Reposted by emil
All military aid from the U.S. to Ukraine from 2014-2024 has cost the U.S. tax payer $19.94 per person per year.
In return they got to destroy Russia’s entire Soviet equipment inheritance and still complain it is a bad deal
In return they got to destroy Russia’s entire Soviet equipment inheritance and still complain it is a bad deal
March 9, 2025 at 1:21 AM
All military aid from the U.S. to Ukraine from 2014-2024 has cost the U.S. tax payer $19.94 per person per year.
In return they got to destroy Russia’s entire Soviet equipment inheritance and still complain it is a bad deal
In return they got to destroy Russia’s entire Soviet equipment inheritance and still complain it is a bad deal
Reposted by emil
New details on the ByBit/Safe{Wallet} breach, and uhhh wow, some really silly blunders on the DPRK side. They still succeeded which is the most upsetting part of all of this. Let's bully some threat actor tradecraft! A🧵
x.com/safe/status/...
x.com/safe/status/...
Safe.eth on X: "Investigation Updates and Community Call to Action" / X
Investigation Updates and Community Call to Action
x.com
March 6, 2025 at 5:21 PM
New details on the ByBit/Safe{Wallet} breach, and uhhh wow, some really silly blunders on the DPRK side. They still succeeded which is the most upsetting part of all of this. Let's bully some threat actor tradecraft! A🧵
x.com/safe/status/...
x.com/safe/status/...
quick maths 60/4=15 hours per day, easy 🥵
“I recommend being in the office at least every weekday…60 hours a week is the sweet spot of productivity” - Sergey Brin
Quite the vibe shift from tech employees asking about four-day workweeks.
Quite the vibe shift from tech employees asking about four-day workweeks.
Google’s Sergey Brin Asks Workers to Spend More Time In the Office (Gift Article)
The tech giant’s co-founder said that if employees worked harder and were in the office more, the company could reach an artificial general intelligence breakthrough.
www.nytimes.com
March 2, 2025 at 5:59 AM
quick maths 60/4=15 hours per day, easy 🥵
Very interesting work!
Excited to present Security Signals with @ddworken.bsky.social and @webappsec.dev, my primary project at Google for the past five years. Thanks, @madwebwork.bsky.social!
Paper: research.google/pubs/securit...
Slides: speakerdeck.com/mikispag/sec...
Paper: research.google/pubs/securit...
Slides: speakerdeck.com/mikispag/sec...
Security Signals: Making Web Security Posture Measurable At Scale
research.google
March 2, 2025 at 5:54 AM
Very interesting work!
Reposted by emil
Reminder that the Call for Presentations for Sikkerhetsfestivalen (The Security Festival) is open. OWASP Oslo is hosting an AppSec track. Scroll down the page for English version:
sikkerhetsfestivalen.no/alle-nyheter...
sikkerhetsfestivalen.no/alle-nyheter...
February 10, 2025 at 11:20 AM
Reminder that the Call for Presentations for Sikkerhetsfestivalen (The Security Festival) is open. OWASP Oslo is hosting an AppSec track. Scroll down the page for English version:
sikkerhetsfestivalen.no/alle-nyheter...
sikkerhetsfestivalen.no/alle-nyheter...
Reposted by emil
Seems like there's a bit of confusion around the recent @Semgrep licence change and the @opengrep fork and I think there are two key points to highlight.
1/10
1/10
January 24, 2025 at 11:04 AM
Seems like there's a bit of confusion around the recent @Semgrep licence change and the @opengrep fork and I think there are two key points to highlight.
1/10
1/10
Reposted by emil
I've spent dozens of hours reading State of Cloud Security reports
You know, the ones that use data from their CSPM product
And I've realized the findings substantially reflect how well that tool helps customers secure their clouds
I wrote up some examples, both good and bad (🔗 in 🧵)
You know, the ones that use data from their CSPM product
And I've realized the findings substantially reflect how well that tool helps customers secure their clouds
I wrote up some examples, both good and bad (🔗 in 🧵)
December 18, 2024 at 4:50 PM
I've spent dozens of hours reading State of Cloud Security reports
You know, the ones that use data from their CSPM product
And I've realized the findings substantially reflect how well that tool helps customers secure their clouds
I wrote up some examples, both good and bad (🔗 in 🧵)
You know, the ones that use data from their CSPM product
And I've realized the findings substantially reflect how well that tool helps customers secure their clouds
I wrote up some examples, both good and bad (🔗 in 🧵)
Reposted by emil
Slides for the @bsideslondon.bsky.social container security workshop presented with @smarticu5.bsky.social and @marionmccune.bsky.social are here blog.iainsmart.co.uk/talks/BSides...
blog.iainsmart.co.uk
December 15, 2024 at 10:48 AM
Slides for the @bsideslondon.bsky.social container security workshop presented with @smarticu5.bsky.social and @marionmccune.bsky.social are here blog.iainsmart.co.uk/talks/BSides...
Reposted by emil
absolutely incredible attack vector
December 6, 2024 at 3:27 AM
absolutely incredible attack vector
Reposted by emil
Modern solutions against cross-site attacks (frederikbraun.de/modern-solut...): An article about cross-site leak attacks and browser-based defenses. You will also learn why web security best practices is always opt-in and finally how YOU can get increased security controls.
Modern solutions against cross-site attacks
Modern solutions against cross-site attacks
frederikbraun.de
November 27, 2024 at 7:50 AM
Modern solutions against cross-site attacks (frederikbraun.de/modern-solut...): An article about cross-site leak attacks and browser-based defenses. You will also learn why web security best practices is always opt-in and finally how YOU can get increased security controls.
Reposted by emil
This is a fascinating case study of real operational use of cryptography by non-technical people, of OPSEC, of anonymity tech, and of web security.
cw: drugs
cw: drugs
Captchas, Monero, scams and absolutely no JavaScript. In my latest article, I examine all the moving parts that go into running the markets you've never used.
https://boehs.org/node/dark-web-security
https://boehs.org/node/dark-web-security
December 2, 2024 at 11:03 AM
This is a fascinating case study of real operational use of cryptography by non-technical people, of OPSEC, of anonymity tech, and of web security.
cw: drugs
cw: drugs
Reposted by emil
tailscale.com/blog/infra-t...
Awesome article by @tailscale.com team. It shows the good stuff that can happen if you take product design security and scalability from the get go. Kudos to the team, and I think at this point I should call myself a fanboy xD
I didn't know about setec. That's awesome
Awesome article by @tailscale.com team. It shows the good stuff that can happen if you take product design security and scalability from the get go. Kudos to the team, and I think at this point I should call myself a fanboy xD
I didn't know about setec. That's awesome
How Tailscale's infrastructure team stays small
Tailscale’s secure, simplified networking solution helps DevOps teams eliminate infrastructure headaches. Learn how our infra team of just three engineers uses Tailscale to handle networking, secrets,...
tailscale.com
December 2, 2024 at 1:07 PM
tailscale.com/blog/infra-t...
Awesome article by @tailscale.com team. It shows the good stuff that can happen if you take product design security and scalability from the get go. Kudos to the team, and I think at this point I should call myself a fanboy xD
I didn't know about setec. That's awesome
Awesome article by @tailscale.com team. It shows the good stuff that can happen if you take product design security and scalability from the get go. Kudos to the team, and I think at this point I should call myself a fanboy xD
I didn't know about setec. That's awesome
Reposted by emil
The self described “Shodan of AWS” is now live! This is an amazing project from Daniel Grzelak that helps democratize cloud resource enumeration for the masses. Very excited about this!
awseye.com
awseye.com
Awseye - See Inside AWS Accounts
Awseye tracks publicly accessible AWS data to help identify and secure known and exposed AWS resources. Empowering defenders with open-source intelligence.
awseye.com
November 26, 2024 at 2:31 AM
The self described “Shodan of AWS” is now live! This is an amazing project from Daniel Grzelak that helps democratize cloud resource enumeration for the masses. Very excited about this!
awseye.com
awseye.com
Reposted by emil
If you're looking for the security talks from Kubecon NA 2024, I've added the abstracts and Youtube embeds to talks.container-security.site/categories/#... .
There's also talks going back to 2016 in case you really want to watch a lot of container security videos!
There's also talks going back to 2016 in case you really want to watch a lot of container security videos!
Posts by Category
This site hosts a list of talks from various conferences on the topic of Cloud Native security.
talks.container-security.site
November 18, 2024 at 7:27 PM
If you're looking for the security talks from Kubecon NA 2024, I've added the abstracts and Youtube embeds to talks.container-security.site/categories/#... .
There's also talks going back to 2016 in case you really want to watch a lot of container security videos!
There's also talks going back to 2016 in case you really want to watch a lot of container security videos!