collin retweeted
I'll be presenting "Teaching an old dog new tricks: Reusing security tools in novel domains" at #Enigma2022 in Santa Clara, February 1–3, 2022. It provides case studies of how security tools like Pysa have been used in non-security applications at Facebook bit.ly/enigma2022
collin retweeted
For those attending @pycon (it's too late to sign up!), check out the out the talk @the_st0rm and I are giving on the myriad of APIs that can enable remote code execution in Python: us.pycon.org/2021/schedule/p…
These examples were originally compiled as a part of our work on Pysa.
collin retweeted
We just announced Facebook CTF! Come play :)
facebook.com/notes/facebook-…
collin retweeted
We have @fin1te on stage talking about security bugs in Facebook and Instagram found by researchers in their #bugbounty program. Watch the live stream now:
facebook.com/OWASPLondon/
collin retweeted
My team just open sourced fizz code.fb.com/networking-traff…, a performant implementation of tls1.3 in c++14. We also announced that more than 50% of Facebook traffic, and growing is now encrypted with tls1.3 and fizz just as rfc8446 is close to done
collin retweeted
Uber Bug Bounty: New treasure map & updated scope! medium.com/uber-security-pri…
collin retweeted
We've updated our bug bounty program with a larger minimum bounty and faster payouts!
medium.com/uber-security-pri…
collin retweeted
I wrote a post about "The IoT Spin Cycle" buff.ly/2nfNPQg
collin retweeted
I think under certain conditions, hiring a CSO is a bad idea or is a symptom of a dysfunctional organization. medium.com/starting-up-secur…
collin retweeted
(3) Introducing: "Blockchain Graveyard": Thirty-eight cryptocurrency breach announcements in one place. magoo.github.io/Blockchain-G…
collin retweeted
Red Teams: When you can't find the bad guys, make some up: medium.com/@magoo/red-teams-…
collin retweeted
Starting Up Security: A security roadmap for the terrified startup medium.com/@magoo/starting-u…
collin retweeted
Using Static Analysis And Clang To Find Heartbleed - bit.ly/1llxVy7
collin retweeted
Today's the day! Come watch "The Smash Brothers" and chat with the director, @_samox_, TODAY at 2pm at @roxietheater! goodgamesf.com/smash
collin retweeted
My first bug bounty: PHP Heap Overflow Vulnerability in imagecrop() hackerone.com/reports/1356
collin retweeted
If you're at #CSAW13, stop by the Facebook table to say hi! :)
collin retweeted
"Facebook Security discovered that our systems had been targeted in a sophisticated attack." facebook.com/notes/facebook-… More: arstechnica.com/security/201…













