James Jardine

Application Security Professional. I focus on helping organizations get more value from their application security program.

[James Jardine @JardineSoftware]

This is a good example of how what we do in security is not much different than any other challenges we face.

[DevelopSec @DevelopSec]

Ep. 125: From Flat Tires to AppSec: The Power of Tools and Processes has just been released.

Just like changing a flat tire, the right tools, process and knowledge can make all the difference in a successful outcome.

https://t.co/r4Egx8maXq

[DevelopSec @DevelopSec]

Just posted Ep. 123: Goals of Security Culture - Sort of?

I share some thoughts on how security is a part of everyone's roles and some ideas of how to help build that awareness.

https://t.co/fPnK9LMiQM

[DevelopSec @DevelopSec]

Should secure development be part of a developer's required skillset / experience?

Ep. 122: Integrating Security Responsibilities into Development has just been released!!

Check out the full episode: https://t.co/NXoW3AamqR

[James Jardine @james__jardine]

It is no longer just the company paying, ransomware attacks are coming after your money.

James: "They are sending out emails directly to those patients, those users and demanding, in this case it was $213 US dollars that they had to pay within 24 hours."

Full Video: https://t.co/jary5ApRJi

[DevelopSec @DevelopSec]

Ep. 121: Evolving Ransomware: Unique Tactics for Payment is now available.
Check out some unique tactics we have seen used to collect payment.

https://t.co/uzufJhk2JN

[Jeremy Long @ctxt]

Our PSIRT team has an opening! ServiceNow is the best place I've ever worked. The PSIRT team is doing some really interesting work - take a look at the role:

Staff Product Security Engineer | Web App Vulnerabilities https://t.co/qxDTyb5waW via @servicenow

#hiring #psirt

[DevelopSec @DevelopSec]

if you are using Firebase, here is their security checklist: https://t.co/FGTCQc7Ew9

[James Jardine @JardineSoftware]

Does the ASP:TextBox TextMode provide input validation?

I posted some information about what that attribute does and does not do.

https://t.co/pqVJwmAO4P

[James Jardine @JardineSoftware]

If you are using HAR files, this is a valuable resource.

[DevelopSec @DevelopSec]

Do you use HAR files for troubleshooting? Whether you are the person receiving the HAR file or sending it, it is important that it doesn't contain sensitive information.

Cloudflare has made a HAR sanitizer available. https://t.co/1cjVdyjbK8.

[Down the Security Rabbithole Podcast @DtSR_Podcast]

What do y’all think of the new bumpers?
You like? You love?
Leave an iTunes review/rating if you can, please, it helps give suggestions to others and makes it easier to find the show.

Thank you!
@Wh1t3Rabbit @JardineSoftware

[Down the Security Rabbithole Podcast @DtSR_Podcast]

Great episode, with a topic worth revisiting, and of course the best guests in the industry.
@shawnetuma @Wh1t3Rabbit @JardineSoftware

[Akeyless Security @akeylessio]

🎙️Solving #SecretZero," decrypting "distributed fragmented crypto" (which is a bit mind-blowing) and the art of #SecretsManagement with @akeylessio @OdedHareven on the latest @DTSR_Podcast with @Wh1t3Rabbit and @JardineSoftware 🎧 Tune in! https://t.co/ktFTYYfPxI

[Down the Security Rabbithole Podcast @DtSR_Podcast]

Catch a live recording of the #DtsR podcast as we record it - https://t.co/h4YLUmTRcJ Check us out! #live #youtube @Wh1t3Rabbit @JardineSoftware @domvogel

[James Jardine @james__jardine]

Stack traces and other error information are often seen as low risk, but there are those outliers where it can be much more.
https://t.co/peYCzOb3UN

[Down the Security Rabbithole Podcast @DtSR_Podcast]

Episode 565 of the @DtSR_Podcast is LIVE!
Check it out, this week @Wh1t3Rabbit & @JardineSoftware host the one and only Jim TIller.
YouTube link: https://t.co/aBJkd6vhSQ
Pod (audio) link: https://t.co/qtJ6v9s95u

[DevelopSec @DevelopSec]

Curious why you can't just rely on client-side validation? Check out this quick post. https://t.co/Jt3snMdCFf

[James Jardine @JardineSoftware]

Private secrets, keys and tokens are a common issue in code repositories. GitHub just added a feature to help detect/block these on push requests.
https://t.co/0raH0J018z
#cybersecurity, #appsec

[James Jardine @JardineSoftware]

Ep. 120: Addressing Root Cause - Vuln Components
Thoughts on addressing the root cause vs. symptoms https://t.co/gnaCUBDXuo

[James Jardine @JardineSoftware]

What is the biggest change you have seen in application security over the past 5 years?

[James Jardine @JardineSoftware]

If you are using S3 buckets, make sure you have them appropriately configured and also that you are not storing protected data in public buckets. https://t.co/QmtWW5WZAa