Weird, loud, partially funny. On topic: overwhelming passionate, Off topic: trying to slip out of room. I'm ¼ Red/Mostly Blue #infosec, hoody-less. Opinions.
Today I was pondering my personal favorite cybersec/infosec “role models”. I was casually looking for a common thread on why I follow some and skip others. (thread)
No. This is false. I helped to create two different billion-user projects at Apple: WebKit and iPhone. I was on these teams from the earliest stages and I never once came close to sleeping at the office. It’s not an essential part of doing great work.
Right. As a heavy tweeter/content creator who is now maintaining BOTH a Twitter and Mastodon presence, here is a short guide to what I have set up, how to do it and lessons I've learned, for others.
TLDR: It's been WAY less hassle than I expected thanks to tips from followers /1
💪 The future of cybersecurity will be determined by you! Join a team that's doing what no other has done before. Our mission is to defeat every cyberattack with autonomous technology. We're hiring globally!
https://t.co/k2N0dQh9P7
#careers#cybersecurity#infosec
Last year, @saligrama_a, @CooperdeNicola, and I discovered serious vulnerabilities in Fizz, an "anonymous" social app built by our classmates.
We responsibly disclosed the issues to the founders… and they responded with legal threats.
@EFF had our backs and we didn't give in.
@IanColdwater @_TwinklePants as things go downhill.... where do people who use Twitter to actually follow important things (say secops (and in Ian's case both secops and activism and i suppose shut post that need said...)
Where do we flee too?
Help us get the word out! We’re hiring an external affairs specialist who will work on strategic communications plans to support the CISA mission, programs, operations, and policies. Apply by 10/31: https://t.co/ZQHUmQpGHr
Sometime in 2001, I walked into a Radio Shack on San Francisco's Market Street and asked for a Cuecat: a handheld barcode scanner that looked a bit like a cat and a bit like a sex toy. The clerk handed one over to me and I left, feeling a little giddy. I didn't pay a cent. 1/
WOW! This is a huge honor and truly appreciate everyone that supported me.
Thank you all SO much, can't believe I won that award with so many amazing folks on the list who equally deserve this honor.
Humbling.
30 cybersecurity search engines for researchers:
1. Dehashed—View leaked credentials.
2. SecurityTrails—Extensive DNS data.
3. DorkSearch—Really fast Google dorking.
4. ExploitDB—Archive of various exploits.
5. ZoomEye—Gather information about targets.
👉Happy Ada Lovelace Day! A.K.A. “Enchantress of Numbers,” Ada is often considered the first computer programmer. I aspire to be an enchantress at something, or at least look as fashionable while doing higher math. In Ada’s spirit, let’s get to 50% women in cybersecurity by 2030!
Unfortunately I wasn’t the only one who fell victim to the layoff demons today. I hope someone hires @xoxogossipgita and @sleepydisease ASAP because they’re awesome humans and journalists.
Mass scanning activity detected from multiple Tor exit nodes targeting Microsoft Exchange servers vulnerable to remote code execution (CVE-2022-41082). #threatintel#ProxyNotShell