Zack Smith

Senior Cyber Security Engineer | Doing data things

[Zack Smith @Null_Routes]

@regex101 Have you thought about a browser extension? Support some local search features on the users current web page, but point them to the site if they want the more advanced features. It could help get existing users to return, assuming you can get them to install the extension

[Zack Smith @Null_Routes]

@regex101 What benefit would a desktop app provide? I like the web experience, so don't think I'd switch unless I'm missing something

[Zack Smith @Null_Routes]

@nalinrajput23 YouTube and Android are both part of Google.

They don't need to put the Spyware into the YouTube app, since they already own the OS. That's gotta be it.

[Zack Smith @Null_Routes]

@d1ngbat_ @endingwithali I will still say I work in fashion, despite the holes in my work t-shirt and sweatpants. The skeptical looks I get make it worth it

[Zack Smith @Null_Routes]

@endingwithali I'm a security engineer at an apparel company, but my wife rolls her eyes when I say I work in fashion. Same thing?

[Zack Smith @Null_Routes]

@forgebitz 0

[Zack Smith @Null_Routes]

@T_Zahil I think Patrick O'Shaughnessy said something similar in a podcast with @davidsenra. Everyone's mind recalls the world a little differently

[Zack Smith @Null_Routes]

@mailspec Yes, in many ways user privacy isn't strictly a technology issue. It's often a UX problem. Friction for the user results in insecure behavior.

[Zack Smith @Null_Routes]

@thesamparr These themes will allow you to build out series of shorts, compilations for target groups, etc.

Different themes could be linked to different landing pages for leads, allowing you to know more about the stage a lead is in and what they're thinking about. This is just a start.

[Zack Smith @Null_Routes]

@thesamparr I am assuming you have your own target buckets. Take all content that you've previously produced or will produce and group them up with similar themes that match target groups.

Use those themes to identify gaps in content and build out a roadmap. Add themes/groups as you grow.

[Zack Smith @Null_Routes]

@s4rah_dev A dad walking around the neighborhood with his kid was giving each house a shot of malört. Does that count?

[Zack Smith @Null_Routes]

Earlier this year I had the opportunity to speak at @bsides312. It looks like the video of my talk just got posted, so if you think using python for dark web intelligence sounds interesting you should check it out!

https://t.co/liENeTiGDi

[Zack Smith @Null_Routes]

@shrisec @hetmehtaa A lot of it boils down to how they approach coworkers or other teams that are opposed to security related change.

Something like focusing on finding a way to help them achieve their end goal while still maintaining a level of security. We want to block breaches, not the business

[Zack Smith @Null_Routes]

@hetmehtaa It doesn't cover all CVEs but exploit-db is pretty good. Also check out https://t.co/iGttH4aTuA

[Zack Smith @Null_Routes]

@gitpush_gitpaid Seems Chrome is just against devs finding love at this point. Clearly, you're a bad actor...

[Zack Smith @Null_Routes]

@The_Geminiman Having done the clean-up for that after the fact, years of giving out access flippantly can make quite a mess. Just-in-time access has made a good difference in this area, but not fixed it entirely

[Zack Smith @Null_Routes]

https://t.co/zFDu35UkOK

Path traversal in Ruby on Rails (Action View). Affects versions < 5.2.2.1. CVSS 7.5. Attackers can disclose arbitrary files using manipulated HTTP Accept headers. Still relevant in legacy Rails deployments.

[Zack Smith @Null_Routes]

https://t.co/RYtVUR2aLG

A buffer overflow in Multi-Router Looking Glass (MRLG) that allows remote attackers to write arbitrary memory. Affects versions ≤ 5.4.1. CVSS 9.8. Exploitation can lead to memory corruption and potential code execution. This one is over a decade old!