Security, Astronomy, Geek. Personal account
Joined April 2011
- Tweets270
- Following0
- Followers66
- Likes1.4K
Hey @SpotifyCares is there a way to use Spotify kids without a phone (using web browser)? My kids don't have a phone but love to listen to music on Spotify.
jay kelath retweeted
Incredible research: $75,000 bounty🤯
"My research uncovered 7 0day vulnerabilities in Safari (CVE-2020-3852, CVE-2020-3864, CVE-2020-3865, CVE-2020-3885, CVE-2020-3887, CVE-2020-9784, & CVE-2020-9787), 3 were used in kill chain to access the camera."
ryanpickren.com/webcam-hacki…
jay kelath retweeted
I never announced my move last October but I relocated to Austin, TX to accept a role as the Security Manager at YETI.
With that said, who wants to join me?
I am working on a req to hire a traditional blue team Security Engineer. My DMs are open if you'd like to chat.
jay kelath retweeted
So You Want to Learn Azure Security? michaelhowardsecure.blog/202…
jay kelath retweeted
How we trust libraries:
- number of users
- authority of author(s)
- last change was recent
- number of commits
- number of issues
- readme/changelog/releases maturity
- number of blogs
What did I miss? And is it different from selecting Saas Services?
How do new libs grow this
Great content and food for thought. Agree with the article about making security everyone's responsibility. How to do it within the culture of a company is the tough bit
Also, I've been thinking about why we imitate Groundhog Day in our industry for 7 years now, happy to chat. Part of this thinking is here: vice.com/en_us/article/nz7q3…
jay kelath retweeted
Awesome CodeQL query from @ggolawski that detects many variants of LDAP Injections in Java: Plain Java JNDI, UnboundID, Spring LDAP and Apache LDAP API. We are pleased to award him our maximum bounty reward $3000
github.com/Semmle/ql/pull/26…
jay kelath retweeted
Azure Functions, The Game by @marcduiker 😍👏👏👏 marcduiker.itch.io/azure-fun…
jay kelath retweeted
🎁 1000+ #golang exercises are waiting for you. From the simplest ones to the advanced.
Check out: github.com/inancgumus/learng…
PS: I salute you if you can solve the advanced slice exercises.
jay kelath retweeted
I was today years old when I found out that @signalapp has a note to self feature which also supports disappearing messages.
jay kelath retweeted
Nice article listing missing pieces in Kubernetes core to make on-prem clusters work like GKE etc. charlescary.com/bringing-on-…
On the flip side, these are the same challenges we solve while bringing GKE to on-prem with Anthos.
jay kelath retweeted
Thread
Real World Crypto 2020 is upon us. RWC is the marquee applied cryptography conference, bringing together academia and industry (51% of attendees have no academic affiliation). It's the largest RWC ever with 642 attendees.
Talk summaries to follow.
#realworldcrypto
jay kelath retweeted
Love this from Marc Andreesen:
"The world is a very malleable place. If you know what you want, and you go for it with maximum energy and drive and passion, the world will often reconfigure itself around you much more quickly and easily than you would think."
— @pmarca – at Brooklyn, NY
Thanks. This is great!
Just open sourced all my security career ladders in time for 2020 planning - Enjoy & good luck - bit.ly/36sqBNl
jay kelath retweeted
What a crypto backdoor looks like. NSA Backdoor Key from Lotus-Notes cypherspace.org/adam/hacks/l…
jay kelath retweeted
Last year @SpenGietz wrote about 21 methods that could lead to #AWS #privesc. Gerben Kleijn discovered that those 21 methods could be grouped into 5 categories. Learn more about his findings & how to securely set up user permissions. hubs.ly/H0ml8540
jay kelath retweeted
Pretty happy to see a “BeyondProd” paper get published. Going to make it easier to explain to people that BeyondCorp doesn’t mean “put all your production services on the internet with mTLS” cloud.google.com/blog/produc… – at Nashville, TN
