Craig Knott

Technical Leader, Software & Security Architect

[Craig Knott @craigknott92]

I’m excited to share that my team and I just published a blog post detailing how we’ve evolved Atlassian's deployment controls over the past few years.

Check it out here: https://t.co/b3KlZt80Z5

I’d love to hear your thoughts. #Atlassian #SoftwareSecurity #DevOps

[Atlassian @Atlassian]

Atlassian for Startups is here to take you from MVP to IPO. 🚀

Eligible startups can now get up to 50 seats for free for 12 months! ✨

Apply today: https://t.co/jcKKb35yTZ

#AtlassianforStartups

[Chainguard ⛓️ @chainguard_dev]

THE WAIT IS OVER⚡️ Introducing...
🐙 Wolfi, the 1st #Linux (un)distro designed w default security measures https://t.co/ofxJRyQe0p
🎓 Chainguard Academy, the 1st interactive edu platform dedicated to software security https://t.co/AXVbscS4PG
🪄 Enforce GA https://t.co/ywSBYBbwZf

[PyPA @ThePyPA]

The PyPA has voted to accept two new member projects: https://t.co/iX9r0T3oeI & the corresponding GitHub action, https://t.co/RVlB80Qkpx 🎉

pip-audit audits Python environments and dependency trees for known vulnerabilities, and the action lets you easily run these audits in CI.

[Dan Lorenc @lorenc_dan]

CVE deep dive!

Today I'll look at how scanners work rather than a CVE.

I'll focus on how they find packages, because that's the first step in looking for CVEs.

I'll show a blind spot scanners have with many popular docker images, and how you might be missing a LOT of vulns.

[Python Package Index @pypi]

Today we received reports of a phishing campaign targeting PyPI users. This is the first known phishing attack against PyPI.

We’re publishing the details here to raise awareness of what is likely an ongoing threat.

[puerco @puerco]

Given the gravity of the times, I have decided to open source my latest security scanner that complies with some of the latest requiriements.

It's really easy to use, and you can pipe binaries, images - anything really- through it.

You can thank me later 👍🏽

[Las Vegas Locally 🌴 @LasVegasLocally]

The #DEFCON guys had a lot of fun last night

[Craig Knott @craigknott92]

Verifying myself: I am cknott on https://t.co/9uCeIgkC7u. dSuPNf7rgLXogZTKqiJEXomNwk5anPJh8Q5O / https://t.co/Ekd8a29GTB

[Craig Knott @craigknott92]

Unexpected surprise in the mail today from @offsectraining how cool.

[Craig Knott @craigknott92]

Thanks @KingSysiphus for starting the challenge 😂🙃

[Craig Knott @craigknott92]

View my verified achievement from @offsectraining. https://t.co/jVJz7pwXnR

[Corey Quinn @QuinnyPig]

I’ve begun using ‘aws sync’ to put truly vast quantities of data into other people’s misconfigured @awscloud S3 buckets, on the theory that while you might ignore a politely worded email from a security researcher, you won’t ignore a $4 million bill surprise.

[Craig Knott @craigknott92]

@nextdayvideo Nice work!

[Mike Cannon-Brookes 👨🏼‍💻🧢🇦🇺 @mcannonbrookes]

Huge news in the @Atlassian IT teams world today. Two kick ass new products in the family! We launched ⁦@JiraOps⁩ - our new platform for Incident management - and acquired ⁦@OpsGenie⁩ - the leading incident alerting tool. 1/2 https://t.co/YgaYnFPady

[Ruben M @ruboinc]

Brought home a Dell server.

Wife: can I see the server?

Me: here’s the server.

Wife: why do you need that?

Me: For testing.

Wife: no.... I mean I thought you went #serverless?

Me: 😶

Wife: I mean... you have the t-shirts and stuff...

Me: 😶

I had no words.

[Craig Knott @craigknott92]

Welcome #Atlassian family #OpsGenie and #JiraOps

[Atlassian @Atlassian]

Exciting announcements from #AtlassianSummit https://t.co/LVeFZY7gie : Launch of #JiraOps + an agreement to acquire @OpsGenie! See how we help IT ops teams resolve incidents faster & incur fewer incidents over time.

[Corey Quinn @QuinnyPig]

The secret to getting off of calls you don't want to be on is to hang up in the middle of your own sentence. Only a maniac would hang up on themselves, so you must have gotten disconnected.