SecuriTEA & Crumpets

If you're using @Burp_Suite then you'll want to watch this on Monday! The one and only @garethheyes walks us through how you can use DOM Invader to find XSS, Prototype Pollution, and postMessage issues! youtube.com/watch?v=ctNsxd… #appsec #infosec #bugbounty

The next SecuriTEA & Crumpets is out! Check out my chat with @Primed_Mover where we talk about Egress Filtering in AWS, his academic work, and #supplychain security #infosec #appsec youtube.com/watch?v=xjSESr…

The next episode premiers tomorrow with @jshlbrd. This was one of my more fun conversations; we talked about #threathunting, APTs, and building tools such as Strelka and Substation. youtube.com/watch?v=uIke4R… Hope you enjoy it! #infosec #appsec

@ilektrojohn @ndm @absoluteappsec Thanks for letting me know it worked two days ago...! updated it

@SecuriTnC @ndm @absoluteappsec discord.gg/JXPZ seems to be invalid fwiw

earlier on I would find value in passive consumption (twitter,blogposts) but I now feel like more closed,targeted groups where I can interact more, suit me better. Any Slack communities where Product Security folks are hanging out?

@ilektrojohn @ndm @absoluteappsec Unfortunately SecuriTEA discord is a little quiet, but I hope to change that in 2023!

@ndm @absoluteappsec @SecuriTnC Thanks Neil. The discord invite link doesn't work any more but I'll reach out to them

This ended up releasing early! hope you enjoy youtube.com/watch?v=FM6qWb…

This will go live shortly, hope you enjoy!

Has Christmas came early? Be sure to checkout the next SecuriTEA episode which premiers Thursday 22nd December, where @shehackspurple & @LewisArdern talk communities, advocacy, and keeping engagement when writing technical content #infosec #appsec youtube.com/watch?v=FM6qWb…

@ethicalhack3r Maybe early next year we can do another podcast to talk about your journey? 👀

Update: 4. We’ve accepted a quote from a dev shop for the MVP. We know of their work and their proposal was the best presented. 5. Owner would not sell their trademark for a reasonable price. So we have chosen another potential name. #buildinpublic #startup #saas

@shehackspurple Hey Tanya! Definitely open for chatting AppSec 😀 feel free to DM and we can set up some time to schedule something

Hi folks! I'm thinking I'd like to be on some podcasts. Especially AppSec, DevOps, or software developer focused. Any ideas for me? Invitations would be extremely welcome. 😁

🛠️ Building a SAST program at @Razorpay scale @JubbaOnJeans on choosing the right SAST tool and how to "sell" it internally On @r2cdev's Semgrep: "It took us <1 hour to install the CLI, run a scan & get desired results. This blew our minds" engineering.razorpay.com/building-a-sas…

Unfortunately some slight audio quality from my side due to the AC running in the background... lessons for the next stream!

The VOD for SecuriTEA & Crumpets Episode 19 is now live with @askjeevansingh & @LewisArdern. We dive into: 📚 Jeevan' career evolution 🔥 Security activities for early stage start-ups 🍀 Self-service threat modeling Watch now: youtube.com/watch?v=KoRd0K…

Sorry about the quality from my side (@LewisArdern) next time I will sacrifice the AC for better stream audio

Live at twitch.tv/karlbaskin VOD at youtube.com/c/karlbaskin

SecuriTEA & Crumpets with @askjeevansingh @ Wednesday 29th June at 12:30 PST! We will dive into Jeevan' background and talk about a world redefined where self-service #threatmodeling is a thing, and the #security/#appsec team can finally go on vacation twitch.tv/karlbaskin

The VOD for @leifdreizler & @workingrach is now online! youtube.com/watch?v=5SHKvg… In this episode we talk about: 🫣 Woes of working in enterprise 🤝 An unlikely friendship of PM & Security 🫂 Empathetic working and working cross functionally 💪 How to succeed cross functionally

Going live in roughly 30 minutes twitch.tv/karlbaskin

@StrglrX0 @leifdreizler @workingrach @LewisArdern @samm0uda @SecurityMB @S1r1u5_ @freddyb @kannthu1 They are welcome on any time 👀 they just need to DM either @SecuriTnC or @LewisArdern and we can figure out a schedule

Join us on May 25th @ 1pm PST. In this episode @leifdreizler & @workingrach will discuss how teams can collaborate, build #empathy for each other's processes and goals, and build enterprise #security features 🚀 🌕. Live: twitch.tv/karlbaskin VOD: youtube.com/c/karlbaskin