@bender_higgins

CISO, Square Inc

Joined October 2011
  • Tweets82
  • Following106
  • Followers461
4Media
Make security easy for our users by solving hard security problems at Google scale goo.gl/R6dzQP #google #security #jobs #bayarea #sydney #kirkland #zurich #newyork
1
10
1
24
Just going to leave this right here: youtu.be/rU3FNKRSlv0

Red Dawn -Theme from the Motion Picture

Provided to YouTube by The Orchard EnterprisesRed Dawn -Theme fro...

youtube.com
1
Jim Higgins retweeted
Dan Lorenc
@lorenc_dan26 Jan 2022
OH: "We don't use SLSA levels, we use the YOLO System".
1
7
44
Jim Higgins retweeted
Drew Hintz@DrewHintz20 Oct 2021
We're hiring people to find vulnerabilities in @Square products and services! The team is brand-new with lots of opportunity to choose the type of AppSec work you want to focus on. Fully remote is an option. Read more details and apply here: smrtr.io/6T58-
2
12
35
Jim Higgins retweeted
jack
@jack1 Aug 2021
Afterpay + Square! squareup.com/us/en/press/squ…

Square, Inc. Announces Plans to Acquire Afterpay, Strengthening and Enabling Further Integration...

squareup.com
379
1,038
370
7,831
2020 theme song: music.youtube.com/watch?v=_g…

Capone - Oh No

memocan2468

music.youtube.com
For 5 years I’ve been preaching about supply chain attacks as the most cost effective form of asymmetric information warfare and will become prominent soon....well soon is now. blogs.microsoft.com/on-the-i…
3
6
12
Understanding how we are all dependent on open source and what the criticality of these libraries is step one. Happy to announce we are doing our part! opensource.googleblog.com/20…

Finding Critical Open Source Projects

Open source software (OSS) has long suffered from a "tragedy of the commons" problem.

opensource.googleblog.com
4
2
23
Another great insight into how we are helping the OSS community. It's important work as we all share the risk. security.googleblog.com/2020…

Improving open source security during the Google summer internship program

Posted by the Information Security Engineering team at Google  Every summer, Google’s Information Security Engineering (ISE) team hosts a n...

security.googleblog.com
3
29
Jim Higgins retweeted
Arsenal
@Arsenal8 Nov 2020
#ARSAVL | #LestWeForget
Tommy soldier silhouettes stand pitchside at Emirates Stadium

ALT Tommy soldier silhouettes stand pitchside at Emirates Stadium

96
526
80
8,966
Kim and team have been helping with my mission to secure open source. Scorecards is the first step in creating a common framework to measure trust in OSS packages. Thank you Kim Lewandowski and OSSF! openssf.org/blog/2020/11/06/… #cybersecurity #opensource #infosec
1
4
2
16
The Americans liberated the Americans.
7
Fitting for 2020
1
3
Oooofffff
The Guardian
@guardian22 Oct 2020
Trump's Twitter account hacked after Dutch researcher guessed password theguardian.com/us-news/2020…

Trump's Twitter hacked after Dutch researcher claims he guessed password – report

Victor Gevers claimed he had access to president’s account, De Volkskrant reported, but Twitter said ‘we’ve seen no evidence’

theguardian.com
Great narrative on our OSS Fuzzing/Intern projects for the last year helping keep open source secure! I want to call out: "Over the course of the internship, our interns have reported over 150 security vulnerabilities and 750 functional bugs." opensource.googleblog.com/20…

Fuzzing internships for open source software

At Google we hosted interns this summer on teams where we leverage fuzzing at scale to find thousands of security vulnerabilities and stability bugs.

opensource.googleblog.com
2
8
Not kidding. Winter is coming! sonatype.com/press-release-b…

Software Supply Chain Report Finds 430% Increase OSS Attacks

2020's Software Supply Chain Report: A 430% increase in cyber attacks on open source supply chains. Read more.

sonatype.com
Winter is coming (software supply chain attacks)
Snyk
@snyksec24 Aug 2020
The Snyk research team uncovered malicious behavior in an advertising SDK #SourMint used by over 1,200 apps in the AppStore. Included in our findings, it improperly accesses and logs user data and activity within those apps. Learn more here 👉 buff.ly/2CXHgPk
2
Scale of attacks from these hack-for hire operators is almost unbelievable. Great work bringing this more into the light. The real test now, is whether there are consequence here or these groups can continue hacking with impunity.
This quoted post is unavailable.
Try viewing anyway · View on X
3
41
106
OMG its finally out! Google's "Building Secure and Reliable Systems" which means I am published! (I authorized a few pages worth of stuff so not a big deal) but I used Greek Mythology to describe....wait for it.... The Trojan Horse (I can hear all the eye rolls from here).
3
3
39
Please read it! #SRSBook #Security @srebook google.com/books/edition/Bui…

Building Secure and Reliable Systems

books.google.com
6
3
31
Scary stuff
Vincent D'Onofrio@vincentdonofrio24 Feb 2020
I dislike space horror porn.
Load more