Daniel Etzold

Dev-Sec-ML, Creator of @secflashcards and @as_sketchnotes.

[Daniel Etzold @_etzold]

I‘m proud to announce Security Flashcards (@secflashcards, https://t.co/oWeAntYxhK). 30 handwritten flashcards for learning web application weaknesses each with a #sketchnote visualization. Here is one example - some more will follow… #security #flashcards #vulnerabilities

[Daniel Etzold @_etzold]

Released papr 0.0.20 - a simple command line tool to manage scientific papers. New: UI improvements, new storage structure that is more open and accessible to give you more flexibility for notes. Just run 𝚙𝚒𝚙 𝚒𝚗𝚜𝚝𝚊𝚕𝚕 𝚙𝚊𝚙𝚛 https://t.co/H7cCLrGDbn

[Daniel Etzold @_etzold]

I’ve created a sheet cheat for the MNIST handwritten digits dataset. It also contains code that shows how to load batches of MNIST images with @PyTorch #MachineLearning

[Daniel Etzold @_etzold]

Created a #security #flashcard which describes #log4shell - a #vulnerability in #log4j. Now the card deck has grown 45 cards, available at https://t.co/oWeAntYxhK #appsec #infosec #log4jRCE

[Daniel Etzold @_etzold]

I'm creating flashcards about application and #machinelearning weaknesses. This is a mini poster of "Backdoor Attack with Imperceptible Input and Latent Modification". The paper will be presented as a poster at #NeurIPS2021

[Daniel Etzold @_etzold]

@DailySwig Path traversal explained in one picture:

[Daniel Etzold @_etzold]

I'm creating flashcards about app and #machinelearning weaknesses. This is a mini poster of "Moiré Attack (MA): A New Potential Risk of Screen Photos" that will be presented as a poster at #NeurIPS2021.

[Daniel Etzold @_etzold]

I'm creating flashcards about application and machine learning weaknesses. This is a mini poster of "Manipulating SGD with Data Ordering Attacks" that will be presented as a poster at #NeurIPS2021.

[Daniel Etzold @_etzold]

Created a new #security #flashcard. This time it summarizes the minimal steps to create an encrypted device on Linux on the command line with cryptsetup. Now the deck has grown 41 cards, available at https://t.co/oWeAntYxhK #appsec #infosec #cryptsetup #Linux

[Daniel Etzold @_etzold]

Created a new #security #flashcard about Trojan Source a #vulnerability that exploits features in Unicode required for left-to-right and right-to-left languages to inject vulns into source code. The deck now has 40 cards, available at https://t.co/oWeAntYxhK #appsec #infosec

[Daniel Etzold @_etzold]

@binitamshah An example of a supply chain attack. I've used a similar example for my security flashcards. @secflashcards

[Daniel Etzold @_etzold]

A new example of a supply-chain attack. A #security #flashcard with a similar scenario of this type of attack already exists and is available at https://t.co/oWeAntYxhK. #appsec #infosec

[Pierluigi Paganini - Security Affairs @securityaffairs]

Supply-chain attack on #NPM #Package #UAParser, which has millions of daily downloads
https://t.co/NJs4h1OdsO
#securityaffairs #hacking #malware

[Daniel Etzold @_etzold]

Interesting #ml #security paper at #ICCV2021: "data-free #adversarial perturbations for practical black-box #attack" I've created a summary on a security #flashcard and added it to https://t.co/oWeAntYxhK @ICCV_2021

[Security Flashcards @secflashcards]

Inspired by the excellent work of @S1r1u5_ I've added a new #flashcard about prototype pollution to #Security Flashcards. The updated card deck is available at https://t.co/Yq9C5TdXlf. If you already have a download link, use it to get the new version for free. #appsec #infosec

[Security Flashcards @secflashcards]

#Security #flashcards has now grown to 36 cards - 30 application and 6 machine learning #weaknesses. If you already have downloaded a card deck use your download link to get the new version for free! Available at https://t.co/Yq9C5SWlWF. #ml #appsec #infosec

[Daniel Etzold @_etzold]

Interesting #ml #security paper: "black-box attacks on sequential recommenders via data-free model extraction" at #RecSys2021 I've created a summary #flashcard and added it to https://t.co/vDjccQT3Nw. @ACMRecSys #RecSys #sketchnotes

[Daniel Etzold @_etzold]

As machine learning is increasingly used also more and more vulnerabilities in #ML models are found. Tomorrow I'm giving a keynote at the online edition of the #ITSecuritySummit in which I present some of them.

[Security Flashcards @secflashcards]

Application #security weaknesses as #flashcards. Here’s another flashcard I've created: command injection. More flashcards are available at https://t.co/KM2IlKWsk5. #appsec #infosec #sketchnotes

[Daniel Etzold @_etzold]

Top cyber security conferences ranking https://t.co/uYcV5c66MY

[Daniel Etzold @_etzold]

I've changed my twitter handle to @_etzold. It‘s shorter, easier to read and has no additional alphanumeric characters which obfuscate my name.