@cairnsc

Security engineer

 New York
Joined March 2009
  • Tweets651
  • Following487
  • Followers424
17Media
Cade Cairns retweeted
Ryan Hurst
@rmhrisk29 Mar 2022
I am happy to announce that GCP customers can now get certificates via ACME! This uses pki.goog so when customers terminate TLS in VM, x-cloud, or on-prem they can have the same great device ubiquity they enjoy when using GCP Managed TLS. cloud.google.com/blog/produc…
4
35
5
108
We are thrilled to announce that DAML, our smart contract language, is now open source. This will enable broader adoption by developers and allow tech platform vendors to use DAML. Read more here: hubs.ly/H0hjp4W0 #DAMLDriven #smartcontracts
1
43
21
84
The Web Security Academy contains free training on web security vulnerabilities, techniques for finding and exploiting bugs, and defensive measures. It has interactive learning materials with real vulnerability labs that you can access instantly online. portswigger.net/web-security
12
125
14
257
Can’t help but to feel a sense of resentment when a Keurig machine spits into my mug when it’s done. Not that I usually use them.
1
1
Cade Cairns retweeted
REcon
@reconmtl26 Mar 2019
Recon CFP is out! Registration is open! Recon Montreal will be held 28-30 of June at Hilton Double Tree (Same hotel as last year but they change name) with training before and after the conference. Thanks for your patience! Can't wait to see you! recon.cx/2019/montreal/cfp/
1
38
6
50
A New Age of Warfare: How Internet Mercenaries Do Battle for Authoritarian Governments nyti.ms/2YfyZfd
1
Seen on /r/netsec: Ironing out Docker. Nice simple tips. ironpeak.be/slides/190319-ir…
1
1
We are happy to release the video recordings of #AppSecCali 2019 talks! Enjoy and share! youtube.com/playlist?list=PL…

OWASP AppSec California 2019

https://2019.appseccalifornia.org/

youtube.com
1
33
1
47
Good article, PKI as a Service with Hashicorp Vault medium.com/hashicorp-enginee…

PKI as a Service with HashiCorp Vault

Creating and renewing TLS certificates is a tedious and boring task when done manually. It can be automated by using Let’s Encrypt for…

medium.com
4
10
How can I get an ebook >50MB to my #Kindle library? None of the solutions I found online seem to work
2
Equifax SCANNED for vulnerable versions of Struts, but found nothing. Why? They forgot to use the recursive flag and were just searching the root web directory with the tool. I can imagine the commentary: "WOW, this tool is FAST!" "Yeah, good thing we're not vulnerable!"
5
71
16
254
Something to think about #reinvent
1
35
1
84
Cade Cairns retweeted
Chris Wysopal
@WeldPond19 Nov 2018
3rd party vulnerable library risk. “73.3% of outdated clients were actually safe from the threat. This is the first work to confirm that analysis, at library level, is indeed an overestimation.” Veracode data confirms. se-naist.jp/pman3/pman3.cgi?…
1
6
3
18
Does agile make us less secure? (slides from @acconf keynote this morning) speakerdeck.com/bruntonspall… – at Cambridge, England

Does agile make us less secure

Organisations adopting agile practices tend to throw out the old practices of requirements gathering, up front system design and careful analysis in fav…

speakerdeck.com
1
5
2
13
Looking at wi-fi meshes. Netgear needs some help in the industrial design department.
Good set of policies, tools, and references for enterprises managing open source programs and using open source: github.com/todogroup

TODO (OSPO) Group

TODO Group. TODO (OSPO) Group has 27 repositories available. Follow their code on GitHub.

github.com
Nice collection of links to #AWS testing tools: github.com/toniblyx/my-arsen…
3
3
"You wouldn't consider code done if it was buggy. We shouldn’t ask users to trust us with their data if security hasn’t been prioritized." - Sarah Diaz, Info Sec Analyst, ThoughtWorks To learn more, sign up for access to #XConfNA talks. thght.works/2L8EycA @s_e_diaz
2
3
Any good papers on AppSec ROI out there?
Load more