Lead Security Solutions Architect, AppSec, CISSP, make of things, breaker of things. My tweets are my own.
St. Louis, MO
Joined September 2009
- Tweets2.3K
- Following2.5K
- Followers359
- Likes4.3K
Package managers are trojan horses. npm, PyPI, Docker Hub -- all active attack vectors, cross-platform and cross-language.
Hash pinning + lock files aren't optional. They're the minimum.
Your dependency tree is an attack surface. Treat it like one.
#SupplyChainSecurity #AppSec
Andre Van Klaveren retweeted
Towards SSH3: How HTTP/3 improves secure shells
That’s amazing 💫
blog.apnic.net/2024/02/02/to…
Andre Van Klaveren retweeted
What if @1Password was breached? We should be asking this question of all password managers, here’s the answer: blog.1password.com/how-1pass…
Andre Van Klaveren retweeted
Today, we are launching our new Security Analytics, giving you a security lens across all of your HTTP traffic, so you can focus on what matters most: traffic deemed malicious but potentially not mitigated. cfl.re/3PahOqu
"For life is experience, and longevity is, in the end, measured by memories, and those with a thousand tales to tell have indeed lived longer than any who embrace the mundane. "
- Drittzt Do'Urden
#ThePirateKing #RASalvatore #Drittzt
I can't say I disagree with this verdict, given the information that came out around this.
Former Uber security chief found guilty of covering up data breach flip.it/idNmDL
Do you remember when you joined Twitter? I do! How time flies! #MyTwitterAnniversary
Andre Van Klaveren retweeted
Doxxing occurs when a person or other entity exposes private or public information about you, and it is often used to escalate greater harm like mass online harassment or in-person violence. Learn how to protect yourself online & advance your data hygiene. eff.org/deeplinks/2020/12/do…
Insider threat continues to be a significant risk, even for companies who's business is security.
blog.lastpass.com/2022/08/no…
Andre Van Klaveren retweeted
College completely failed to teach me data analysis.
So I spent over 10,000 hours learning Python.
Then, I picked the 13 best libraries for machine learning and data analysis.
But unlike college, these won't cost you $120,000.
Here they are for free:
Andre Van Klaveren retweeted
I haven't done this in a while, but my bug bounty course is free for the next hour or so.
Use code "JUNE2022" to get it! udemy.com/course/intro-to-bu…
You know it's bad when @Arbys runs out beef....and this is the second time in the last month.
Andre Van Klaveren retweeted
Kick off the New Year with some #developer training Jan 11-12 with trainer @manicode! Level up and learn a wide variety of secure coding techniques using the #OWASP Top 10. eventbrite.com/e/22160854612… #api #appsec #developertraining #top10 eventbrite.com/e/owasp-janua…
Andre Van Klaveren retweeted
Just blogged: A Password Manager Isn't Just for Christmas, It's for Life (So Here's 50% Off!) troy.hn/3lIufft
This is exactly why we assume SMS channels are compromised, always
#securitybreach #threatintelligence
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
Andre Van Klaveren retweeted
You are never, ever too “junior” to talk to anyone in Infosec. There’s no bar you must pass, talk you must give, code you must write before you’re qualified to nerd out with someone. Anyone. Really.
Trust me, the “famous” nerds miss the heck out of you.
Andre Van Klaveren retweeted
To reach the ~youth~ we're going to have to make infosec sea shanties, aren't we? Guess so!
Behold the tale of kid who reuses their passwords & ends up pwn'd, then learns how to stay safe. We're on a mission to encourage unique passwords stored in a password manager with MFA on.