Sid

So Apple has introduced a new system called “Private Cloud Compute” that allows your phone to offload complex (typically AI) tasks to specialized secure devices in the cloud. I’m still trying to work out what I think about this. So here’s a thread. 1/

'90s hackers in 2021

OS internals books are wild...

I'm watching the season finale of @TheBoysTV and there's a scene where Hughie looks at a camera feed on a computer. There's fake code next to the feed so naturally I had to pause and check it out, and it looks like IDA pro decompilation! Is there a reverse engineer on set 😂

Jump to page 10 in @CISACyber’s new guidance on “Secure-By-Design” (media.defense.gov/2023/Apr/13/20…) and see them advocate for a removal of both sso.tax and audit-logs.tax👏👏 Maybe we’ll see a world where increasing security costs comes with consequences. 🤔

@Jonatthu @belisacodes @expo @brexHQ Normally we use a trusted vendor ( @Bugcrowd ) to triage submissions sent through the form here: brex.com/security/respo…. If you submitted there before, please include the BugCrowd link in your email. Thanks for helping us stay safe!

🤩🤩 built with @expo !! It's becoming an even more powerful tool for building high-quality mobile apps. 📱💻

@Jonatthu @belisacodes @expo @brexHQ Hey @Jonatthu , I work on the security team at Brex. We take your account security very seriously and I’d love to hear more about the issue you found. If you send us an email to security@brex with the details, we can investigate your concerns ASAP.

@_thomaskonrad @abhaybhargav Ah you're right, missed that

@escape_wq @abhaybhargav Username has the "unique" constraint set

What is the security vulnerability that stands out most in this code? Assume that strong input validation is happening at the API Gateway before the app even receives the request

🤖 Elevating Security Alert Management Using Automation @jshlbrd describes the @brexHQ Detection and Response Team’s approach to managing and automating security alerts at scale. medium.com/brexeng/elevat…

Usually I dread getting "back into things" after the holidays, but this time I'm oddly excited to start the new year. Chalking it up to spending quality time with family, a much-needed extended vacation, and a general sense of purpose & goals for the year🙂

OHH MY GOD #DRXWIN

What a time to be a one piece fan

This author's solution to the lack of infosec talent is literally to fire the people with experience and never hire them again. What am I missing here??

Manager: You're new to the team and it's your first week on call. Don't worry, we're only in public preview and almost never have issues. DAY 1 - 6:30 AM: all of prod in UK dies, 12 hours of phone calls to root-cause, work laptop decides to boot loop 🙃

academia vs industry

Thank you guys so much for playing this year's @UCSBiCTF ! We had a blast running it for you guys and appreciate everyone coming out to join us celebrate our favorite band! #ictf2020 #allyouneedispwn

Awesome write-up! I got to work on something similar at my internship last summer with @Cruise! about.gitlab.com/blog/2020/02/1…

how I got better at debugging