jassec

[jassec @jas_ssl]

@mitchellh That sounds like a terrible idea to implement if you don't want to face huge tech debt or a non-fixable vulnerability. Maybe a more balanced approach is not updating to latest version automatically, and stay 2-3 minors versions behind.

[jassec @jas_ssl]

@WebSecAcademy Disagree, specially having AI in the mix. The "try harder" effect when you're out of external help is when magic happens. Old gen hackers are used to think that way, and still leverage using new gen tools, it doesn't happen the other way around.

[jassec @jas_ssl]

@_r_netsec Now I'm sure they're regretting ghosting me after 4 interviews years ago 😂

[jassec @jas_ssl]

@SendSafely @Burp_Suite @PortSwigger Have you required to build custom extensions or BChecks? Burp DAST is great but very few extensions available :-(

[jassec @jas_ssl]

@chemaalonso @3grander @3grander barato me parece comprar 100 balizas y ponerlas en la carretera de casa al trabajo a ver si consigo no pillar atasco! Buen artículo señor!

[Nicolas Krassas @Dinosn]

Researcher Wipes White Supremacist Dating Sites, Leaks Data on https://t.co/6CjhsJgvfP https://t.co/GVJqEo8U5K

[jassec @jas_ssl]

@gothburz You should do a lecture in Stanford, also become a main character in a Silicon Valley reboot

[Swissky @pentest_swissky]

The minefield between syntaxes: exploiting syntax confusions in the wild - @yeswehack
https://t.co/877g4gP6t8

[jassec @jas_ssl]

@nullenc0de Agree, but still better than those pentests which are just a expensive fancy export of Burp scans

[jassec @jas_ssl]

@kmkz_security Problem is who are in charge of Security are often skill-less since they are just managers and don't understand what they are purchasing and how it works

[jassec @jas_ssl]

@patowc Estamos a pocos años de que los políticos saquen una ley para obligar a regar las cosechas con Brawndo

[Glosarix @GlosarixOficial]

@patowc @Sergio_deLuz @TheXXLMAN @Ophuscado @jaumepons @cibernicola_es @bandaanchaeu @laligagate @CantabriaRadio @betazeta_dev @Killingmoooon @Jose19816756258 ...darle visibilidad porque en breves activo la web para ir todos a una.

[Patrick Breyer #JoinMastodon @echo_pbreyer]

🇬🇧Public pressure works: Belgium, Finland & Czechia will NOT approve the #ChatControl mass surveillance law in October. But other governments whose vote is crucial are still on the fence. Urge them to protect our digital privacy and encryption now: https://t.co/I5NJcJAHR8

[hackplayers @hackplayers]

Qantas cuts executive bonuses by 15% after a July data breach https://t.co/1mLxAahsoY

[Nicolas Krassas @Dinosn]

Qantas cuts executive bonuses by 15% after a July data breach https://t.co/C7qzeeS2dW

[jassec @jas_ssl]

@genbeta Reunidos, trabajar es otra cosa totalmente distinta

[Alejandro Ramos @aramosf]

💰~6.113 millones de dólares robados en cripto: y... ¿hemos aprendido algo? Voy a volver a repetir el número, por que reducido parece algo más pequeño: ¡¡¡6113000000 $!!!

https://t.co/aSZSgTJxsK

[jassec @jas_ssl]

@slonser_ @grok give me an example of an oauth token leak using this technique, in what step of the oauth flow be the malicious img be loaded?

[0xblackbird @0xblackbird]

Mega thread on CSRF

[jassec @jas_ssl]

@0xacb Solved too, DM please