@LewisArdern

Security Researcher @Semgrep & Host of @SecuriTnC. Application Security is my šŸž & šŸ§ˆ.

 Los Angeles, California
twitch.tv/karlbaskin
Joined August 2009
  • Tweets8K
  • Following642
  • Followers2K
795Media
The next SecuriTEA & Crumpets is out! Check out my chat with @Primed_Mover where we talk about Egress Filtering in AWS, his academic work, and #supplychain security #infosec #appsec youtube.com/watch?v=xjSESrkIā€¦

SecuriTEA & Crumpets - Episode 22 - David Gilman

SecuriTEA & Crumpets is a series where security professionals come ...

youtube.com
1
6
1,504
Lewis Ardern retweeted
Leif Dreizler
@leifdreizlerAug 12
Malicious Python and JavaScript deps have dominated this year's supply chain news cycle, but how many of y'all still have pinning GitHub Actions on your to do list? Hereā€™s how I did this org-wide at Semgrep. semgrep.dev/blog/2026/sha-piā€¦

GitHub Actions SHA Pinning, Org-Wide | Semgrep

Tags are mutable, commit SHAs aren't. How we pinned every GitHub Action across an org after the tj-actions/changed-files compromise, plus what to avoid.

semgrep.dev
8
2
17
3,120
Breaking: Newly uncovered OpenAI Codex vuln enables command injection via GitHub branch names in task creation requests. Attackers could steal GitHub user access tokens & sensitive data. Full breakdown by Tyler Jespersen: lnkd.in/ewdTaiEa #OpenAI #BTPhantomLabs
šŸ¤– Made with AI
4
33
5
120
212,480
Lewis Ardern retweeted
Semgrep
@semgrep16 Sep 2024
šŸ¹ Security meets social at our Security Speakeasy! Network with top industry pros and enjoy a great evening hosted by Semgrep, JIT, and @OligoSecurity. šŸ“… Mark your calendar for September 25th, 7-10 PM at Local Edition. lu.ma/nqcqmhff #appsec #owaspglobalappsec
2
3
478
I just published my yearly blog! It's about preparing for performance reviews and tracking career growth year round šŸ“ˆ leif.substack.com/p/consisteā€¦
5
1
8
1,897
Ready for launch šŸš€ I'm so excited to share with the world what we're doing at @Nightvision_inc to identify exploitable vulnerabilities earlier in the SDLC šŸ§µ Yes, we made DAST that doesn't suck. Relevant YouTube interview from RSA: youtube.com/watch?v=g5NWwcA9ā€¦
2
13
3
26
4,877
The fact @ThePrimeagen latest video was exactly 420 is amazing. Excited to see you continue to crush it youtube.com/watch?v=UWb1dw_kā€¦

This Is Goodbye

### TwitchEverything is built live on twitchTwitch : https://bit....

youtube.com
309
Lewis Ardern retweeted
Variety
@Variety28 Feb 2024
Apple TV+ has ordered a series adaptation of the William Gibson novel ā€œNeuromancer.ā€ The 10-episode series hails from co-creators Graham Roland and JD Dillard. Roland will also serve as showrunner, while Dillard will direct the pilot. variety.com/2024/tv/news/appā€¦

Apple Orders ā€˜Neuromancerā€™ Series Based on William Gibson Novel

Apple TV+ has ordered a series adaptation of the William Gibson novel "Neuromancer," Variety has learned.

variety.com
50
389
480
1,762
977,686
Lewis Ardern retweeted
MrBeast
@MrBeast22 Jan 2024
Iā€™m gonna give 10 random people that repost this and follow me $25,000 for fun (the $250,000 my X video made) Iā€™ll pick the winners in 72 hours
368,962
2,485,992
220,012
1,833,070
286,738,148
Wonā€™t be on the market for long, if you are hiring reach out
This quoted post is unavailable.
Try viewing anyway Ā· View on X
1
652
Lewis Ardern retweeted
Brandon Wu@onefiftyman20 Nov 2023
After a long coming, and many months of work behind the scenes, I have finally made my functional programming lectures from this summer at CMU available for free online. I truly hope it helps people. brandonspark.github.io/150/
7
55
2
263
36,127
Lewis Ardern retweeted
Pieter De Cremer@0xDC0DE8 Nov 2023
I am excited to speak again at the OWASP BeNeLux days! I spoke there two years ago when I just graduated my PhD. It is a fun conference with many great people to meet. See you all in Hasselt! owaspbenelux.eu/program/talkā€¦ #owasp #benelux #securedefaults
2
3
467
Lewis Ardern retweeted
Raz0r
@theRaz0r7 Nov 2023
Received some swag and lovely message from @semgrep, thank you @LewisArdern @0xDC0DE!
2
6
804
+1 its where I met @5uggy and gave one of my first presentations
Mo Amin@infosecmo6 Oct 2023
The rookie track is indeed legendary.
1
5
776
Lewis Ardern retweeted
Tom Cardy@Tomycardy20 Sep 2023
Perception check
1,112
31,256
3,247
123,658
10,511,013
Anyone would be lucky to have Enno on their team! If you are hiring you should reach out to them #infosec #appsec
Youā€™re unable to view this Post because this account owner limits who can view their Posts. Learn more
2
583
We're open sourcing new Semgrep rules to detect CSRF and CORS misconfigurations in Apollo GraphQL. Check out how we used Semgrep's taint mode to make the rules more accurate and easier to write. blog.trailofbits.com/2023/08ā€¦

Secure your Apollo GraphQL server with Semgrep

tl;dr: Our publicly available Semgrep ruleset has nine new rules to detect misconfigurations of versions 3 and 4 of the Apollo GraphQL server. Try them out with semgrep ā€“config p/trailofbits! When...

blog.trailofbits.com
12
1
47
7,192
Replying to @0xDC0DE @BSidesMunich
šŸ‘œ Bring your own code and I will help you write Semgrep rules, live at the workshop! āœ Sign up for my workshop on October 14 if you are interested. 2023.bsidesmunich.org/workshā€¦
3
1
3
1,296
šŸ¦ ā˜ ļø āŒ
1
322
Lewis Ardern retweeted
French@nfFrenchie12 Aug 2023
šŸš€ I'm Hiring: Founding Engineer! Huge problem space, exciting tech, opportunity for huge ownership of the solution. #golang, Software Supply Chain, #k8s, #SBOM & #SLSA More info here: q1mj3jo8eof.typeform.com/to/ā€¦ #BuildTrustedSoftware
2
29
8
53
18,303
The @AppSec_Village @semgrep training is first come first serve you need to line up here for 245, it is ideal if you have a laptop as the training is interactive and you will be writing semgrep rules!
2
2
1,215
Load more