Hey #bsidessf Splunk is hiring Product Security Engineers (Sr/Principal) and Leaders. DM me or reach out in person @ #bsidessf2020 if you’re interested! Here are the roles: g.co/kgs/EAMGZK g.co/kgs/jD4qgv

📈 How to Scale Threat Modeling Many AppSec teams struggle with this Here's how Jacob Salassi did it in a hypergrowth startup: SnowflakeDB Now the story of a scrappy startup on its way to IPO, and the teams who had no choice but to scale their processes, together 👇

I'm discussing “Scaling Infosec - Lessons in Leadership” with a few friends Tomorrow, Feb 12 at 12:00 PM PST on @joinclubhouse. Join us! joinclubhouse.com/event/mgn32keZ

I'm discussing “Scaling Security - Leveraging MSSPs Effectively” with Anshuman Bhartiya and Bryan Solari. Tomorrow, Feb 19 at 12:00 PM PST on Follow @Clubhouse. Join us! joinclubhouse.com/event/xXzj4Zvv

Signal now supports 40 person group calls! This post details what's required to support end-to-end encrypted group video calls of that size. Building network apps has become increasingly straightforward, but this is still one area that is difficult and expensive to do well.

1. Spent the past few weeks going down a rabbit hole learning about MEV and Flashbots — very cool stuff! I was surprised to learn that beneath the surface, Ethereum is lurking with sniper bots waiting for any opportunity to make money. Here’s a TLDR on some research + findings.

Threat Modeling is truly amazing. If done well, it can be used as a playbook for your entire security program. A 🧵1/

Object Access Control (AuthZ) is a massive pain point for web apps, especially in today's distributed apps. Let's look at issues and popular models in a 🧵 1/

I write a lot of code every week. Naturally, I look for/run into tools. Some of them are really interesting. Every Saturday, I post the useful tools of the week. They are a combination of Security/DevOps/Cloud. A 🧵1/

Announcing God In a Box, a direct implementation of GPT-3.5 into Whatsapp. Unlike other implementations, ours uses the brand new model and API, and doesn't require credentials. We're launching tonight, but you'll need a beta key. For a free key, just RT this and I'll DM you one.

I wrote a 30,000 word Notion guide on every single tax saving strategy I wish I knew 3 years ago Includes strategies for startup founders, business owners, freelancers, W-2 employees, side hustlers Want a free copy? Like / RT and leave a comment and I'll DM you

Yammer is hiring Senior Security Engineers. Do let me know if you are interested in the position. lnkd.in/bZeKT9q

Best #infosec books of 2014: adam shostack Slava Gomzin jayjacobs boB Rudis 🇺🇦 🐘@[email protected] Ivan Ristic Dr. Jack Freund @JonesFAIRiq goo.gl/GFBMDH

PS: Let's Encrypt <3's certificate transparency. You can see every cert issued by our intermediate CA at crt.sh/?Identity=%25&….

"App Scanner Galore - How do I choose one? from Teja Myneedu and @yashvierkosaraj

Students - you can get paid to work on OWASP® Foundation ZAP as part of @gsoc - owasp.org/index.php/GSOC… you have until March 25 to apply.

The AppSec California 2016 videos are here! Hope you enjoy the great presentations. See you in 2017! #security youtube.com/playlist?list=…

A Framework for Automated Security Testing that is Scaleable and Asynchronous built on Microservices - github.com/anshumanbh/FAS… #infosec

Verifying myself: I am tmyneedu on Keybase.io. hbnC--HNmUuJsQ96ghrVpS14F7O_zSV3b-uB / keybase.io/tmyneedu/sigs/…