James

[James @StoicNZ]

@unclebobmartin @ori_pomerantz Do you review the code of your tests?

If so, is that kind of just reading an abstraction of the code?

[James @StoicNZ]

@IAMERICAbooted Sure, but can you name the class of fire extinguisher to use on the pile of burning magnesium in the server room?

[James @StoicNZ]

@rekdt I’ll have you know I studied for a whole week to pass.

Reach out if you need advice on fire suppression systems. 🫠

Additionally, there is actually one really, really good thing about CISSP. Or at least studying for it; learning the jargon.

[James @StoicNZ]

@c7five To be fair, many researchers don’t bother reading about your bounty program unless we’re actively looking for bounty payments. We just hack you because we played around with requests, and then look into it once we find a vuln.

This is just dumb, and how you go to prison. Idiots.

[James @StoicNZ]

@CyberSecRicki Damn @canva, money where your mouth is!

[James @StoicNZ]

@riskybusiness Interview Ollie from UK’s NCSC you coward!

https://t.co/gHglXK7cw7

Best damn speech in cyber yet.

[James @StoicNZ]

@SwiftOnSecurity Enjoy retirement at the cabin in the woods!

[James @StoicNZ]

@riskybusiness I hate that I’m glad I now know this.

Isn’t there enough to worry about, did we really need to add “die in an underwater laminated plastic & metal tomb” to the list?

[James @StoicNZ]

@unrepentantgeek @lady_nerd Ahahah thought the same thing and was like, huh, that’s different

[James @StoicNZ]

@riskybusiness @dannolan Shit, it’s old enough to drink. I’ll ready the yardie for 2027.

[James @StoicNZ]

@riskybusiness @dannolan Does it ironically rhyme with “Prolecar”?

Also, you’ve been slaving away at that podcast for more than 10 years. Get your fancy on! 🕺

[James @StoicNZ]

@unormal This is the best thread I’ve read on this shit platform in years

Your stream of conscious is very similar to mine, but I suspect you’re filtering the profanity 😂

[James @StoicNZ]

@davidfarrier ITS BEEN 7 YEARS?

[attackify @attackify]

Start simulating mobile malware, malicious activity etc. with #ATTACKIFY's newly supported Android endpoint (may be a first! 🥇).

Beta is rolling out to a few users, expect more mobile threat simulation modules soon!

https://t.co/sxYm32WRx6
#MobileSecurity #CyberSec #infosec

[James @StoicNZ]

I think someone turned it off 😂

[James @StoicNZ]

@hoodiePony Great talk at @BSidesMelbourne today! 🎉

[James @StoicNZ]

Also your mic is hot

[Gyle 🌻🇵🇭🇦🇺 8x💉 taking one day at a time… @GyledC]

The amazing @lady_nerd talking about how we can protect each other in the Day 2 keynote @BSidesMelbourne. "When one of us is breached, it hurts all of us." #BSidesMelb2022 #womenintech #womeninsec

[James @StoicNZ]

@lady_nerd I’d go with something managed. FaaS wrapped in RBAC’d vendor-locked garbage if it’s backend APIs.

If ya just wanna run something locally though, go for something boring with an established, mature, very Enterprisey user base.

But the bored developer in me says Python + FastAPI

[James @StoicNZ]

@mattnotmax @BSidesMelbourne 🥁🥁 I don’t practice Santeria 🎶