Ron Perris

Talks about secure coding and conferences near beaches.

🌴 @locomocosec

[Ron Perris @ronperris]

I felt a sense of relief today, knowing humans are not on the hook to solve so many problems alone anymore.

[Jeremiah Grossman @jeremiahg]

New startup has been founded! $12.5M seed round led by Ballistic Ventures. Vulnerability management — everyone knows it’s broken. With ~50% of breach losses originating for remotely exploited vulns, "fixing" this one area will have the greatest impact on cybersecurity.

Thank you to everyone who supported us. It means the world.

[Ron Perris @ronperris]

@JoshCGrossman @manicode I think we agree that Risk-Based Authentication is a real thing. Not sure if you were replying to me or Jim, so sorry if I’m crossing wires here. This reminds me, I need to dig into 5.0. Love the ASVS. 👏

[Ron Perris @ronperris]

@liran_tal Great point though, Vibe coding of examples for coding concepts you are exploring can rapidly improve your learning cycle.

[Jim Manico from Manicode Security @manicode]

Our course on rapidly building secure ReactJS applications with AI is now live! AI is horrible at secure coding. This course makes it dramatically better.

https://t.co/BMXuu7VZkl

[Ron Perris @ronperris]

@liran_tal https://t.co/UyNxpnHVli

[Ron Perris @ronperris]

@liran_tal API doesn't have what? The value for the base url of the current document?

[Ron Perris @ronperris]

@_ndeyefatoudiop @manicode If we a trying to save space…

a => a >= 18

👆🏻 is a valid function expression.

[Ron Perris @ronperris]

@liran_tal If I was in client-side code, I’d use the base argument with the URL constructor. In that case, you’d need to resolve the base for the current document.

https://t.co/y9yhvBg5bW

[Ron Perris @ronperris]

@liran_tal I’ll play along.

[Ron Perris @ronperris]

@code_europe @manicode Go Jim! Help us React devs get it right with AI! 🤖

[ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ @DanielMiessler]

One of the biggest impacts of AI that goes kind of unnoticed is that we’re about to see an explosion of poorly built applications.

Specifically, applications built completely by AI with no thought of security whatsoever.

🧵

[Ron Perris @ronperris]

@cktricky @sethlaw Great course, recommend.

[Ron Perris @ronperris]

@manicode @semgrep F1 scores of up to 14.1%

F1 = 2TP / (2TP + FP + FN)

TP = True Positives
FP = False Positives
FN = False Negatives

[Ron Perris @ronperris]

@manicode I love this for you Jim.

[Ron Perris @ronperris]

@dcuthbert @MKBHD Someone explained cyber security products to me the other day in a fascinating way, “Comfort from Purchase - Fear of Loss = Value Provided”. It’s all emotional.

[Ron Perris @ronperris]

@mattjay I think @paulg got this right in his essay.

https://t.co/tbyGFwzQ0E