Wrap @GoogleVRP and init.g(mexico)! Huge thanks to Anna, @we1x and everyone at Google for giving us a glimpse into this world. Getting to listen the many experts at these fields was truly inspiring and motivating. #initg#cybersecurity
¡Hola from init.g(mexico) we are LIVE!
Crazy excited to meet all the incredible students who joined init.g(mexico) today! Very much looking forward to seeing how these bright minds can shape the security industry of tomorrow!
Let the learning and hacking begin! init.g() { return SUCCESS; }
#initg #ESCAL8 #GoogleMexico 🇲🇽
We published a blogpost about SafeContentFrame - a library for rendering untrusted content inside an iframe. The library is a big party of what I've been up to in the few last years! Check out the blog and take a slice of my birthday cake 🎂!
https://t.co/9gGEqUuwIX
🚨 Heads up for web devs! 🚨
The HTML spec just got an important update to protect against mutation XSS (mXSS). Find out how escaping < and > in attributes is making the web a safer place.
https://t.co/gMKmo0x4ad
One of my teams at Google, 𝗔𝗜 𝗔𝗴𝗲𝗻𝘁 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆, is expanding in 𝗭𝘂𝗿𝗶𝗰𝗵 🇨🇭and 𝗡𝗲𝘄 𝗬𝗼𝗿𝗸 🇺🇸. We're looking for 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗘𝗻𝗴𝗶𝗻𝗲𝗲𝗿𝘀 with experience in attacking and securing AI/ML systems. DMs open.
@ryancbarnett@akamai_research This reminds me of this cool paper from Google I read years back. The best possible resource for understanding common pitfalls in CSP
https://t.co/ae7RX4ocWf
Developers, tired of DOM XSS in your web applications? 😩 We were too. See how we refactored our code to solve Trusted Types violations in Gmail & AppSheet. Your guide to a safer web is here!
https://t.co/jywuZicT2N
This is a great example of secure by design through a framework-centric approach to security. The key idea is to build high-level frameworks that abstract away and address as many security risks as possible to make security better by default and as easy as possible for apps.
Building secure web apps shouldn't be a burden. We've built a high-assurance web framework at Google that makes security easy for developers. Learn about our "Secure by Design" approach and how it works in our new blog post:
https://t.co/Iq19llnlEj
cc: @ddworken
"This blog post aims to provide a detailed blueprint for how Google has created and deployed a high-assurance web framework that almost completely eliminates exploitable web vulnerabilities."
https://t.co/7TsK8ZFRrO
Building secure web apps shouldn't be a burden. We've built a high-assurance web framework at Google that makes security easy for developers. Learn about our "Secure by Design" approach and how it works in our new blog post:
https://t.co/Iq19llnlEj
cc: @ddworken