tprime

Sr. Security Consultant

[tprime @tprime_]

Interesting whitepaper from 2019 by @AndresRiancho about insecure AWS Cognito configurations. I wonder if anyone has done something similar, but for applications which mistakenly expose the SignUp endpoint?

https://t.co/NEqgnLeOa2

[tprime @tprime_]

@_BalthazarBratt Nice work, that was a fun read.

[tprime @tprime_]

@Viss Thanks for the reminder. I remember wandering into this talk at DC19 and being really glad I did.

[tprime @tprime_]

hmmm....

[tprime @tprime_]

Zanimiv film o Slovenskih hekerjih: https://t.co/szZJ6XLjXo

[tprime @tprime_]

@sylv3on_ I recommended following that book with The Tangled Web if you haven't read it already. They compliment each other really well.

[tprime @tprime_]

I wrote a guide to securing #salesforce applications and passing the #appexchange security review for the @bishopfox blog:

https://t.co/SIL2n46hvY

[tprime @tprime_]

#CactusCon day one

[tprime @tprime_]

@Alyssa_Herrera_ Hopefully Piercing the Veil v2 is in the works

[tprime @tprime_]

the agenda at #CLSI2019 looks awesome... would love to attend one day

[tprime @tprime_]

Managed to get a nice hike in during a rural onsite

[tprime @tprime_]

@IAmRedShift two examples:
https://t.co/niTPQLKgXJ
https://t.co/oUbvsnYz4d

[tprime @tprime_]

disappointing to see journalists apologizing for or celebrating government censorship in #srilanka

[tprime @tprime_]

This helped me on an assessment the other day... Thanks man!

[Matheus Bernardes @mthbernardes]

https://t.co/OKE45imVzZ

[tprime @tprime_]

@Alra3ees This option also exists in the GUI under 'User options -> SSL -> Disable Java SNI extension'!

[tprime @tprime_]

want to deploy your own #BGP monitoring in minutes to detect internet censorship and more, even on a low-resource machine? check out https://t.co/RNVg7bDXnD

[tprime @tprime_]

@brutelogic perhaps, I just prefer the approach of whitelisting like with CSP instead of depending on the filtering cat-and-mouse game.

[tprime @tprime_]

@evaryont @CactusCon yeah dude! I will make sure to find you around the con

[tprime @tprime_]

defcon was fun, next up is @CactusCon