Joined September 2007
I'll be presenting "Teaching an old dog new tricks: Reusing security tools in novel domains" at #Enigma2022 in Santa Clara, February 1–3, 2022. It provides case studies of how security tools like Pysa have been used in non-security applications at Facebook bit.ly/enigma2022
1
1
7
For those attending @pycon (it's too late to sign up!), check out the out the talk @the_st0rm and I are giving on the myriad of APIs that can enable remote code execution in Python: us.pycon.org/2021/schedule/p… These examples were originally compiled as a part of our work on Pysa.
1
7
16
We just announced Facebook CTF! Come play :) facebook.com/notes/facebook-…
1
34
1
72
We have @fin1te on stage talking about security bugs in Facebook and Instagram found by researchers in their #bugbounty program. Watch the live stream now: facebook.com/OWASPLondon/
7
22
My team just open sourced fizz code.fb.com/networking-traff…, a performant implementation of tls1.3 in c++14. We also announced that more than 50% of Facebook traffic, and growing is now encrypted with tls1.3 and fizz just as rfc8446 is close to done
9
88
6
186
Uber Bug Bounty: New treasure map & updated scope! medium.com/uber-security-pri…
3
9
1
26
I wrote a post about "The IoT Spin Cycle" buff.ly/2nfNPQg
I think under certain conditions, hiring a CSO is a bad idea or is a symptom of a dysfunctional organization. medium.com/starting-up-secur…
6
12
2
13
(3) Introducing: "Blockchain Graveyard": Thirty-eight cryptocurrency breach announcements in one place. magoo.github.io/Blockchain-G…
2
34
4
43
Using Static Analysis And Clang To Find Heartbleed - bit.ly/1llxVy7
1
12
25
Today's the day! Come watch "The Smash Brothers" and chat with the director, @_samox_, TODAY at 2pm at @roxietheater! goodgamesf.com/smash
9
3
My first bug bounty: PHP Heap Overflow Vulnerability in imagecrop() hackerone.com/reports/1356
3
14
14
If you're at #CSAW13, stop by the Facebook table to say hi! :)
"Facebook Security discovered that our systems had been targeted in a sophisticated attack." facebook.com/notes/facebook-… More: arstechnica.com/security/201…
59
15