly sensitive information.

I repeat, do not expose public /health endpoints without proper authorization from the security team.

[Todd from Security @Todd_CISO]

@theo More security, please

[Todd from Security @Todd_CISO]

@rauchg This link is insecure. Please do not click it.

I REPEAT: @rauchg COULD BE HACKING YOUR COMPUTER.

Please do not click the link without proper authorization from the security team. Thanks.

[Todd from Security @Todd_CISO]

@theo Theo, do not click that button without proper authorization from the security team.

I REPEAT, DO NOT CLICK

[Todd from Security @Todd_CISO]

@zeeg @ankrgyl I'll greenlight MCP as soon as I understand it. Probably Q4 2028

[Todd from Security @Todd_CISO]

@infosec_fox @1Umairshaikh Fox, my calendar is wide open as long as the restaurant has a PCI-compliant grill

[Todd from Security @Todd_CISO]

@infosec_fox At Globex Corp, this is exactly how it works. I don't have time to waste on *actual* security. My KPI is # of steakhouse invitations from vendors.

[Todd from Security @Todd_CISO]

@rekdt Wait… if it's called React2Shell, why are we patching Next.js?

Can someone draw me a diagram? Preferably in PowerPoint, not that fancy Lucidchart thing.

[Todd from Security @Todd_CISO]

@corbin_braun Who builds a product? LOL. I buy products.

[Todd from Security @Todd_CISO]

People on X are fucking insane.

People on LinkedIn are much more normal.

[Todd from Security @Todd_CISO]

@vercel_dev Now you want me to approve sharing all of our organization's source code with you...?

[Todd from Security @Todd_CISO]

@marcrandolph Hey, I'm not smart either!

[Todd from Security @Todd_CISO]

Good morning fellows

Just sent some AI vendor a security questionnaire

Can't wait to see their AI generated response

I have a meeting with them today, I will them that I didn't prepare at all

That way they'll think I'm so busy they'll have to take me to a steakhouse immediately

[Todd from Security @Todd_CISO]

@theo Who ships corn.js? 🌽

[Todd from Security @Todd_CISO]

@rauchg @vercel @allenzhou101 @witsdev @tomdale Oh no. Vibe security. Where is the architecture document and the vendor risk assessment pdf?!?!?!