Appsec @poloniex, @OWASPTop10 co-lead. All statements are my own.
New Hampshire, USA
Joined May 2008
- Tweets1.4K
- Following432
- Followers514
- Likes394
Your voice counts
Calling all AppSec pros, devs & security leaders! The OWASP Top 10 2025 is in the works & your input matters. Survey closes Oct 3 - don’t wait! forms.gle/jL3r5Xgg1Hj2bv2B9
Neil Smithline retweeted
Terrific talk by @appsecneil today at the NYC CTO Club on how DPRK stole over $100m from Poloniex therecord.media/poloniex-cry… So many learnings: retain Mandiant services, be ready to be attacked before holidays, have robust tabletops, have a PR strategy during the ground zero hours, prepare your teams to be available for a long day/week and devise a rotation strategy.
Real life example of hacking via an update channel. German wind turbines affected. Devices were bricked and needed replacement.
hackaday.com/2022/06/02/the-…
I'm hiring a technical security manager for a leading blockchain company. Come be part of the future of money poloniex.careers/job/?gh_jid…
Hi! I'm attending OWASP Global AppSec US 2021 Conference. Let's start connecting with each other now. whova.com/whova-event-app/
Neil Smithline retweeted
Brilliant perspective on secure architecture and programming languages! @thejonmccoy @appsecneil @freak_crypt @romancat @BrkSchoenfield @semioticsweb
We’re proud to share that our regular speaker and core #OpenSource #CommonLisp contributor, @fare (@ngnghm @phanaero), will share #blockchain #cybersecurity wisdom next month with the @owasp community. meetup.com/OWASP-New-York-Ci…
Neil Smithline retweeted
It's survey time!
forms.gle/s3nacjdm7Z9BSAzs7
OWASP Top Ten 2021 Survey needs your input to help identify up to two risk categories that should be included. Please spread far and wide so we can get as many unique perspectives as possible. Thank you for your help!
Neil Smithline retweeted
The @OWASPTop10 2021 team is soon to release the qualitative survey. We have a few CWEs that we think are on the cusp. What would you like to see on the survey that should be in the OWASP Top 10? CWE's or ASVS references, please. @infosecdad @torsten_tweet @appsecneil Pls RT
Neil Smithline retweeted
Update Time! We now have a project site to help share our status and communicate what/why we are doing for the next Top Ten 2021. You can find it at owasptopten.org
Neil Smithline retweeted
Check out this @owasp @OWASPTop10 overview by @vanderaj and @InfosecVandana! youtube.com/watch?v=RMkoIrpz…
Now's the time to get your data included!
Just a friendly reminder that the @owasp Top 10 Datacall is currently open. We have numerous submissions so far and would love more. Help us build the next Top 10 by providing your insight and perspective via data! owasp.org/www-project-top-te…
Verifying myself: I am neil_smithline on Keybase.io. NO2e6RT4NqWAr8wr_9QX0jtmW5gUbXjkWpB8 / keybase.io/neil_smithline/si…
Neil Smithline retweeted
Cool use of @haveibeenpwned by @Poloniex to demonstrate account takeovers were due to existing breaches and password reuse: “Crypto exchange Poloniex denies data leak after resetting passwords for some users” finance.yahoo.com/news/crypt…
Neil Smithline retweeted
Earlier this week we required a small group of customers to reset their password in response to a tweet claiming to contain a list of leaked email addresses and passwords. To confirm, there was no information or data leak originating from Poloniex
medium.com/poloniex/addressi…
