Application Security Professional. I focus on helping organizations get more value from their application security program.
Jacksonville, FL
Joined October 2010
- Tweets3.4K
- Following55
- Followers1.3K
- Likes1
This is a good example of how what we do in security is not much different than any other challenges we face.
Ep. 125: From Flat Tires to AppSec: The Power of Tools and Processes has just been released.
Just like changing a flat tire, the right tools, process and knowledge can make all the difference in a successful outcome.
podcast.developsec.com/24495…
James Jardine retweeted
Just posted Ep. 123: Goals of Security Culture - Sort of?
I share some thoughts on how security is a part of everyone's roles and some ideas of how to help build that awareness.
podcast.developsec.com/24495…
James Jardine retweeted
Should secure development be part of a developer's required skillset / experience?
Ep. 122: Integrating Security Responsibilities into Development has just been released!!
Check out the full episode: podcast.developsec.com/24495…
James Jardine retweeted
It is no longer just the company paying, ransomware attacks are coming after your money.
James: "They are sending out emails directly to those patients, those users and demanding, in this case it was $213 US dollars that they had to pay within 24 hours."
Full Video: youtube.com/watch?v=V1fzvSwY…
James Jardine retweeted
Ep. 121: Evolving Ransomware: Unique Tactics for Payment is now available.
Check out some unique tactics we have seen used to collect payment.
youtube.com/watch?v=V1fzvSwY…
James Jardine retweeted
Our PSIRT team has an opening! ServiceNow is the best place I've ever worked. The PSIRT team is doing some really interesting work - take a look at the role:
Staff Product Security Engineer | Web App Vulnerabilities careers.servicenow.com/jobs/… via @servicenow
#hiring #psirt
James Jardine retweeted
if you are using Firebase, here is their security checklist: firebase.google.com/support/…
Does the ASP:TextBox TextMode provide input validation?
I posted some information about what that attribute does and does not do.
jardinesoftware.net/2023/12/…
If you are using HAR files, this is a valuable resource.
Do you use HAR files for troubleshooting? Whether you are the person receiving the HAR file or sending it, it is important that it doesn't contain sensitive information.
Cloudflare has made a HAR sanitizer available. blog.cloudflare.com/introduc….
James Jardine retweeted
What do y’all think of the new bumpers?
You like? You love?
Leave an iTunes review/rating if you can, please, it helps give suggestions to others and makes it easier to find the show.
Thank you!
@Wh1t3Rabbit @JardineSoftware
James Jardine retweeted
Great episode, with a topic worth revisiting, and of course the best guests in the industry.
@shawnetuma @Wh1t3Rabbit @JardineSoftware
Shawn Tuma was recently featured on an episode of the @DtSR_Podcast, commencing his quarterly cybersecurity segment with Sean Scranton. Listen now. tinyurl.com/mvf9c2nj
James Jardine retweeted
🎙️Solving #SecretZero," decrypting "distributed fragmented crypto" (which is a bit mind-blowing) and the art of #SecretsManagement with @akeylessio @OdedHareven on the latest @DTSR_Podcast with @Wh1t3Rabbit and @JardineSoftware 🎧 Tune in! hubs.li/Q022JpQ10
James Jardine retweeted
Catch a live recording of the #DtsR podcast as we record it - linkedin.com/feed/update/urn… Check us out! #live #youtube @Wh1t3Rabbit @JardineSoftware @domvogel
James Jardine retweeted
Stack traces and other error information are often seen as low risk, but there are those outliers where it can be much more.
thehackernews.com/2023/09/ou…
James Jardine retweeted
Episode 565 of the @DtSR_Podcast is LIVE!
Check it out, this week @Wh1t3Rabbit & @JardineSoftware host the one and only Jim TIller.
YouTube link: youtube.com/live/se5M5vq5bcI
Pod (audio) link: buzzsprout.com/2153215/13450…
James Jardine retweeted
Curious why you can't just rely on client-side validation? Check out this quick post. developsec.com/2023/08/15/cl…
Private secrets, keys and tokens are a common issue in code repositories. GitHub just added a feature to help detect/block these on push requests.
bleepingcomputer.com/news/se…
#cybersecurity, #appsec
Ep. 120: Addressing Root Cause - Vuln Components
Thoughts on addressing the root cause vs. symptoms developsec.com/2023/01/31/ep…
If you are using S3 buckets, make sure you have them appropriately configured and also that you are not storing protected data in public buckets. theregister.com/2022/12/20/m…
