Ed

Web developer & security researcher. Senior Pentester @cure53berlin. Author of @securitytxt.

➡️

[Ed @EdOverflow]

After 5 years of work, security.txt is officially an RFC. I am pleased to announce RFC 9116: https://t.co/uIqSRo28ak.

I would like to use this opportunity to thank those who made this possible. Thank you. ❤️

[swisscyberstorm @swisscyberstorm]

The Swiss Federal Government has adopted a report on ethical hacking referencing two @swisscyberstorm 2023 speakers: @EdOverflow and @_oakgul. Read the report here (in German and French): https://t.co/fEf0OivaRP
Watch all SCS talks here: https://t.co/T4IWsfoWad
#SCS23 #bugbounty

[Ed @EdOverflow]

@codingo_ Excuse me, sir. Do you have a moment to talk about our Lord and Saviour, security.txt?

[Ed @EdOverflow]

I will be giving a talk on Coordinated Vulnerability Disclosure (CVD) at Swiss Cyber Storm. If you are interested in attending, please find additional information below.

[swisscyberstorm @swisscyberstorm]

Speaking @swisscyberstorm 2023
Edwin Foudil (@cure53berlin): “Navigating The Coordinated Vulnerability Disclosure Landscape”
Demystifying concepts surrounding CVD and showing solutions to overcome challenges
Program: https://t.co/caloImlhRV
Tickets: https://t.co/CI6KHF0LDo
#SCS23

[Ed @EdOverflow]

I have set up a LinkedIn profile if people want to stay connected: https://t.co/ZezXZze8ar.

[Ed @EdOverflow]

@ElSec_ 👏

[security.txt (RFC 9116) @securitytxt]

Where did you first hear about security.txt?

[Ed @EdOverflow]

@HusseiN98D https://t.co/BaJVNbyL2X

[Ed @EdOverflow]

@Hac10101 This blog post by @infosec_au: https://t.co/F9pQC2IH4K.

[security.txt (RFC 9116) @securitytxt]

How do you pronounce "security.txt"?

[Ed @EdOverflow]

I am working on something fun with @KarimPwnz to address the challenge of repetitive security questionnaires: @BlueMagnetIO (https://t.co/plA065TZXC).

[Ed @EdOverflow]

@corg_e @ctbbpodcast by @Rhynorater and @0xteknogeek

[security.txt (RFC 9116) @securitytxt]

Exciting news! @Apple joins the list of companies with a security.txt file. Now, we only need @netflix to complete the FAANG list. 🙌

[Ed @EdOverflow]

@hacker_ @codingo_ @rub003 going to be jealous. 🙃

[Ed @EdOverflow]

I have been playing around with SvelteKit a lot recently. I wrote a short blog post on adding security headers to SvelteKit applications: https://t.co/MHUrXwlGNZ.

I might do a more long-form one on the security pitfalls of SvelteKit applications at some point.

[Ed @EdOverflow]

@ant0inet 3️⃣ Finally, realising that *.cust.swisscom.ch is out of scope

[Ed @EdOverflow]

Reminder: if you would like to follow my blog via RSS, I have a feed at https://t.co/JSzFBM0zUp. :)

[Ed @EdOverflow]

With references to @hacker_ and @fin1te. Thank you to @KarimPwnz for reviewing a draft.

[Ed @EdOverflow]

I have published a new blog post on my bug bounty methodology: "Learn to build it, then break it" — https://t.co/VlxmU7SbSR.

[Ed @EdOverflow]

@ant0inet There is a recent publication (12 Jan 2023) where the authors explored these factors and even ranked each factor's importance with a survey: https://t.co/AJ4CUWpS1F. Learning and building a career are some of the other factors not mentioned in your tweet.

[Ed @EdOverflow]

Nice blog post by @KarimPwnz on the security implications of command injection in GitHub Actions.

[Karim Rahal @KarimPwnz]

You have command injection in a GitHub Actions workflow. Now what?

Read my blogpost on leaking secrets from GitHub Actions workflows:
https://t.co/NRpLaR9UDu