Member of the Blackhat Review Board, Consultant, and Information Security Researcher.
Austin, TX
Joined January 2020
- Tweets2.6K
- Following577
- Followers719
- Likes854
Pinned Tweet
When things are broken in non-obvious ways, we must become curious in order to fix them.
SavageJen On Insecurity retweeted
Thrilled to release my latest research on Apache HTTP Server, revealing several architectural issues! blog.orange.tw/2024/08/confu…
Highlights include:
⚡ Escaping from DocumentRoot to System Root
⚡ Bypassing built-in ACL/Auth with just a '?'
⚡ Turning XSS into RCE with legacy code from 1996
SavageJen On Insecurity retweeted
📣 ANNOUNCEMENT: We're excited to announce our Keynote and Main Stage Speaker Lineup for #BHUSA. Don't miss it! #cybersecurity #infosec
Learn more here:
blackhat.com/us-24/keynotes.…
Microsoft: "We care about backwards compatibility so much that we will leave insecure stuff in the OS sometimes."
Also Microsoft: "We changed Powershell for some unknown reason and some of your old scripts won't work anymore. haha guess you have to rewrite it."
The CFP for Blackhat USA 2024 is now open. If you have been wanting to speak at Blackhat, this is your chance.
usa-briefings-cfp.blackhat.c…
SavageJen On Insecurity retweeted
#defcon escapes another brush with cancellation! After 25 years w/Caesars, they cancelled our contract for #defcon32.
A lot of conferences might have buckled, but not DEF CON. Hackers make a way out of no way.
Uncanceled DEF CON 32 will now be held at the Las Vegas Convention Center, on the same dates and for the first time in a while, under one roof.
@thedarktangent 's full post is here: forum.defcon.org/node/248360
SavageJen On Insecurity retweeted
Honored to be one of the judges for Black Hat’s Startup Spotlight Competition, a video pitch competition for security startups.
Finalists will present their products in front of a live audience at Black Hat USA. You can still apply!
Submit by June 9:
blackhat.com/us-23/spotlight…
SavageJen On Insecurity retweeted
Welp, time for a change of pace. Leaving my current role & starting a company to build the tool I always wished I had as a CISO but no one has made yet. Initially hiring developers with cloud and data background and a UI/UX person looking for a challenge. All remote. :)
SavageJen On Insecurity retweeted
The Black Hat team is devastated to learn of the passing of Kelly Lum (@aloria). Kelly was a respected & valued member of our Review Board, a Track Leader, and speaker at our events. This is a terrible loss, and we send our sincere condolences to her family and friends.
ALT A photo of Kelly Lum (@aloria) that she personally chose to use for her profile photo on the Black Hat Review Board web page.
SavageJen On Insecurity retweeted
NYSEC is tomorrow, Tuesday, March 21st @ 6PM.
Please join us in remembrance of our dear friend, colleague, and mentor @aloria, whom without our community and world surfers greatly.
d.b.a.
41 1st Ave.
New York, NY 10003
Map:g.co/kgs/aDrL9S
SavageJen On Insecurity retweeted
Updates to
googleprojectzero.blogspot.c…
* The four severe Internet-to-baseband RCE vulns now have CVE-IDs
* Pixel just updated their March 2023 bulletin to show fixes for all four of the severe issues for Pixel 6 and 7
* I'm told that the Pixel 6 March OTA update is rolling out now.
What happens when you get @natashenka, @ifsecure, @_fel1x, @i41nbeer and @tehjh working collaboratively on a new attack surface for the team?
This: googleprojectzero.blogspot.c…
The blogpost also includes actions that users can take to protect themselves while waiting for patches.
This is a nice article about a local security meetup that I sometimes attend.
austinchronicle.com/news/202…
SavageJen On Insecurity retweeted
Found a method to see inside some chips, without having to unmount or destroy the chips.
Best part - the method only relies on lightly modded off-the-shelf cameras and lenses.
Read more at bunniestudios.com/blog/?p=67…
The Blackhat USA CFP is now open blackhat.com/call-for-papers…
If you've ever wanted to speak at Blackhat about your research, this is your chance.
In addition to not having power at home, the cell service isn't working in my area. I'm not sure why, since it seems to work a mile away (where I am now). If anyone needs me, you will have to wait until the power outage is over.
Hooray 🎉
Report: Apple plans to support sideloading and third-party app stores by 2024 arstechnica.com/gadgets/2022…
