Good with computers.
London
Joined February 2016
- Tweets69
- Following32
- Followers47
- Likes115
Feeling buoyed up from all the great comments I've had on Wednesday's talk at @DevSecOpsLG so here ya go and enjoy your weekends!
Had a great night with @DevSecOpsLG last night. Thanks for inviting me to talk and thanks to everyone who came along. Special thanks to @JessicaCregg for the amazing livetweeting!
TDD was a meme introduced to Enterprise Java Teams in 2002 in an attempt to force them to think about the problem they’re trying to solve before writing another million lines of code. Unfortunately, it escaped containment and got into the heads of software developers everywhere.
It went on to inspire the development of object mocking frameworks, leading to comprehensive test suites that only proved the object mocking framework mocked your objects correctly.
To avoid being excessively negative, if you’d like to learn to program well I can heartily recommend the brilliant “How to Code: Simple Data” and “How to Code: Complex Data” courses freely available from UBCx on edx.org
What happens when you invite the entire room at an @OWASPLondon meetup to play the biggest online game of Cornucopia ever. Come on, folks, you're going to have to try harder than that!
Enterprise Cybersecurity #LIFEHACK: Incident response doesn't scale, so try to limit yourself to only one security incident at a time. Tell attackers to wait until you next have availability for an incident 👍
Toby Irvine retweeted
Secure Product Delivery for Finance. Bergen, May 10-11. An on-site, two-day workshop for product leaders in the financial industry. From @Noroff Accelerate (Prof Barry Irwin and @Naomi_Freeman) with workshops led by Secure Delivery's @tobyirvine and @rewtd checkin.no/event/42998/secur…
What an insightful guy! You should totally go and read this.
An insightful read on what DevSecOps and DevOps really mean in practice, by CEO @tobyirvine
securedelivery.io/articles/w…
#DevSecOps #DevOps #Security #AppSec
Toby Irvine retweeted
Our Threat Modelling workshops are one of the most popular sessions we run. These 4-hour guided workshops are fun (just look at those testimonials!) and active learning events, which help prevent insecure software design securedelivery.io/training/s…
#Cornucopia #EOP #appsec
Toby Irvine retweeted
Check out the in-depth, written tutorial from Grant @rewtd for his workshop on API Security Testing
#SecurityWorkshop #APItesting #CTF
@ZAProxyCon @StackHawk
securedelivery.io/articles/a…
There's also a write-up on securedelivery.io if you want to follow along. With some deviations from the video to show other (easier) ways to score the flags.
If you follow the @ZAProxyCon route, share your CORS attacks (and successes / failures) here!
I wrote something called "Securing the Digital Factory: Part 1" and I'm sorry about that. Hopefully the (eventual) series will be useful despite the title.
securedelivery.io/articles/s…
Toby Irvine retweeted
Tickets now available for this in-depth, full-day workshop hosted by @owasp from trainers @tobyirvine and @Po1Zon_P1x13
eventbrite.com/e/owasp-march…
#AppSec #IncidentReadiness #DevOps #SRE #CPD
Join us at this webinar that aims to teams DEVOPS & SRE teams skills, & knowledge needed to proactively prepare for when their world is breached. The event is a hybrid approach of traditional incident response molded into "Continuous Incident Readiness". owasp.org/events/
Really happy to be working with @Po1Zon_P1x13 on this, a legend in IR. Incident response is hard to get right and preparation is key. DevOps and SRE teams need to be ready to respond to a very bad day and this workshop will give you the knowledge you need. Hope to see you there!
@tobyirvine and I submitted our workshop “Continuous Incident Readiness for DevOps and SRE” has been accepted @owasp Training Event in March. Are you a developer or SRE and wondering what IR looks like sign up for the workshop.
Still encountering teams/orgs that are building new systems and enforcing password complexity rules (upper/lower case, symbols, etc.). Don't do this, see NIST's latest guidance: pages.nist.gov/800-63-3/sp80…
tl;dr If you gotta have memorised secrets just make them BIG and MEMORABLE
Congratulations to all OWASP's elected board members for 2022 and a special mention for our own @rewtd for his Vice Chair appointment. Let's make 2022 a year to remember!
Welcome the 2022 OWASP Global Board of Directors
Vandana Verma - Chair
Grant Ongers - Vice Chair
Glenn ten Cate - Treasurer
Avi Douglen - Secretary
Bil Corry - Member at Large
Joubin Jabbari - Member at Large
Martin Knobloch - Member at Large
owasp.org/www-board/
Toby Irvine retweeted
The recording of last week's incredibly interesting @owasp Oslo and Kristiansand joint chapter meetup is now online!
'If nothing goes right, push left' by @Po1Zon_P1x13
'Mistakes, Metrics & Lateral Flow Tests' by @tobyirvine
youtube.com/watch?v=g_YvPpV4…
#Security #AppSec #OWASP
Thanks for having me, @owasp Osla & Kristiansand. And extra thanks for organising, @Po1Zon_P1x13 & @fuzzerman. That was fun, and there were some great questions afterwards. Hopefully, @InsiderPhD will be back for next time - I'm looking forward to her talk on GraphQL!
I added support for Elevation of Privilege to Copi just the night before this very enjoyable discussion on threat modelling with Adam and Grant and, thankfully, didn't break anything in the process!
Many thanks to @AFiscutean for organising and writing up the article.
New article on @DarkReading: the importance of threat modelling, the recent NIST recommendations and how to play Cornucopia and EOP online (copi.securedelivery.io) from @AFiscutean ft @tobyirvine @rewtd @adamshostack and @_Colin_Watson
Essential reading!
darkreading.com/edge-article…