Excuse me, sir. Do you have a moment to talk about our Lord and Saviour, security.txt?

I will be giving a talk on Coordinated Vulnerability Disclosure (CVD) at Swiss Cyber Storm. If you are interested in attending, please find additional information below.

I have set up a LinkedIn profile if people want to stay connected: linkedin.com/in/edoverflow/.

👏

This blog post by @infosec_au: shubs.io/so-you-want-to-get-….

I am working on something fun with @KarimPwnz to address the challenge of repetitive security questionnaires: @BlueMagnetIO (bluemagnet.io).

@ctbbpodcast by @Rhynorater and @0xteknogeek

@rub003 going to be jealous. 🙃

I have been playing around with SvelteKit a lot recently. I wrote a short blog post on adding security headers to SvelteKit applications: edoverflow.com/2023/svelteki…. I might do a more long-form one on the security pitfalls of SvelteKit applications at some point.

3️⃣ Finally, realising that *.cust.swisscom.ch is out of scope

Reminder: if you would like to follow my blog via RSS, I have a feed at edoverflow.com/index.xml. :)

With references to @hacker_ and @fin1te. Thank you to @KarimPwnz for reviewing a draft.

I have published a new blog post on my bug bounty methodology: "Learn to build it, then break it" — edoverflow.com/2023/learn-to….

There is a recent publication (12 Jan 2023) where the authors explored these factors and even ranked each factor's importance with a survey: arxiv.org/pdf/2301.04781.pdf. Learning and building a career are some of the other factors not mentioned in your tweet.

Nice blog post by @KarimPwnz on the security implications of command injection in GitHub Actions.