Boy Baukema

Personal professional microblog of Dutch Application Security Consultant.
Opinions are my own and do not reflect my employer.

[Boy Baukema @relaxnow]

Third party software, still means first party risk.
If you are building a house and use third party wooden planks that turn out to be rotten or you're using it incorrectly (bearing too much weight) it will still be *your house* that collapses on *you*.

[Troy Hunt @troyhunt]

I love that the Dutch government is actively promoting security.txt and encouraging companies to establish a route for reporting security incidents 😊 /cc @EdOverflow https://t.co/86ayA2qBeF

[Larry W. Cashdollar @larry0.bsky.social @_larry0]

Facebook scam, I’m selling a desk and they’re pretending to be interested. They’re using my cell number to attempt to sign up for google voice. Remember never share your 2FA codes.

[Boy Baukema @relaxnow]

My kids are playing chicken with an actual chicken...
And the chicken is winning.
I don't know what this says about my offspring.

[Boy Baukema @relaxnow]

@esnoeijs Clearly you're not yet adjusted if you're under the impression that you'll get access to required resources.

[Boy Baukema @relaxnow]

@PeterPr76848126 Ja, als ik bel naar storingsnummer wordt er opgehangen, maar hij staat aangemeld bij Enduris: https://t.co/jo0ptWex5G

[John Hammond @_JohnHammond]

aaaaand then code execution?? #log4j #minecraft

[Boy Baukema @relaxnow]

Why have Holland as Country on Boarding Digitalization form @British_Airways ? Please watch this by @cgpgrey : https://t.co/5vkgru8vey

[Boy Baukema @relaxnow]

@Dynom Close. WON'T FIX. 😂😭

[Boy Baukema @relaxnow]

Is it me or are file names and sorting completely backwards from natural language?
"A picture of the front of my house" and
"a picture of the back of my house" becomes
"my-house-front.jpg" and
"my-house-back.jpg" to sort it effectively.
Why?

[Sarah G. @apiary]

I am no longer an app sec consultant dude. But I still think it’s a great career move, and you can do it even if it’s hard to convince hiring managers that that’s true. A quick list of tips for getting hired to do app sec tests. 1/n

[Boy Baukema @relaxnow]

I think this is pretty cool: https://t.co/bYtdKwp9sS
I'm proud to call them my colleagues and hope more women get inspired because of them.

[Boy Baukema @relaxnow]

Every engineer should do a stint in consulting, by @forrestbrazeal https://t.co/UD5d1gaHXT

[Boy Baukema @relaxnow]

@apiary When I was a dev a customer once asked me "Is the software you write secure?". 15 years later I'm still learning so I can get back to him. 😁

[Sarah G. @apiary]

Why are you interested in security as a field? (if you are, if you aren't why not?)

[Boy Baukema @relaxnow]

@the_linie Sterkte Lineke!

[Boy Baukema @relaxnow]

@DarrenPMeyer @Veracode Sorry to see you leave @DarrenPMeyer ! Thank you for your mentorship.

[Vlad @big_fish]

adidas is hosting a first code'n'stripes challenge. The rules are easy:
1) Come on May 28
2) Solve the challenge within 24 hours
3) Submit your solution
4) First 10 win some of the most coveted adidas sneakers and the fame of cracking the 3 stripes code https://t.co/Ejc00saKU3

[Boy Baukema @relaxnow]

"Bug" v.s. "Feature" is a project pathology: https://t.co/sRo1pCiHyj . They are both 'changes' that should be prioritized (the hard part that) and fixed based on prioritization. If you say "We fix all bugs, but prioritize features" you will have lots of discussions about "bugs".

[Boy Baukema @relaxnow]

"So a C program with six 32 bit integers can have more states than the number of atoms on the planet" https://t.co/uSb7owqcvi