Tomorrow, we are excited to have sal. on the livestream. We’ll be discussing #APIsecurity and recent Segment work. Sal also will be BSidesSF discussing protecting customer API keys. Join Ken Johnson and SeThLaW (l4wke) at 12 Noon Eastern for more: youtu.be/zCN-iWnaHOo

.Segment recently became a GitHub secret scanning partner! I'm on the team responsible for building the token revocation service powering this new partnership 😎 Learn about how we built this feature and another ways we proactively protect API tokens. segment.com/blog/how-segme…

BREAKING: heroku acquires jquery

This is a must read. Before becoming a blog post, I was lucky enough to have Leif Dreizler impart lots of his community involvement knowledge. Great to see it all in one mega-post and available to everybody 🥳

I just released a follow-up to my recent blog. It's all about creating a culture of community involvement at your company! It has a focus on getting new folks involved with blogging and conference speaking and helping them promote their work. leif.substack.com/p/share-the-sp…

I'm very excited to see a bunch of security friends and great presentations at BSidesSF on April 22nd & 23rd There is still time to buy your ticket 👀 bsidessf.regfox.com/2023

Sal crushing his first conference presentation at BSidesSF 👾

“The token is on the internet, and people are not nice on the internet.” - Sal sal. crushing his first BSidesSF talk

Sal went through his recent work on revocating public leaked secrets Segment. This could be an excellent opportunity to figure out how this can be more standardized in the industry so others can quickly implement this much-needed service into their platforms

I'm hosting a Semgrep meetup with Drew Dennison in NYC next week 🍻 get.semgrep.dev/Semgrep-julyMe…

there's a babel plugin to make your code gen z friendly

David Attenborough is now narrating my life Here's a GPT-4-vision + ElevenLabs python script so you can star in your own Planet Earth:

Since Notion released Notion Calendars, I had to reconfigure my productivity system. Finally. I can write notes productively.

FFmpeg will not be written in C++

🏃‍♂️ How Twilio Segment proactively protects customer’s API tokens Implements GitHub and GitLab secret scanning & revocation When offboarding users, alerts admins of "orphaned" tokens → 25% were deleted after 1st notification By sal. segment.com/blog/how-segme…

B I G

Biblical traffic tomorrow here in LA.