Andre Van Klaveren

Lead Security Solutions Architect, AppSec, CISSP, make of things, breaker of things. My tweets are my own.

[Andre Van Klaveren @opratr]

Package managers are trojan horses. npm, PyPI, Docker Hub -- all active attack vectors, cross-platform and cross-language.

Hash pinning + lock files aren't optional. They're the minimum.

Your dependency tree is an attack surface. Treat it like one.

#SupplyChainSecurity #AppSec

[Elon Musk @elonmusk]

People giving OpenClaw root access to their entire life

[Florian Roth ⚡️ @cyb3rops]

Towards SSH3: How HTTP/3 improves secure shells

That’s amazing 💫

https://t.co/gLjOCT7dS0

[Andre Van Klaveren @opratr]

@turingpi Must be nice to have an available supply of compute modules. :) My Turing Pi 2 is sitting bare on my work bench until I can actually procure compute for it.

[Troy Hunt @troyhunt]

What if ⁦@1Password⁩ was breached? We should be asking this question of all password managers, here’s the answer: https://t.co/Wp5YbGXvLO

[Andre Van Klaveren @opratr]

@geerlingguy @TheMagPi OMG! Congrats Jeff!! I must have a copy....I know what I'm doing tomorrow. 😀

[Cloudflare @Cloudflare]

Today, we are launching our new Security Analytics, giving you a security lens across all of your HTTP traffic, so you can focus on what matters most: traffic deemed malicious but potentially not mitigated. https://t.co/amFvvLiXHx

[Andre Van Klaveren @opratr]

"For life is experience, and longevity is, in the end, measured by memories, and those with a thousand tales to tell have indeed lived longer than any who embrace the mundane. "

- Drittzt Do'Urden
#ThePirateKing #RASalvatore #Drittzt

[Andre Van Klaveren @opratr]

I can't say I disagree with this verdict, given the information that came out around this.

[Troy Hunt @troyhunt]

Former Uber security chief found guilty of covering up data breach https://t.co/YEX7ISloFH

[Andre Van Klaveren @opratr]

Do you remember when you joined Twitter? I do! How time flies! #MyTwitterAnniversary

[EFF @EFF]

Doxxing occurs when a person or other entity exposes private or public information about you, and it is often used to escalate greater harm like mass online harassment or in-person violence. Learn how to protect yourself online & advance your data hygiene. https://t.co/cD7BCR3tak

[Andre Van Klaveren @opratr]

@geerlingguy Get well soon my friend!

[Andre Van Klaveren @opratr]

Insider threat continues to be a significant risk, even for companies who's business is security.

https://t.co/yn17JC6dw3

[PyQuant News 🐍 @pyquantnews]

College completely failed to teach me data analysis.

So I spent over 10,000 hours learning Python.

Then, I picked the 13 best libraries for machine learning and data analysis.

But unlike college, these won't cost you $120,000.

Here they are for free:

[Andre Van Klaveren @opratr]

@geerlingguy Get well my friend

[Ben Sadeghipour @NahamSec]

I haven't done this in a while, but my bug bounty course is free for the next hour or so.

Use code "JUNE2022" to get it! https://t.co/X0vKs8gLOO

[Andre Van Klaveren @opratr]

You know it's bad when @Arbys runs out beef....and this is the second time in the last month.

[Andre Van Klaveren @opratr]

@troyhunt Ever watch Water World? Just sayin' ;)

[Andre Van Klaveren @opratr]

R.I.P.
#bettywhite

[Andre Van Klaveren @opratr]

@0xcharlie I'd say "I'll take it", but I'd probably spend more time figuring out what you did than doing anything useful with it all. LOL