Rick Backley

Principal Security Engineer, DevSecOps, AppSec, Penetration Tester, OWASP member, GWAPT GPEN GMOB GSEC GCSA certifications, that kind of stuff.

[Rick Backley @rback_sec]

‘We don’t teach developers how to write secure software’ – Linux Foundation’s David A Wheeler on reversing the CVE surge | The Daily Swig
https://t.co/OgOTsQr9NK

[GitHub @github]

We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.

[J.J. McCarthy @jjmccarthy09]

CMON!!! 🐶🐶🐶

[Jas⁴³₈₆ @quinnysoda]

I’m still losing my mind this morning about this trio

[Drew Livingstone @ProducerDrew_]

Here is the NHL DOPS explaining the Auston Matthews suspension decision on the Benn clip... weird how it fits perfectly

[JFrog Security @JFrogSecurity]

🚨 SECURITY ALERT: The popular PyPI package lightning has been compromised in a supply chain attack.

⚠️ Affected Versions: 2.6.2 and 2.6.3

[solst/ICE of Astarte @IceSolst]

Cybersecurity is just software engineering’s PvP mode

[vx-underground @vxunderground]

Normies think you need AI to accidentally fuck up prod

Little do they know IT nerds have been doing this for decades.

[Dave Kennedy @HackingDave]

This is much more nuanced - cybersecurity isn't just software bugs albeit an important part.

Misconfigurations, user phishing, weak credentials, implementation failures, and a whole lot more. Most breaches do not occur from a zero day - it's an extreme rarity.

Vibe coded apps have a massive increase in introducing security flaws which is only going to continue to expand - I do think the security research side of the house where you had amazingly technical folks who are absolutely brilliant at bug hunting will continue to be brilliant but it will commoditize a lot of the bug hunting that is done today through these types of efforts.

Source code analysis is one part of a much larger picture of cybersecurity. As we've seen with Claude itself, it's had a slew of bugs, outages, vulnerabilities. AI will continue to ramp up and produce much better code, but it's going to be far from perfect.

[Fracture Labs Cybersecurity @FractureLabs]

We're hosting the IoT Playground at @CypherCon again on April 1–2 in Milwaukee!

Come hack vulnerable smart devices, crack BLE CTFs, pull firmware, and cause general RF chaos. All skill levels welcome!

More info: https://t.co/X0OlAe4rIM

[Rick Backley @rback_sec]

@rqobela Scheme was fun to learn but I’m not using that again. :)

[Burp Suite @Burp_Suite]

Meet your agentic AI partner in Burp Suite ✨

Your on-demand AI pentest co-pilot has landed in Repeater in Burp Suite Professional.

Get ready for smarter, faster, more accurate testing. 🧵
#BurpAI #agentic #BurpSuiteProfessional

[Minnesota Men’s Hockey @GopherHockey]

135 points, 66 Snuggy Snipes and countless memories.

One of the best to ever don the Maroon & Gold.

Thank you for everything, 81

[Rick Backley @rback_sec]

@ToddMilewski Do they generally post injury updates on X or their team website? Or do they have weekly press conferences?

[Rick Backley @rback_sec]

@MNHockeyStar Larry Olimb was awesome. I recall cheering for him in the old Mariucci with half the crowd chanting LAR-RY and then the other side responding O-LIMB.
It might have changed to HO-BEY and BA-KER at the end of the season IIRC.

[BarDown @BarDown]

WILD ANGLE OF USA WINNING GOLD IN OT‼️🇺🇸🥇 #worldjuniors

[Rick Backley @rback_sec]

@Mariucci_Guy Good call

[Minnesota Twins @Twins]

Baseball skies

[Rick Backley @rback_sec]

@LisaForteUK I play with strings.