Ben-Hur Santos Ott

Just a guy that loves code, security, and agents | Opinions are my own 🗡️

[Ben-Hur Santos Ott @benhurott]

E ae champs! Ta na mão o vídeo sobre Typesafe AI e o modelo Jev!
O que é? Como se usa? Substitui um LLM?
Bora ver na prática!

Um excelente domingo!

https://t.co/EL1Jgh3TBJ

[Ben-Hur Santos Ott @benhurott]

@LiveOverflow It took 5 sec and a mini heart atk to get it hahaha

[Ben-Hur Santos Ott @benhurott]

@typesafeai AI is awesome. It could really, really, really change the way we automate decisions in cybersecurity.
Classify alerts, triage in large scale, reduction of noise in human in the loop, and much more.

https://t.co/ZU9fuqrLDA

[Ben-Hur Santos Ott @benhurott]

GTIG AI Threat Tracker: From Prompting to Autonomy – The Evolution of Adversarial AI @googlecloud https://t.co/sTgBKMgYIw

[Ben-Hur Santos Ott @benhurott]

This is the most direct, clear and action-lead manifesto about development in the AI era I read recently.

[Clare Liguori @clare_liguori]

I just published a manifesto for all the developers out there who use an AI coding tool, but feel like they're not shipping much faster

I wrote 10 principles for changing how you build software with AI, based on what I've seen work for teams across Amazon
https://t.co/smq7Rt5QkZ

[Uber Engineering @UberEng]

https://t.co/4E91KTbzDU

[Ben-Hur Santos Ott @benhurott]

E aeee champs, beleza? Aproveitando o domingo para lançar a mais longa ⏳conversa fiada possível sobre desenvolvimento seguro na era do AI-SDLC.

Senta que la vem história 😅

https://t.co/wvZ941y6NG

[Ben-Hur Santos Ott @benhurott]

@AnthropicAI just released an article about AI Native SDLC.
About 40 min read content.

https://t.co/pwa5Tqsict

[Ben-Hur Santos Ott @benhurott]

@DanielMiessler And it is become easier everyday to get it from inside. The amount of untrusted data that we are consuming, processing and integrating in our workflows scares me a lot. Everything is an insider.

[Ben-Hur Santos Ott @benhurott]

This is good. It will start enabling registries in a standard way.
But @vercel could we make the “version” required?
It would be helpful to start this era with immutability and attestation in registries. So we can track the version and signatures in a manifest locally.

[Vercel @vercel]

Introducing Agent Plugins, an open standard for extending agents.

Supports Agent Skills and MCP, with more to come.

Built in collaboration with: @awsdevelopers, @code, @cursor_ai, @github, and @openaidevs.

https://t.co/duFCQqigZD

[Guia de AppSec @guiadeappsec]

Boa tarde champs! Vídeo novo no canal!

Hoje vamos aprender como encontrar misconfigurations em AWS com o Nuclei!

Para isso, vamos criar nossa conta na aws, criar a infra com terraform e explorar com o nuclei.

https://t.co/PE84uiQYL8

[Ben-Hur Santos Ott @benhurott]

@gabogaldino Sem dúvida o academy da Portswigger.
https://t.co/6RhLoArgyt

Além de explicar os tópicos, pode colocar em prática nos labs gratuitos.

[Ankita Gupta @ankitaiitr]

GitHub Copilot is incredible. If you are in appsec, you should try it today.

I am sharing 16 use cases of GitHub Copilot for every Security professional.

--

[Guia de AppSec @guiadeappsec]

Excelente domingo champs! Hoje tem vídeo novo no canal comentando as novas funcionalidades de segurança no github!

https://t.co/3O8WlQfkg8

#appsec #github #security

[Cássio B. Pereira | AppSec @cassiodeveloper]

#APPSEC EM ALTO NÍVEL | #DEVSECOPS PODCAST #27 https://t.co/7XI1C9n275 com @bhrott do @guiadeappsec #InfoSec #Cyber #Security

[Guia de AppSec @guiadeappsec]

Video novo no canal: OWASP OpenCRE!

https://t.co/xKUvhm9TX5

#appsec #owasp #opencre

[Truffle Security @trufflesec]

🚀 Excited to open source our collection of API key rotation tutorials for #AWS, #GitHub , and more. After detecting a leaked secret with TruffleHog, the most effective way to remediate a leaked secret is with API Key rotation.

👉Check out the guides: https://t.co/Od87TNkBJE

[Guia de AppSec @guiadeappsec]

E saiu a AppSec Newsletter 0008!

https://t.co/vcnW6tukRz

#appsec #newsletter

[Guia de AppSec @guiadeappsec]

Saiu vídeo novo no canal champs! Essa foi a talk no WSS Sec.Con 2023 com dicas de como escalar Threat Modeling!

https://t.co/nyRZfWX1Io

[Ben-Hur Santos Ott @benhurott]

Olha a treta ai eim :)

[Jerry Gamblin @JGamblin]

Time to update your corporate firewall rules to block: global.rel.tunnels.api.visualstudio..com