Practical Program Analysis
@ProgramAnalysis
building security tools. Pentesting, static analysis, fuzzing, symbolic execution, and long walks on the beach
Tweetovi
- Tweetovi, trenutna stranica.
- Tweetovi i odgovori
Blokirali ste korisnika/cu @ProgramAnalysis
Jeste li sigurni da želite vidjeti te tweetove? Time nećete deblokirati korisnika/cu @ProgramAnalysis
-
Practical Program Analysis proslijedio/la je Tweet
tl;dr sec 22
* @AppSecCali#DevSecOps slides from@shehackspurple@FrankSEC42,@owasp@iotscan tool by@securestep9 *@dinodaizovi &@ErrataRob on decrypting WhatsApp messages *@laramies on Kubernetes security monitoring @ scale using@falco_orghttps://tldrsec.com/blog/tldr-sec-022-appsec-cali-kubernetes-monitoring/ …Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Practical Program Analysis proslijedio/la je Tweet
Over the past few years I've spent 100s (1000s?) of hours studying how companies have scaled their security. Here are my
@AppSecCali slides that distill what I've learned- the big, scalable, systematic wins that measurably improve your security posture.https://docs.google.com/presentation/d/1zbj9XBiv6r6zla0KHNfs63Ux45QZAfRut2zlK7o-dRw/edit#slide=id.g6555b225cd_0_1069 …Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Practical Program Analysis proslijedio/la je Tweet tl;dr sec #21
* Come see me speak on Fri
@AppSecCali
* @0xshellrider on how Netflix handles 3rd party dep security *@lancinimarco on using cartography for asset inventory *@cestlemieux &@ibags on#fuzzing * MBS
Bezos's phone?https://tldrsec.com/blog/tldr-sec-021/ …Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Practical Program Analysis proslijedio/la je Tweet
Thanks for reading!
If you liked this info, check out the tl;dr sec newsletter, a weekly summary of top security tools, resources, and talk summaries.
Have a great day!https://tldrsec.com/ Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Practical Program Analysis proslijedio/la je Tweet
I watched all 44
@owasp@AppSecCali 2019 talks (~32 hours of video) and wrote detailed summaries for you
Learn about #DevSecOps, scaling security, threat modeling, building a security program, & more.https://tldrsec.com/blog/appsec-cali-2019/ …Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Practical Program Analysis proslijedio/la je Tweet
If you found this info useful
and your New Year's Resolution is to keep up with the latest and greatest in #security
you should check out the tl;dr sec newsletter
(and at $0, it's way cheaper than a gym membership 
)https://tldrsec.com/ Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Practical Program Analysis proslijedio/la je Tweettl;dr sec 19
*
@shehackspurple &@j_opdenakker on getting into security * Google's BeyondProd & code provenance (thx@MayaKaczorowski) * Cloud, API, and file access bug security tools ... and I've got something big planned next week, stay tuned
https://tldrsec.com/blog/tldr-sec-019-beyond-prod-cloud-security/ …Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Practical Program Analysis proslijedio/la je Tweet tl;dr sec 18
*
@JohnLaTwC on the GitHubification of InfoSec *@swagitda_ on ransomware economics * omnibot: Lyft's Slack proxy and bot framework by@SquidDLane *@abhaybhargav IPython notebook for exploring ZAP's API and scripting * Ring and privacy
https://tldrsec.com/blog/tldr-sec-018-githubification-infosec-ring-privacy-ransomware-economics/ …Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Practical Program Analysis proslijedio/la je Tweet tl;dr sec 17!
* Had a blast on
@absoluteappsec with@sethlaw &@cktricky *@ucsenoi WEASEL, a DNS covert channel implant for red teams *@travismcpeak@__muscles monitor anomalous behavior w/ CloudTrail *@aomanzanera:@auth0's GuardDuty automation https://programanalys.is/blog/tldr-sec-017-aws-reinvent-absolute-appsec-supply-chain/ …Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Practical Program Analysis proslijedio/la je Tweet
Whoa! tl;dr sec is now over 500 subscribers!
I'm incredibly honored and humbled by the kind things people have said so far. Thank you
Busy & in #infosec? Check out what the fuss is about here. Join soon, it's like when Bitcoin was at $10
https://programanalys.is/newsletter/ Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Practical Program Analysis proslijedio/la je Tweet tl;dr sec 16
* I'm speaking
@BSidesSF w/ the amazing@astha_singhal@justine_osborne@zanelackey@dugdep *@MayaKaczorowski's talk on K8s security *@arkadiyt detect manual AWS Console actions *@Cloudflare
Flan Scan
* @PayPal SCORE Bot
https://programanalys.is/blog/tldr-sec-016-art-of-vulnerability-management-cloud-security/ …Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Practical Program Analysis proslijedio/la je Tweet tl;dr sec #15
*
@albinowax on cracking reCAPTCHA *@DanielMiessler on blogging,@shehackspurple on talks, presentations & social media * Bugcrowd & Bitdefender team up for asset inventory * Several fuzzing tools *@trailofbits on differential#fuzzing https://programanalys.is/blog/tldr-sec-015-osint-screenshots-fuzzing-2-fast-2-discoverious/ …Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Practical Program Analysis proslijedio/la je Tweettl;dr sec 14
*
@devseccon Tel Aviv talks@ElissaBeth@florx@liran_tal & myself *@ryanhuber Slack's overlay networking tool * OSINT#BugBounty@HusseiN98D@gwendallecoguic *@hillelogram formal methods *@randohacker struct padding leaking stack memory https://programanalys.is/blog/tldr-sec-014-dsc-tlv-osint-struct-padding/ …Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Practical Program Analysis proslijedio/la je Tweet tl;dr sec 13 is live!
*
@GustoHQ's@nathanmyee@owasp Amsterdam talk "Being Powerful While Powerless" * sadcloud by@NCCGroupInfosec's@ramimacisabird &@0xJDow *@Bugcrowd's Attack Surface Management product and more! https://programanalys.is/blog/tldr-sec-013-powerful-while-powerless-sadcloud-bugcrowd-asset-inventory/ …Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Practical Program Analysis proslijedio/la je Tweet
@csima said some kind words abouttl;dr sec on LinkedIn and said he didn't mind if I shared them here 
tl;dr sec has been a lot of work, but things like this encourage me to keep going!
You can get in on the action here:
https://programanalys.is/newsletter/ pic.twitter.com/bqwq1g12dE
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Practical Program Analysis proslijedio/la je Tweet tl;dr sec #12
* SameSite
CSRF
* @MITREattack Cloud Matrix *@owasp Global AppSec Amsterdam vids posted * HTA shell for breakout assignments by@OneLogicalMyth * r/websecurityresearch from@PortSwigger *@trailofbits Fall Update and more! https://programanalys.is/blog/tldr-sec-012-killing-csrf-attack-cloud-cache-poisoned-dos/ …Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Practical Program Analysis proslijedio/la je Tweet tl;dr sec #11 is live! Featuring some
@ShellConLa summaries + links. https://programanalys.is/blog/tldr-sec-011-shellcon-2019-roundup/ … Tools: * JsFuzz - coverage guided#fuzzer for JS by@fuzzitdev * pyre-check - type checker / data flow analysis for#Python (thx@dmolnar for the tip)Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Practical Program Analysis proslijedio/la je Tweet tl;dr sec #10 is live!
*
@worldwise001 shared her accepted Enigma submission (congrats!)
* @maddiestone got people to share some great keynote recs *@travismcpeak shared insights on policy_sentry, a tool to help generate least priv IAM policies https://programanalys.is/blog/tldr-sec-010-cloudflare-on-security-iam-least-priv-xss-in-firefox-ui/ …Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Practical Program Analysis proslijedio/la je Tweet
I couldn't be more excited and honored to be giving this keynote!
It's a pleasure being a part of the #DevSecOps and@devseccon communities- so many smart people doing such awesome work, I'm constantly learninghttps://twitter.com/devseccon/status/1181442035682664448 …
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Practical Program Analysis proslijedio/la je Tweet
If you found this summary useful, consider subscribing to the tl;dr sec newsletter
More summaries of great security talks are in the works!
Thank you, and have a great rest of your day
https://programanalys.is/newsletter/ Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.