
Web developer & security researcher. Senior Pentester @cure53berlin. Author of @securitytxt. ➡️ https://xitter.cf/t.co/BOy1tiLLBr
Joined October 2016
- Tweets1.2K
- Following159
- Followers20.8K
- Likes2.6K
I am working on something fun with @KarimPwnz to address the challenge of repetitive security questionnaires: @BlueMagnetIO (bluemagnet.io).
I have been playing around with SvelteKit a lot recently. I wrote a short blog post on adding security headers to SvelteKit applications: edoverflow.com/2023/svelteki….
I might do a more long-form one on the security pitfalls of SvelteKit applications at some point.
Replying to @ant0inet
There is a recent publication (12 Jan 2023) where the authors explored these factors and even ranked each factor's importance with a survey: arxiv.org/pdf/2301.04781.pdf. Learning and building a career are some of the other factors not mentioned in your tweet.
Replying to @intigriti @securinti
Great talk! I added a reference to the talk in my blog post: edoverflow.com/2022/reading-…. I will add a link to the YouTube video when @NahamSec uploads it. :)
And here are some photos from the trip. Thank you, @spaceraccoonsec, for being an excellent tour guide. :)
Thank you, @fbsecurity, for organising another fantastic event. I thoroughly enjoyed BountyCon and exploring Singapore. Team BBAC members (@xdavidhu, @_zulln, @ElSec_, @spaceraccoonsec, @rub003, @EdOverflow) managed to find valid vulnerabilities with @rub003 finishing #3 overall.
This looks like a fun chain by @fransrosen. If readers are interested in rapidly checking CSP hosts, I wrote a tool for grabbing them concurrently: github.com/EdOverflow/csp.
Dropbox disclosed a bug submitted by fransrosen: hackerone.com/reports/159079… - Bounty: $6,909 #hackerone #bugbounty
This brilliant passage by @fin1te in whitton.io/articles/from-res… resonates with me. Reviewing codebases in the open-source space has allowed me to better visualise the underpinning of an application and recognise keywords.
I had an amazing time collaborating with @xdavidhu, @ElSec_, @rub003, and @_zulln during @fbsecurity's BountyConEdu live hacking event as Team BBAC. So stoked on the #1 finish. Thank you @fbsecurity for hosting the wonderful event. :)
After 5 years of work, security.txt is officially an RFC. I am pleased to announce RFC 9116: rfc-editor.org/rfc/rfc9116.
I would like to use this opportunity to thank those who made this possible. Thank you. ❤️




















