efriese

Software Security Geek. Coffee Shop Owner. Auburn Tiger.

[efriese @efriese]

In almost 20 years of IT security I can say this is the worst captcha I’ve seen. @EASPORTS

[efriese @efriese]

@tim_cook thank you for the donation to Robertsdale High School Band! Go Bears and War Eagle

[Troy Hunt @troyhunt]

Pick any mainstream service you use and look at the minimum password length. Now look at at where it falls on this chart and ask yourself - “why is it so”? Have they not seen the chart? Or is the chart not reflecting some other *critical* consideration when setting a min length?

[efriese @efriese]

@thedarktangent That's a no for me dawg. And I'm pretty coffee forward.

[efriese @efriese]

Was able to make this work, but requires some alteration due to tomcat user permissions. #Spring4Shell

[Jack Rhysider 🏴‍☠️ @JackRhysider]

Here's a bunch of books I recommend about hacking stories.

https://t.co/h8qvGPSSd9

[efriese @efriese]

@shehackspurple The last time I talked with my Mom on the phone we talked about Log4j.

[C-00000291*.sys emotional support team @InfoSystir]

Y'all......I guess my power company just had to take down the grid for an hour because of a breach 👀👀👀👀

#log4j

[efriese @efriese]

Not all heroes wear capes.

[Volkan Yazıcı @yazicivo]

Log4j 2.16.0 has already announced this morning and I have just completed my 6am to 4am shift!😵‍💫World is on fire 🔥, yet it was a pleasure to do something with all Log4j developers: @rgoers @RemkoPopma @carter_kozak @jvz @GaryGregory, Ron Grabowski, Robert Middleton. 🍩

[efriese @efriese]

Log4j2 2.15.0 and noFormatMessageLookup=false doesn't completely mitigate CVE-2021-44338. Apache is recommending 2.16.0. https://t.co/iTkCqLeN44 #log4j #Log4Shell

[efriese @efriese]

@CobraMisfit

[efriese @efriese]

@orysegal @anton_chuvakin Not really true. A decent SAST tool would flag tainted data being logged as Log Forging.

[efriese @efriese]

@kuba_suder Thanks for the data visualization. I've been following it for a couple weeks now. I would gladly buy you a beer.

[efriese @efriese]

@ryanaraine Define trust boundaries and validate.

[efriese @efriese]

@SenDougJones I'm literally watching my business fade away. Something is better than nothing Senator. You do know you can pass more than one bill, right?

[efriese @efriese]

Yeah but Huawei is probably okay https://t.co/Yi4o0T9mW0

[efriese @efriese]

Interesting stuff https://t.co/KkAcLXNzbR

[efriese @efriese]

@manicode I stopped reading at thought leader.

[efriese @efriese]

@robertgraham Try explaining the commercial to your 7 year old son.

[efriese @efriese]

@square I know you won't do anything about this but I wanted to voice my unhappiness. As a low average ticket business this increase is huge. It increases my average processing cost from $0.16 to $0.25 (56% increase). You should take coffee shops off your marketing materials.