Cade Cairns

Security engineer

[Ryan Hurst @rmhrisk]

I am happy to announce that GCP customers can now get certificates via ACME! This uses https://t.co/iR3yxwnyUw so when customers terminate TLS in VM, x-cloud, or on-prem they can have the same great device ubiquity they enjoy when using GCP Managed TLS.
https://t.co/S0IDcwKXgR

[Digital Asset @digitalasset]

We are thrilled to announce that DAML, our smart contract language, is now open source. This will enable broader adoption by developers and allow tech platform vendors to use DAML. Read more here: https://t.co/RXSWpXN0N2 #DAMLDriven #smartcontracts

[Web Security Academy @WebSecAcademy]

The Web Security Academy contains free training on web security vulnerabilities, techniques for finding and exploiting bugs, and defensive measures. It has interactive learning materials with real vulnerability labs that you can access instantly online. https://t.co/kcx2V9k4V2

[Cade Cairns @cairnsc]

Can’t help but to feel a sense of resentment when a Keurig machine spits into my mug when it’s done. Not that I usually use them.

[REcon @reconmtl]

Recon CFP is out! Registration is open! Recon Montreal will be held 28-30 of June at Hilton Double Tree (Same hotel as last year but they change name) with training before and after the conference. Thanks for your patience! Can't wait to see you! https://t.co/icmQg68aZM

[Cade Cairns @cairnsc]

@nminnov @vitalethomas @martinfowler If Domain is specified, then subdomains are always included. Take a look under “Scope of cookies”: https://t.co/29DidAURaQ

[Niels Provos @NielsProvos]

A New Age of Warfare: How Internet Mercenaries Do Battle for Authoritarian Governments https://t.co/JEfapvl4lM

[Cade Cairns @cairnsc]

Seen on /r/netsec: Ironing out Docker. Nice simple tips. https://t.co/XUgbFGAQYe

[OWASP AppSec California @AppSecCali]

We are happy to release the video recordings of #AppSecCali 2019 talks! Enjoy and share!
https://t.co/fidpbWHVaw

[Cade Cairns @cairnsc]

Good article, PKI as a Service with Hashicorp Vault https://t.co/kK1niLUK6B

[Cade Cairns @cairnsc]

@panoramaresort You can go wrong because there is 60+ minute line to get lift tickets. Maybe time to get computer kiosks and surplus tills for busy days to improve customer flow? How about people with iPads that can process sales? This is really bad

[Cade Cairns @cairnsc]

@art3misnyc Thanks! I gave that a try on iOS and it looks like they now prevent it. Using mobi files to answer your other q

[Cade Cairns @cairnsc]

How can I get an ebook >50MB to my #Kindle library? None of the solutions I found online seem to work

[Adrian Sanabria (@[email protected]) @sawaba]

Equifax SCANNED for vulnerable versions of Struts, but found nothing.

Why?

They forgot to use the recursive flag and were just searching the root web directory with the tool.

I can imagine the commentary:
"WOW, this tool is FAST!"
"Yeah, good thing we're not vulnerable!"

[Nitzan Shapira @nitzanshapira]

Something to think about #reinvent

[Chris Wysopal @WeldPond]

3rd party vulnerable library risk. “73.3% of outdated clients were actually safe from the threat. This is the first work to confirm that analysis, at library level, is indeed an overestimation.” Veracode data confirms. https://t.co/617XSQbD2u

[Michæl Brunton-Spall @bruntonspall]

Does agile make us less secure? (slides from @acconf keynote this morning) https://t.co/YHFd6A6Pi2

[Cade Cairns @cairnsc]

Looking at wi-fi meshes. Netgear needs some help in the industrial design department.

[Cade Cairns @cairnsc]

Good set of policies, tools, and references for enterprises managing open source programs and using open source: https://t.co/IzRH4UhyU0

[Cade Cairns @cairnsc]

Nice collection of links to #AWS testing tools: https://t.co/M3OM02QQB0