Nicholas Arvanitis

Security, hax0ry, Cloud, DevSecOps or whatever the cool kids are calling it these days. Anything posted does not reflect the views or opinions of my employer.

[Nicholas Arvanitis @narvanitis]

@spbail @thebmbennett @Julianlstar @justinmberman I mean…that’s not wrong 😂 although I was more of a punk than metal kid but I do like leather jackets 🙈

[Nicholas Arvanitis @narvanitis]

@IanColdwater Hardest move I ever made was leaving SensePost 💜

[Nicholas Arvanitis @narvanitis]

@4Dgifts @nicowaisman @Laughing_Mantis @Grifter801 @haroonmeer @cynicalsecurity @veorq @marcoslaviero @0xcharlie @ryanaraine @joegrand @charlvdwalt @v3rtig0 @BradleyJayanath Logistics might be tough but:
- Pool
- Paintball

[Nicholas Arvanitis @narvanitis]

@haroonmeer @cynicalsecurity @veorq @4Dgifts @Laughing_Mantis @nicowaisman @marcoslaviero @0xcharlie @ryanaraine @joegrand @Grifter801 @charlvdwalt @v3rtig0 @BradleyJayanath To be fair, knowing my soccer skills, I counted as a handicap more than anything 😂

[Nicholas Arvanitis @narvanitis]

Pure class 💚

[haroon meer @haroonmeer]

I’m super biased, but that’s a great looking flask!

Every year, we send all our customers a little gift from @ThinkstCanary - because... we can, and want to say thanks.

This year, it’s the Rambler from @YETICoolers

[Dino A. Dai Zovi @dinodaizovi]

Come help us keep Cash App's ecosystem of financial services and our Customers' money safe!

We're the Cash Security team and we're redefining how security works with the rest of the organization. We spend 80% of our time writing code and 20% teaching how to think about security.

[Nicholas Arvanitis @narvanitis]

@jvehent Congrats! That’s fantastic!

[Nicholas Arvanitis @narvanitis]

The opportunity to work with and learn from @dinodaizovi should be a massive incentive on its own!

[Dino A. Dai Zovi @dinodaizovi]

Periodic reminder that I'm hiring security engineers for my team on Cash App: https://t.co/KmYeylO7SK (our roles to be posted soon...)

[Nicholas Arvanitis @narvanitis]

@diogomonica Congrats!

[Aaron Levie @levie]

The “conventional wisdom” on Apple for the past decade is that they needed to enter completely new markets to grow. As the world’s first $2T company, it turns out continuing to build better and better products and services works just fine.

[rands @rands]

Spend some time here: https://t.co/3Em9lT1utR

[rands @rands]

I approve of this “synergy” : https://t.co/RzZ6C5UK5U

[Nicholas Arvanitis @narvanitis]

We need so much more of this <3

[Rob Fuller @mubix]

I promise to teach my babies to love your babies. Period.

[Nicholas Arvanitis @narvanitis]

This is attack surface reduction++. So awesome!

[Colin O'Brien @InsanityBit]

U2F + Context Aware Access + Advanced Protection + Default-Deny App Exec is overpowered.

Can't oauth phish
Can't phish mfa
Can't exec malware on the box to steal a session

As far as I can tell an attacker needs a full exploit chain/RCE+Privesc during an active session.

[Nicholas Arvanitis @narvanitis]

@rands What’s your preferred flavor/roast profile?

[Nicholas Arvanitis @narvanitis]

It’s also awesome to see a smart and creative application of the original crypto anchoring work presented by @diogomonica and @nathanmccauley

[Nicholas Arvanitis @narvanitis]

There are many lessons that SaaS and software providers can take from @ThinkstCanary, but if you take two, make it these:
- There’s no substitute for this kind of transparency in garnering trust
- Smart security engineering addresses constraints well!

[haroon meer @haroonmeer]

Max wrote up a quick blog post discussing our internal "broker" (which we place between our own servers and 3rd party API's).

It's worth a quick skim, and its worth pondering if you have (or need) something similar in your org.

https://t.co/png0trhkv0

[Nicholas Arvanitis @narvanitis]

So much this. If you want words, write a 6-pager: https://t.co/O3tAHdn0z5 (h/t: @inowland)

[rands @rands]

Slide value decreases as a function of the number of words on the slide.

[Nicholas Arvanitis @narvanitis]

w00t more @nostarch awesomeness on sale 😍

[No Starch Press @nostarch]

One day left for 35% off everything at https://t.co/DwLB1N6u2E with code UNDEFCON for our #Defcon28 virtual booth.

[Nicholas Arvanitis @narvanitis]

@RisaXu @spbail