John Poulin

Father. Husband. Mainer.

CTO @CloudSecPartner, ex-GitHub

[John Poulin @forced_request]

@HackingDave It’s wild, because my wife and I were having this exact conversation two days ago about how we need to introduce a paraphrase for our son too!

[Phrack Zine @phrack]

At long last - Phrack 72 has been released online for your reading pleasure!

Check it out: https://t.co/R0PKIifRDA

[John Poulin @forced_request]

@csoandy What happened? I’ve seen someone else indicate that they too were kicked off the floor.

[Satya Nadella @satyanadella]

A couple reflections on the quantum computing breakthrough we just announced...

Most of us grew up learning there are three main types of matter that matter: solid, liquid, and gas. Today, that changed.

After a nearly 20 year pursuit, we’ve created an entirely new state of matter, unlocked by a new class of materials, topoconductors, that enable a fundamental leap in computing.

It powers Majorana 1, the first quantum processing unit built on a topological core.

We believe this breakthrough will allow us to create a truly meaningful quantum computer not in decades, as some have predicted, but in years.

The qubits created with topoconductors are faster, more reliable, and smaller.

They are 1/100th of a millimeter, meaning we now have a clear path to a million-qubit processor.

Imagine a chip that can fit in the palm of your hand yet is capable of solving problems that even all the computers on Earth today combined could not!

Sometimes researchers have to work on things for decades to make progress possible.

It takes patience and persistence to have big impact in the world.

And I am glad we get the opportunity to do just that at Microsoft.

This is our focus: When productivity rises, economies grow faster, benefiting every sector and every corner of the globe.

It’s not about hyping tech; it’s about building technology that truly serves the world.

[John Poulin @forced_request]

Looking forward to giving a webinar tomorrow on Defense-in-Depth engineering. We’ll talk through four key areas to help harden our applications and systems, including real tangible examples that folks can start utilizing right away.

https://t.co/rw81b7HiTe

[HackGDL @HackGDL]

Michael McCabe de @CloudSecPartner nos explica como asegurar nuestra infraestructura con Terraform, incluyendo sus vulnerabilidades y las mejores prácticas para proteger los sistemas de IAC.
https://t.co/avZzzT5RCH
#HackGDL #HackGDL2025 #hacking #cybersecurity #Mexico

[Alvaro Muñoz @pwntester]

No solutions yet for the challenge. Anyone up for some Actions exploitation?

[John Poulin @forced_request]

I know folks still have annual security budget. This training is like the gift that keeps on giving. Good virtual training is hard to come by - don’t miss this one.

[Ken Johnson @cktricky]

We still have room left in @sethlaw and I's virtual secure code review course held next week, Oct 2 & 3. Come join us and learn:

- Manual source code review techniques
- How to use Gen AI to make your reviews more efficient

Register here! https://t.co/g08Sd7evcf

[rootsecdev @rootsecdev]

Amen to the 30/90 password resets. If you are reading this and your enterprise is doing this, I’m here to tell you right now this type of password policy at your org is doing more harm than good.

[John Poulin @forced_request]

@absoluteappsec @CloudSecPartner @sethlaw Looking forward to the conversation!

[John Poulin @forced_request]

@cktricky @wickett This is amazing. Great work, but all-in-all very well deserved!

[John Poulin @forced_request]

Fairly certain I spend half my time online selecting which cookies I want sites to be able to access.

How did we get ourselves into this mess?

[John Poulin @forced_request]

@manicode Sounds like a much more relaxing experience!

[John Poulin @forced_request]

@enygma That looks like a typical weekend in my house :)

[Jeff Barr ☁️ @jeffbarr]

Thank you to everyone who brought this article to our attention. We agree that customers should not have to pay for unauthorized requests that they did not initiate. We’ll have more to share on exactly how we’ll help prevent these charges shortly.

#AWS #S3

How an empty S3 bucket can make your AWS bill explode - https://t.co/KRgL9C1u9p

[Moxie Marlinspike @moxie]

As a kid, the magic of software was that I could sit down and make something with no license, degree, or ~money.

Gotta say, publishing an iOS app from scratch today is a verrry diff vibe. I wonder how many young people's ideas we've lost at "and now register for a DUNs number."

[Jeff Barr ☁️ @jeffbarr]

Heads-Up: Many of the current generation of Amazon RDS and Amazon Aurora SSL/TLS certificates will expire in 2024 and you need to rotate them ASAP.

Learn more at https://t.co/s9z00UBFzI

#AWS

[John Poulin @forced_request]

@aymannadeem @vcsjones @patricktoomey Wasn't this flow automated at some point?

[John Poulin @forced_request]

One of my favorite talks I attended was at HOPE X, 9 years ago. @deviantollam and @SgtHowardPayne dropped some knowledge on elevator hacking, which has stuck with me to this day.

You will learn amazing things you never expected to hear about. Get a ticket while you can.

[The HOPE Conference 🏳️‍🌈🏳️‍⚧️ @hopeconf]

The late Cheshire Catalyst shares how he got his own area code at The Last HOPE (2008).

HOPE XV will take place from July 12-14, 2024 at St. John's University in Queens, New York City

Tickets still available at https://t.co/3Wqp5Qg1RJ. 10% of April sales are donated to the @EFF