Top Security Anti-Patterns in ASP.NET Core Applications veracode.com/blog/secure-de… via Veracode by Bran Mac Muffin

Today I learned about NFTs ( en.m.wikipedia.org/wiki/Non-fungi… ). It sounds really stupid. I'm sure it will make many traders lots of money. Why does it feel like everything is some sort of (but not quite) Ponzi scheme nowadays?

"What are the non-functional requirements for the system?" "We don't have any." "Sorry?" "We want the system to function." "Oh, I see... in software we often use 'non-functional' to mean something else." "In English we use non-functional to mean non-functional." #UseTheRightWords

I really hate how Stack Overflow brings out the worst sarcastic know-it-all responses in programmers. Every time I ask a question the interaction leaves me angry. I don't think anyone actually reads the (excellent) CoC: stackoverflow.com/conduct . Then again, why would they?

adidas is hosting a first code'n'stripes challenge. The rules are easy: 1) Come on May 28 2) Solve the challenge within 24 hours 3) Submit your solution 4) First 10 win some of the most coveted adidas sneakers and the fame of cracking the 3 stripes code adidas.github.io/codenstripes/

Why, oh why does *no one* do URL encoding for data they put in URLs? I swear I'll start randomly including & characters just to prove a point.

Word of the day is ‘spuddle’ (17th century): to work ineffectively; to be extremely busy whilst achieving absolutely nothing.

"So a C program with six 32 bit integers can have more states than the number of atoms on the planet" youtu.be/lKXe3HUG2l4

"Bug" v.s. "Feature" is a project pathology: blog.codinghorror.com/thats-not-a-bu… . They are both 'changes' that should be prioritized (the hard part that) and fixed based on prioritization. If you say "We fix all bugs, but prioritize features" you will have lots of discussions about "bugs".

Why are you interested in security as a field? (if you are, if you aren't why not?)

Every engineer should do a stint in consulting, by Forrest Brazeal cloudirregular.substack.com/p/every-engine…

I think this is pretty cool: youtube.com/watch?v=nmAJwP… I'm proud to call them my colleagues and hope more women get inspired because of them.

I am no longer an app sec consultant dude. But I still think it’s a great career move, and you can do it even if it’s hard to convince hiring managers that that’s true. A quick list of tips for getting hired to do app sec tests. 1/n

Is it me or are file names and sorting completely backwards from natural language? "A picture of the front of my house" and "a picture of the back of my house" becomes "my-house-front.jpg" and "my-house-back.jpg" to sort it effectively. Why?

Why have Holland as Country on Boarding Digitalization form British Airways ? Please watch this by CGP Grey 🐝 : youtube.com/watch?v=eE_IUP…

aaaaand then code execution?? #log4j #minecraft

My kids are playing chicken with an actual chicken... And the chicken is winning. I don't know what this says about my offspring.

Facebook scam, I’m selling a desk and they’re pretending to be interested. They’re using my cell number to attempt to sign up for google voice. Remember never share your 2FA codes.

I love that the Dutch government is actively promoting security.txt and encouraging companies to establish a route for reporting security incidents 😊 /cc Ed digitaltrustcenter.nl/nieuws/interne…