securing the computers | gifs https://xitter.cf/t.co/YIXVqCwvAW | https://xitter.cf/t.co/gDB8opqzo2
NYC
Joined April 2012
- Tweets5.4K
- Following722
- Followers379
- Likes8K
becojo retweeted
ICYMI @AppSec_Village's Fix the Flag Wargame at @DEF CON 34, in partnership with @Secdim, is officially over. Our Winners are🥁
🎮 Top Player – Winner: becojo
🕶 Top Player – Runner-Up: matdabomb9
🎮 Best Level – Winner: becojo
🐬 Best Level – Runner-Up: Javan Rasokat
becojo retweeted
Results of our @defcon's @AppSec_Village contest. Congratulations to🥇 @Sz4rny for securing the most apps, and 🥈 Prangon Swachha as the runner-up
🥇 @Becojo for winning the best-contributed challenge, and 🥈Matt (@M4773L) as the runner-up. 📺 youtube.com/watch?v=HRd_hnTn… #defcon32
becojo retweeted
.@github's new Artifact Attestations feature uses @projectsigstore to generate and verify signed attestations for anything made with Actions. 👏👏 We've added support in Minder to use the contents of signed attestations for enhanced security policies: stacklok.com/blog/unlocking-…
becojo retweeted
Starting today, PyPI package maintainers can publish via Trusted Publishing from three additional providers:
- @gitlab
- @googlecloud
- @ActiveState
They join @github Actions to support publishing without long-lived passwords or API tokens.
blog.pypi.org/posts/2024-04-…
becojo retweeted
We are announcing the Public Beta release of ‘poutine’ - an Open Source security scanner built by our team @boostsecurityio to detect misconfigurations and vulnerabilities in Build Pipelines. boostsecurity.io/blog/unveil…
becojo retweeted
Reminder: @NorthSec_io is in about 1 month
Get your tickets: tickets.nsec.io/2024/
becojo retweeted
🆕 Living Off the Pipeline (LOTP)
A project to inventory how developer tools commonly used in CI/CD pipelines have lesser-known RCE-By-Design features ("foot guns")
boostsecurityio.github.io/lo…
becojo retweeted
To all ticket holders: Don't miss our 10th anniversary! We're celebrating with One More Time, a tribute to Daft Punk 🤩
Tous les détenteurs de billets: Ne manquez pas notre 10e anniversaire! On célèbre avec le groupe One More Time 🤩
🎟️🏃♂️ eventbrite.ca/e/northsec-202…
becojo retweeted
There it is blog.deesee.xyz/code-review/…
In this blog post I use the @semgrep web editor to progressively build a rule to quickly validate an idea that was a bit too much for simple grepping. That was a simple rule, next blog post should touch on data-flow analysis.
Yay I wrote a blog post this morning. I hadn't written in more than a year! I can't publish it yet because it contains an unpatched bug but it's about using @semgrep and I'm pretty happy with it. Do you have any Semgrep questions you'd like to see explained in a blog?
becojo retweeted
If you think Ontario had a domineering incumbent party win, wait until we get to Quebec in October 🥴
becojo retweeted
THE CTF WARM-UP IS BACK!
Meet our awesome guest challenge designers! We are giving away the first flag in this video.
Join our Discord server and send a private message to FLAGBOT to validate your flag.
🔗nsec.io/discord
Sponsored by @GHSecurityLab
#NSEC2022
