Iacopo Papalini

1/ Practically every startup ends up writing code, even if technology wouldn't be the main focus of the company. Here’s a checklist I made to help you and your hot new startup avoid the most common infosec pitfalls. [thread]

30k followers need in 4 days to reach 1 million followers. We can do this. Ask your followers to follow @AuschwitzMuseumhttps://twitter.com/AuschwitzMuseum/status/1213071678080790530 …

The thing about a framework, Scrum, TDD, whatever, is that it is a massive simplification of how the thing "should" be done. A good framework has rumble strips and guard rails. When you hit those, they alert you to issues that the beginner would likely miss on their own. 1/9

My computer's never gotten hacked before, but suddenly after switching to Linux as my primary operating system, I've been hacked twice. Maybe it's the distro? Does anyone have any good distro recommendations? I'm using metasploitable currently, so other than that.

Happy Python 2.7 deprecation day

In exactly one month the world will commemorate the 75th anniversary of the liberation of Auschwitz. In just five days we will enter into 2020. Do you think you could try to help us reach to 800,000 followers still in 2019?

Dumb #dnd story time. I once gave my players "A Tome of Absolute Knowledge." A thick wood-bound ledger full of tiny 3pt font script. There was a wooden mouth carved on the front that spoke (without moving) to anyone who wished to read from the book. 1/?

I feel like the hardest part of defense is listening to red teamers explain that the open source malware they shat onto the internet somehow helps you.

I don’t know which bit of this crazy GPS kids tracker watch research disgusts or surprises me most: That recordings of kids phone calls to parents are openly accessible Or that disabled athletes at the Special Olympics World Games were exposed 1/x https://www.pentestpartners.com/security-blog/kids-tracker-watches-cloudpets-exploiting-athletes-and-hijacking-reality-tv/ …

i don't know who needs to hear this but if you get into some gnarly git rebase hell and find it easier to just reset hard and re-add your changes on top of latest, i respect your priorities

This thread is a great example of how algorithmic discrimination can occur from using seemingly objective techniques. In this case, it's HR departments using personality tests to filter applicants before forwarding to hiring managers. I've seen these tests & they're ridiculoushttps://twitter.com/TheWrongNoel/status/1194842728862892033 …

I'm a stickler for keeping "attack" narrowly focused on deny, degrade, destroy, disrupt - DDoS isn't especially complex or elegant, but it def will deny, degrade, or disrupt. So not the sexiest type of attack, but label fits IMHO.