Mic Whitehorn

Developer and Penetration Tester. Work with @SecureIdeas. Tweets not moderated by employer. Canadian. He/Him. Also at

[Mic Whitehorn @mic_wg]

Reviewing the white paper in preparation for this. It’s available at: https://t.co/RxeER2VOxF

[Kevin "Johnson" Tackett @secureideas]

I am really excited for this webcast Thursday: https://t.co/hRF3sChIaN

Jason Gillam, Mic Whitehorn-Gillam, and I will be discussing this classification taxonomy.

[Mic Whitehorn @mic_wg]

@Pablo21183201 @shehackspurple Huh, odd. I gave you a follow if you want to try again, see if that solves it. Otherwise, my email works. My first name at https://t.co/s0DCszLkYP.

[Mic Whitehorn @mic_wg]

@Pablo21183201 @shehackspurple DMs are open if I can help. Certainly happy to chat about where you’re at and where you’re trying to go.

[Mic Whitehorn @mic_wg]

@scottconnerly @IanColdwater https://t.co/PS1cBQs2pH
“The reports of my death are greatly exaggerated” — ColdFusion, 2021

[Mic Whitehorn @mic_wg]

@IanColdwater @jbeda End of the interview..
Interviewer: Do you have any questions for us?

Me: The job description indicated your organization subscribed to a pattern of socioeconomic discrimination as part of a pay-to-play caste system. Could you expand on that?

[Mic Whitehorn @mic_wg]

@DanielMicay @shehackspurple @Raybeorn Ah, yep. I see MDN indicating that. Looks like it’s had its share of bugs too though. Source: https://t.co/328TWDUrD4
Took a quick look if https://t.co/QRyVgEHbq6 can be petitioned with a correction. Didn’t see one, not sure if their data allows retcons.

[Mic Whitehorn @mic_wg]

@shehackspurple @Raybeorn I would count that as new. Browser adoption takes time, so a publish date on the spec is generally well before the adoption makes the benefit of implementing it tangible. E.g. Cross-Origin-Resource-Policy only saw adoption on Chrome for Android last month per caniuse.

[Mic Whitehorn @mic_wg]

@myraccoonhands @UK_Daniel_Card I suspect the birds you’ve met are very different from the birds I’ve met.

[Mic Whitehorn @mic_wg]

Biggest metalhead in my office is listening to smooth jazz this morning. So... I presume the end is nigh.

[Kevin "Johnson" Tackett @secureideas]

I am pretty excited that @mic_wg and @hotdogggitty are going to be doing a 2 hour webinar on Tactical @owasp @zaproxy They will show you how to use it as part of your penetration testing AND you can follow along using SamuraiWTF. Sign up at https://t.co/RTbbsBm6Rf

[Mic Whitehorn @mic_wg]

@Aktodotio Might want to update this one.
https://t.co/E7qhWOa1BY

[Kevin "Johnson" Tackett @secureideas]

Take a look at our latest blog post about the Risks of AI Generated Content, According to an AI Content Generator https://t.co/Frd3AaEa7V
#AI #Technology #cybersec #infosec #SecureIdeas #ProfessionallyEvil #risks #security #securityconsulting #Artificialintelligence

[Mic Whitehorn @mic_wg]

I made an absolutely terrible anti-xss library for frontend apps. Just came out of beta with the 1.0 release. https://t.co/0WXWFy99p5
Squelch JavaScript interactions that are commonly used for confirming the presence of cross-site scripting flaws, with Golden.js.

[Cory Sabol @84d93r]

For all you #SteamDeck users out there I whipped up a short blog post exploring some of the privacy and security settings that the device has. Check it - https://t.co/p1vFQ6HUoR

I'll also be doing a deep dive on fuzzing various software components of the SteamDeck soon 😎

[Mic Whitehorn @mic_wg]

@MoarGood @secureideas I reckon you just uncap them, press the nib to a sheet of paper, and move it in such a way as to form letter shapes.

[Mic Whitehorn @mic_wg]

@secureideas If you haven’t responded yet, forward it to me. I’m happy to sort it out. 😁

[Kevin "Johnson" Tackett @secureideas]

I really think one of my favorite parts of the open source community is the feedback like this. Total interest in supporting their users. @psiinon is the type of project leader all projects should have https://t.co/tpwXZLSQiC

[Zed Attack Proxy @zaproxy]

The Twelve Days of ZAPmas - @psiinon's feedback to the excellent @secureideasllc blog post series: https://t.co/Gv4ioaS05y

[Mic Whitehorn @mic_wg]

Thrilled to have a guest post from @psiinon to cap off my Twelve Days of ZAPmas series. Nobody knows ZAP better than Simon, and he fills in a few key gaps and errata to make the series as informative as possible. https://t.co/yM6YG2qpqO

[Mic Whitehorn @mic_wg]

@kingthorin_rm @secureideas I just found out about it! That'd be a later follow-up at this point, but I'd love to check it out and write an addendum on it, because it's really a great type of tool to have at your disposal.