Technical Director of Security Engineering at @Netflix. Previously Appsec builder/breaker. Spend free time writing music and weightlifting
San Francisco, CA
Joined December 2009
- Tweets283
- Following214
- Followers726
- Likes56
Excited to share a blogpost Melodie and I have been working on for a while on the benefit of building Neurodiverse Information Security teams. netflixtechblog.medium.com/e…
I wrote some strategies for how to be an ally for people managing ADHD in the workplace: link.medium.com/Bibs9k8tbY. Please give it a read and let me know your thoughts!
I can't believe I'm an hour into trying to get a very permissive CSP policy setup and I am still stuck in violation hell. I empathize with all the developers I've ever asked to set this up. Totally different errors and useful debug information in FF/Chrome debugging this as well.
Scott Behrens retweeted
Stoked to moderate a #DevSecOps panel at @AppSecCali- @frgx Director of Security Engr @Dropbox, @astha_singhal AppSec Engr Manager @netflix, @dugdep Director of ProdSec @datadoghq, John Heasman Deputy CISO @DocuSign, @Divya_Dw Security Engr Manager @Snap appseccalifornia2019.sched.c…
Verifying myself: I am arbit on Keybase.io. PfJRpyo3a1phSp_IY39CPPoIWmRMF6MIOnD0 / keybase.io/arbit/sigs/PfJRpy…
Scott Behrens retweeted
"We are now publicly launching our bug bounty program through the Bugcrowd platform to continue improving the security of our products and services while strengthening our relationship with the community."
medium.com/netflix-techblog/…
Test coverage for Scumblr is happening, currently at: 1196 / 4768 LOC (25.08%) covered! Your contributions will be easier with these tests!
lookup(){
nslookup `echo $1 | awk -F/ '{print $3}'`
} #bash put in your bash shell and you now can do >lookup http://<site>.com/whatever
Come join our team! xitter.cf/bdpsecurity/status/831…
Want work on projects like Scumblr (github.com/Netflix/Scumblr)? I'm hiring a software eng for Netflix's AppSec team: jobs.netflix.com/jobs/861079
Thanks @OReillyMedia Security for a great conference! For folks who saw our talk, grab Scumblr 2.0.1 here: github.com/Netflix/scumblr
Check out the @NetflixOSS new release of Scumblr 2.0. Grab a copy here: github.com/netflix/scumblr
Exceted to speak at @appsecusa with Andy Hoernecke on Scumblr 2.0 (Dirty Laundry), our soon to be open source tool to automate all things.
Protip: Don't use Timeout with Sidekiq in RoR if you are calling a cli tool that doesn't support timeout, will result in unstable behavior.
Devs: Don't take an appsec pentest personally. Appsec engineers just want to make applications more secure to protect users & stop bad guys.
Released a new build of Sketchy which fixes an issue with workers hanging. If you use it for screenshoting, update! github.com/Netflix/sketchy
Tracking XSS propagation over long periods of time w/ Sleepy Puppy? Check out our BurpSuite Extension: techblog.netflix.com/2015/11… @NetflixOSS
@tdvsbl or when a dj fades out the song to say something like "yeah" or "uh uh" 5-10 times a song for the entire set.