Pragmatic Product Security
Joined July 2015
- Tweets983
- Following434
- Followers443
- Likes195
Jérémy Matos retweeted
One of the biggest impacts of AI that goes kind of unnoticed is that we’re about to see an explosion of poorly built applications.
Specifically, applications built completely by AI with no thought of security whatsoever.
🧵
Jérémy Matos retweeted
My big takeaways from this discussion:
1. It’s largely that many applicants don’t have the skills to do the work
2. Few companies are looking to train anyone
3. Recruiting/HR is a big part of the problem because they are a non-expert and inefficient middleman to the process
4. Another big part of the problem is the entire process around hiring, interviews and how little time hiring managers have to do it right— assuming that even know what that is
So to simplify and exaggerate it—most applicants are under-skilled, and the entire ecosystem around hiring is wasteful and broken.
Jérémy Matos retweeted
Given Microsoft has pretty large security teams, and a newfound focus on security:
How did Recall pass security review - if it even did? Details coming out make it seem like while building this cool-sounding AI feature, there was no emphasis on common-sense security and privacy.
This Post is from an account that no longer exists. Learn more
Jérémy Matos retweeted
Imagine a bank got robbed and now they are blaming the cleaning lady who allegedly forgot to close a window.
This is effectively IT security's reaction to ransomware incidents after somebody clicked on a link.
Also: We had a blast at #SCS23 yesterday! The Human Factor is key.
Jérémy Matos retweeted
Black Alps 2023 is next week! We can't wait to gather the community and have a great time again!
If you don't already have your conference ticket, jump on board and get it!
blackalps.ch/ba-23/
Jérémy Matos retweeted
Interesting. Looks like a rebellion has started.
🎉 Exciting news! Zed Attack Proxy (ZAP) is now a founding member of the @swsecproject (SSP)! Join us in supporting open source security projects at softwaresecurityproject.org. #Cybersecurity #SSP #ZAPROXY
Jérémy Matos retweeted
Are you looking forward to @gopherconuk?
We certainly are and so is @securingapps, one of our speakers for this year's event.
They'll be giving a talk on 'Go security pitfalls: 2 lessons from the battlefield at Grafana Labs'.
Grab your tickets here - buff.ly/2wWLe6K
ALT Are you looking forward to GopherCon UK 2023? We certainly are and so is Jeremy Matos, one of our speakers for this year's event. They'll be giving a talk on 'Go security pitfalls: 2 lessons from the battlefield at Grafana Labs'. Grab your tickets via our website.
Jérémy Matos retweeted
Hey folks!
We are happy to announce that #GreHack23 will take place on November 17th and 18th, in Grenoble.
Stay tuned, more information coming soon!
Jérémy Matos retweeted
The Grafana Labs Bug Bounty Program is intended to encourage ethical hackers to help find and responsibly report security vulnerabilities in our software. grafana.com/blog/2023/05/04/…
Jérémy Matos retweeted
The @1ns0mn1h4ck talk "Go Security Pitfalls" from @securingapps is now available and it is really good. Highly recommended if you are dealing with Golang code. youtube.com/watch?v=NoFRUywa…
Jérémy Matos retweeted
#SaveTheDate #BSidesZH IS BACK!🥳
Coming on 9th Sept, with our usual particular format: bsideszh.ch/call-for-papers/… hosted again by @OntinueMXDR
We are also opening our #CfP, check deadlines👇 1/2
#PleaseRT #DFIR #InfoSec #ThreatIntel #ThreatHunting
@SecurityBSides
Jérémy Matos retweeted
I've published the slides of my Insomni'Hack / @1ns0mn1h4ck keynote about INCENTIVES in IT security.
slideshare.net/ChristianFoli…
This is a 🧵 with the key points of my talk. 1/17
#INS23
Jérémy Matos retweeted
"Many security dashboards will give you a feeling that they are actually giving you actionable information." @ChrFolini
#ins23
Jérémy Matos retweeted
One talk that I would really like to see is @SecuringApps discussion about Go Security Pitfalls at @1ns0mn1h4ck insomnihack.ch/talks-2023/#P…. Getting some additional details about CVE-2022-39328 would be great.
Jérémy Matos retweeted
More car hacking!
Earlier this year, we were able to remotely unlock, start, locate, flash, and honk any remotely connected Honda, Nissan, Infiniti, and Acura vehicles, completely unauthorized, knowing only the VIN number of the car.
Here's how we found it, and how it works:
Jérémy Matos retweeted
The final speakers list is now available at bsideslisbon.org/2022/speake…! Again, we can't thank enough everyone who submitted to our CFP! You rock!
Jérémy Matos retweeted
My argument for why the future will be *multi-chain*, but it will not be *cross-chain*: there are fundamental limits to the security of bridges that hop across multiple "zones of sovereignty". From old.reddit.com/r/ethereum/co…:
Jérémy Matos retweeted
We are pleased to announce that the Call for Papers for Insomni'hack 2022 is now open! Details and submissions at: cfp.insomnihack.ch/insomniha…
