#Appsec

security_prince

We tried something new today, we did a security review for a new service in our company and once we completed the review we asked the developer these questions and

Account Enumeration Via Database CollisionA Nops #AppSec StoryI've seen some interesting behavior in apps that use your email as a username.I own a domain that I use for all my

tl;dr sec #31 * @shehackspurple's online learning platform* Free #AWS/#Azure security course by @appseccouk * Tools for continuous cloud and container security* A VM with 8 C2 frameworks to play

insecurity princess 🔥💖🌸

HugOps to Twitter Security Incident ResponseIt looks rough. I wish you the best.https://www.businessinsider.com/hackers-bitcoin-crypto-cashapp-gates-ripple-coindesk-twitter-scam-links-2020-7 The decisions and repercussions involved in how a

Fuck it, security engineering teams as D&D classes: First, and most importantly because it's what *I* do, SecOps are your paladin tanks. They have to be burly enough to do

HIRING THREAD: On a team meeting today I realized we have *EIGHT* open roles and want to get these out in front of people. Links and brief descriptions follow. Our