Pedro Fortuna

Co-Founder & CTO @Jscrambler | AppSec Speaker | OWASP Lisboa chapter leader | PCI SSC BoA

[Pedro Fortuna @pedrofortuna]

Made the top of the list in @snyksec's security shootout this morning! #rsac

[PCI SSC @PCISSC]

New on The AI Exchange 🤖

@Jscrambler’s CTO shares how AI is being used to support PCI DSS compliance, improve client-side security, and keep humans in the loop.

Read the latest post: https://t.co/yEQXVJbvgA

[Pedro Fortuna @pedrofortuna]

@jasvir You mean, excluding the simultaneous use of recreational drugs.

[Pedro Fortuna @pedrofortuna]

@jasvir @ShriramKMurthi Yes! Im telling you 😆

[Pedro Fortuna @pedrofortuna]

How much are you telling about yourself to your go-to LLM? To avoid creating a huge problem in the future, always add "asking for a friend"

[Pedro Fortuna @pedrofortuna]

@we1x @terjanq @shehackspurple @jasvir Yeah 🎉 I'm part of the gang 🙌 thanks

[Pedro Fortuna @pedrofortuna]

Thank God I type using all my fingers (well, one less now)

[Jscrambler @Jscrambler]

Exciting last day at PCI SSC Europe Community Meeting ⏳✨🇪🇸

⏰ Today at 4:10 PM - Panel: Stronger Together – The Value of Participating with the PCI SSC with Pedro Fortuna 💡

👥 Make sure to come by booth #7 to meet the team

See you!👋 ¡hasta pronto!

#PCIEUCM24

[Pedro Fortuna @pedrofortuna]

@WeizmanGal @LinkedIn Not surprising at all :)

[Pedro Fortuna @pedrofortuna]

"Zero Dependency JavaScript is the Future?" https://t.co/uHBYsNEpUo via @liran_tal
We need a better way to identify that 2 npm packages are semantically equivalent. Perhaps some sort of typescript interface-only packages and then have other pkgs declare that they implement them

[Pedro Fortuna @pedrofortuna]

Sounds like a good deal, in case you have $500k to spare

[Diogo Mónica @diogomonica]

Here's a deal for you:
1) you buy $500k worth of BTC and hold it for 5 years
2) You spend 1 week a year in 🇵🇹
3) You do an easy Portuguese proficiency test.

Congratulations! You are now a fellow Portuguese Citizen and holder of an European Passport! 🇵🇹🎉

[Pedro Fortuna @pedrofortuna]

4/ If you are as unsettled by the incident as I am, please give it a read and let me know your thoughts 🙏

[Pedro Fortuna @pedrofortuna]

1/ Yesterday’s #CrowdStrike incident prompted a lot of reflection, which I feel compelled to share in this article.
While much of the upcoming discussion will likely focus on CrowdStrike’s failures, I wanted to explore a different angle

https://t.co/raMwYsdzET

[Pedro Fortuna @pedrofortuna]

3/ I highlight several key points in the article, but if I had to choose one, it would be treating every software update in your supply chain as a production change that requires thorough testing before rollout

[Pedro Fortuna @pedrofortuna]

This isn't just another description of the #polyfill incident. It's a reflection on what happened and a discussion on how we can defend against these types of attacks in the future

@jasvir

[Jscrambler @Jscrambler]

Jscrambler's Co-Founder & CTO Pedro Fortuna and our Security Advisor Jasvir Nagra dive deep into the Polyfill Incident while unpacking the critical lessons learned 💻

Read it now at Cybersecurity Insiders https://t.co/QusitsIbVC 🕵️‍♂️

[Pedro Fortuna @pedrofortuna]

@manicode Is that a prediction or a wish?

[Pedro Fortuna @pedrofortuna]

I had the privilege to present at @owasp on Defunct Domains as a novel Web Supply Chain attack vector. Watch the talk here: https://t.co/YdVh6TCMiv. Also, try our free tool to monitor your URLs for Defunct Domains: https://t.co/dQfeR65hJM. Feedback welcome!

[Pedro Fortuna @pedrofortuna]

@WeizmanGal @levelsio But my instinct tells me that if you still pay a total of 20% taxes during a certain period, and you can start your business from here, it still is a pretty good deal. Other cities in Portugal like Porto, Aveiro or anywhere in Algarve are worthwhile looking at

[Pedro Fortuna @pedrofortuna]

@WeizmanGal @levelsio This is a hard topic to comment on. I basically agree with most critiques here. The previous NHR had some negative impacts, especially in inflating the cost of living for locals, and had to be controlled. But I wished they had not gone as far as they did - ending the NHR