#ThisIsNotOK - @ICEgov gunning down Americans in the streets, including a mom and a nurse, with no apparent criminal record nor intent, just for daring to exercise their #FirstAmendment and #SecondAmendment rights.
PM @MarkJCarney, thank you for your inspiring words at #Davos2026—refreshing to hear principled North American leadership on the world stage. #NameingReality.
(Half-joking) is it too late for the U.S. to apply as Canada’s #11thProvince?
At @aiDotEngineer#AIEngineer World's Fair this week. https://t.co/FgjwPLGWGd
DM me if you are interested to meetup during the event.
Great workshops today :)
Inspired by @decius, @cyberbgone & @doctorow's #DEFCON32 talks. Working to disenshittify the web through user-controlled AI filtering. My proof-of-concept: https://t.co/fewZypudL5
Looking for collaborators, similar projects, or potential incubators.
@KrebsOnSecurity Would you consider providing input on our journalism evaluation framework? Building tools to help people assess news quality using AI: https://t.co/fewZypudL5
Darthcrob's presentation at NEO ISC2 last night got me really fired up about @openssf
Checkout https://t.co/SePrCN4B2s (e.g. ai-ml-security, scorecard, security-baseline) - potentially very useful for AI/ML, software devs, product owners, appsec, vendor / supply chain risk mgt
Friends Don't Let Friends Deploy via Click-Ops 🚫🖱️
Bicep & Terraform deployment examples to cure your AI-102 Click-ops blues 🔗 https://t.co/HlFhAvjpXz
👍Avoids secrets in code issue from previous post: https://t.co/5Ly0C3RkCF #InfrastructureAsCode#AzureAI#Terraform#Bicep
#secretsincode anti-pattern spotted in @Microsoft#AzureAI training
References, @Azure Key Vault and @1Password solution examples:
https://t.co/pdutTOE7Ux
Use a #vault. This is the way.
OWASP Cheat: https://t.co/sSK0k3d2uI
Impressed by @brunopassos & @beyang talk on "Building AI Agents with Real ROI in Enterprise SDLC" at @aiDotEngineer#AIEngineerSummit
https://t.co/Sht9YvjhPk
AI can tackle toil (feature flags, code migration) while unleashing human talent—not replacing it.
#AIROI#FutureOfWork
#secretsincode anti-pattern spotted in @Microsoft#AzureAI training
References, @Azure Key Vault and @1Password solution examples:
https://t.co/pdutTOE7Ux
Use a #vault. This is the way.
OWASP Cheat: https://t.co/sSK0k3d2uI
@BHinfoSecurity@CoinSecPodcast
re: BHIS 11/30 podcast comment on how KYC during account signup is an unacceptable privacy and security risk (due to insecurity, etc.)
this can probably be fixed with switching to zero-knowledge rollups or decentralized identity.
WTF @PaloAltoNtwks? Is there really no feature to opt-out of sharing DNS telemetry with Palo Alto Networks (e.g. autofocus)?
Customers shouldn't have to setup a security policy to block firewall management traffic, just to prevent their network activity from being leaked.
#SUS
Used @Burp_Suite 4 years, I trust @PortSwigger. Their training & cert program is a nice idea, but I call BS on their proctor, @examity KYC requirements (e.g. photo ID).
@IntelTechniques Extreme Privacy: What It Takes to Disappear (2nd Ed.) https://t.co/htCbcFEg6G is solid. Great place to send VIP / exec clients to for personal information disclosure remediation.