Security Consult with Michael

Senior Security Engineer | Cloud Security (Azure) · DevSecOps · ISO 27001 · ISO 22301 · ISO 20000 · PCI DSS · SWIFT CSP | Securing Cross-Border Payments

[Security Consult with Michael @hackrowd]

Monday fix: search your code for "TODO: auth" and "skip verification". Whatever you find is this week's priority.

[Security Consult with Michael @hackrowd]

Monday morning nudge: before you open Slack, check that your laptop locks automatically when you walk away.

[Security Consult with Michael @hackrowd]

Security is less about being clever and more about being consistent. The same small checks, every release.

[Security Consult with Michael @hackrowd]

New week tomorrow. One thing for Monday: make sure every admin account has MFA. Just that one.

[Security Consult with Michael @hackrowd]

Question: what is one security tool or habit you think is overrated?

[Security Consult with Michael @hackrowd]

Question: what security habit would you teach a new developer on day one?

[Security Consult with Michael @hackrowd]

Founder checklist #8: your payment webhook checks the signature before trusting anything it says.

[Security Consult with Michael @hackrowd]

If your app shows a full card number, BVN or account balance in a URL, it is also in browser history, proxy logs and analytics tools. Keep sensitive data out of URLs.

[Security Consult with Michael @hackrowd]

Sunday security sermon: thou shalt not paste production passwords into the family WhatsApp group "for safekeeping".

[Security Consult with Michael @hackrowd]

Plain words: "encryption" scrambles data so only the right key can read it. It protects data. It does not decide who is allowed the key.

[Security Consult with Michael @hackrowd]

Sunday small win: delete one unused cloud resource. Old test servers and forgotten storage buckets are where surprises live.

[Security Consult with Michael @hackrowd]

Sunday morning nudge: change one weak password today. Just one. Start with your email.

[Security Consult with Michael @hackrowd]

Teach one older relative how to spot a fake bank message this weekend. That might be the most valuable security work you do all month.

[Security Consult with Michael @hackrowd]

Saturday thought: the best security budget is the one spent before the incident. After is just more expensive and in a hurry.

[Security Consult with Michael @hackrowd]

Question: what scam message have your family members received this month? Sharing helps others spot it.

[Security Consult with Michael @hackrowd]

Question: which do you trust more, a security tool your team set up last year, or a person who checked last month?

[Security Consult with Michael @hackrowd]

@the_omotola 😂 😂😂😂

[Security Consult with Michael @hackrowd]

@claudeai please can i get a reset, i am 90% in before weekly reset

[Security Consult with Michael @hackrowd]

Founder checklist #7: you get alerted when someone creates a new admin account. Not a weekly report. An alert.

[Security Consult with Michael @hackrowd]

OTP over SMS is better than nothing, but it is the weakest second factor. For staff and admin accounts, use an authenticator app or passkeys.