Andres Riancho

Google's ReCaptcha bypass via HTTP parameter pollution. New blog post! andresriancho.com/recaptcha-bypa…

Migrating website from AWS EC2 classic to VPC. You might see some downtime as I'm no SRE :-)

This is a great resource for anyone looking to create an in house SOC or outsource to an MSSP wellawaresecurity.com/2020/05/30/the…

Even when an algorithm consistently beats human judgment, people prefer to go with their gut en.wikipedia.org/wiki/Algorithm…

I'm trying to find some technical details on what happen with the Twitch hack and data leak, but I'm unable to find anything. Are there details out there?

Today is the big day! The start of fwd:cloudsec is in a few hours. 🎉 Live stream links and schedule are at: fwdcloudsec.org

CVE-2020-17513: SSRF on Airflow. Anyone knows how to exploit this vulnerability? I was unable to find the vulnerable parameter(s) or the commit that fixes it in github.com/apache/airflow…

My google calendar needs a defrag.

If you would have 100k / year to spend on one or two security products, what would you buy?

This guy found the definitive solution for hard-coded credentials in source code. A must watch for everyone in #appsec. youtube.com/watch?v=X34Zmk…

@marcosnils @liqueed_org @acyment @berariel Same

Che @liqueed_org no entiendo por qué me llegan correos de su empresa si nunca me suscribí a un newsletter. Quisiera creer que no están usando data de otros eventos ágiles para enviar spam... cc @acyment @berariel

Cloud providers: we added another 9 to our service level uptime guarantee. IBM: We are committing to a whopping 95% uptime

My laptop literally just saved my life... Someone shot through the floor in my apartment building Shoutout to the surface book @Microsoft @MicrosoftHelps

¡Nuevo correo! ¿Se puede ser un hacker en la escuela? ¿Qué pueden aportar la ética hacker y la cultura del hacer a la enseñanza? ¿Por qué no se promueve el autodidactismo? ¿Se puede enseñar en la escuela a cuestionarlo todo? Todo esto, y más, en tu bandeja de entrada 💌

Which #book would you recommend to a technical person like me that wants to become a better CSO / CISO? Extra cookie points if available on #Kindle

DevSecOps rants a las 15:30 en #ekoTV Tomo ideas para mis rants, manden DM :-) twitch.tv/ekoparty

Hoy 15:30 en #ekotv @ekoparty hablamos con @fede_k sobre las complejidades de implementar devsecops. Modo #rant: on

Using @w3af to detect SSRF as part of AWS hack talk at @ekoparty

Vamos a estar hablando sobre como hacemos seguridad en @wildlifestudios dentro de 5 minutos en vivo! youtube.com/watch?v=KGDqOK… Con @ajolo de maestro de ceremonias estelar 💪

@angvp OMG WTF

Ahora en vivo @ekio_jp tirando magia en el Discord de la @ekoparty #hardwarehacking