phalston

@SwiftOnSecurity GoLang. Creating and securing your own endpoints creates a lot of empathy for Devs.

What's something you learned recently that might help someone else out?

@mwexler Eero seems work.

I'm having to turn off iOS 15 "private address" on every wifi network I try. Does it work for anyone?

@secwonk311 25y of IT…”VLOOKUP Examples”

@0x26d I showed the ease of constructing a fake email that opened a fake yahoo login, capturing, and sending their user & password to someone else. They thought it was big fun. Most of the room used Yahoo!. #knowyouraudience

@shehackspurple If you can get devs to use something like Swagger to document API endpoints to skip some of the guesswork, I think Burpsuite could do the trick for APIs and trad DAST.

#AskInfoSec Can anyone recommend an automated API security testing tool to me? I want DAST for APIs.

@jonesyt3ch You could help me build security into software development this summer. premierinc.wd1.myworkdayjobs.com/en-US/External…

Are there any entry level infosec jobs out there? I have sysadmin/networking/cisco experience, sec+, and a drive to learn,

@0hs0muchs0ul Literally took our big old loud Breville to Goodwill a month ago. It was fun for awhile but became tedious and expensive. You should get one though...slow juicing is the way to go.

I really need to get me a juicer.

@juliettekayyem @CNN @NewDay This is an incomplete list 😔

.@Cnn graphic of the other pandemic. @NewDay

@Steph_I_Will I gonna have to hit the archives on that “Hola!”

@0hs0muchs0ul I am just gonna turn the A/C up and rock this hot ass wool suit that looks like it was tailored for me.

I wanna wear my boots but it’s 75 out 😩

@0hs0muchs0ul Ice cream sandwich, but yes.

Do I want an ice cream bar before bed?

@MalwareJake We once had an intern build a authN microservice for a legacy app reducing risks of some terrible homegrown security.

Since SolarWinds is blaming an intern for poor security practices, what's the most outlandish intern security situation you've ever experienced?

@shehackspurple Yes, this is sticking point in my program.

Also, does anyone want to proof read my abstract and outline for me?

I've just written a brand new talk called "Building Security Champions". Where should I apply? 🤔

Can we de-normalize “I was gonna say...” and then saying it?

@MalwareJake Usually with you 💯 BUT much easier to ignore a call than text for me and it is all about the delayed social obligation and plausible deniability of not listening to a voicemail vs not reading a text.

I have people in my life that need to see this...

Creating a repo is a privilege not a right.

@0hs0muchs0ul Pigeon is nice.

I’ve been sitting in this frog for like 30mins. My hips are sick of my shit.

I have had five women bosses: The first, corrupt and taught me everything. Gave me opportunity when I only knew chance. She let me about to focus solely on solving problems and fixing mistakes even when not my own.

“I come not to bring this peace of escapism, this peace that fails to confront the real issues of life, the peace that makes for stagnant complacency.” kinginstitute.stanford.edu/king-papers/do…

On its face which poses the least risk to the end user via email? A link or an attachment? #riskyclick