I am super excited to share a detailed post on how security engineers use Zoncolan at Facebook engineering.fb.com/security/zonco… It currently finds around 1/3 FB "In 2018, Zoncolan helped find and triage more than 1,100 security issues with severity “significant” or higher"

New bug bounty course from Hassan El Hadary is now in beta! This intensive 2-day course breaks down real-life examples while learning how to craft unconventional attack techniques for pursuing & disclosing bug bounties. View the event syllabus here: sans.org/u/15Th

موضوع حبس فتاتين ال تيك توك حزين، تدمير مستقبلهم بسنتين سجن علشان عملوا فيديوهات ع النت -مهما كان محتواها- شيء مرعب.

Today let's discuss why #bitcoin is a rubbish investment and a why for most people it's simply a way to light a bunch of money on fire just like gambling on the roulette wheel. 🧵 (1/)

I am thrilled to announce that I will be presenting Black Hat "Do You Speak My Language? Make Static Analysis Engines Understand Each Other" blackhat.com/us-21/briefing… Using static analysis to find security bugs cross-language and cross-repo #BHUSA

Never not going to retweet Mohammed El-Kurd's CNN interview. He was so brilliant and so ready from the very start I had to transcribe it.

Israel has the right to defend itself against several dozen AP journalists and freelancers.

By far, the most scathing critic of Israel I have I ever seen. It’s happening. The dam is cracking. #Palestine

Lets talk about how pyramid schemes like #bitcoin have historically exploded and the public damage that happens when they do. (1/) 🧵

So I noticed something really odd with the crypto bros. Well, maybe not odd, because it's something I've personally seen happen time and time again: if you point out problems with something, they get really mad and say "you're holding us back" and this... seems dumb? why? because

I'd like to thank my bank for making log off a GET request, and the Chrome team for handy URL prefetching.

On Being A Senior Engineer kitchensoap.com/2012/10/25/on-…

2 websites blocked: thepeninsulaqatar.com dailysabah.com 57 websites have been blocked in Egypt since 27May.

I recommend reading this article by Lesley Carhart - it is definitely worth your time: tisiphone.net/2017/06/28/why…

Fundamental problem with tech hiring: it’s structured as a search for DISQUALIFIERS for candidates.

Client side validation

Equifax uses open source software that it in no way contributes to, to protect $14B of data. Equifax blames OSS for hack. Don't be Equifax

"Palestinian in Gaza shot dead following clashes near the fence." How do people "clash" when separated by a military grade fence? In fact the defenceless victim was gunned down by someone guarding the ghetto perimeter. Our media are a large part of the problem. x.com/joedyke/status…

The spec was vague

It’s flattering but also misplaced when people think I’m somehow a better developer just for debugging an issue quickly. Often, I’ve just seen it or pieces of the problem before. And other times, our roles will be completely reversed. Just keep helping and sharing as you go.