RT dhh: Speaking of protecting the web: DEFEND MULTIPLE BROWSER IMPLEMENTATIONS!! Last time we had a browser hegemony, it didn’t turn out so well. Microsoft people of all should remember this 😬🙈 twitter.com/auchenberg/status/

RT ciphercoffee: In today's @FirefoxNightly, Windows 10 insiders "fast track" users get support via Windows Hello, bringing CTAP2 and biometrics support to @Firefox WebAuthn users. This should make it to stable Win10 in March update. h/t to the team at Microsoft for contributing this! t.co/8l56Qcx80p

RT haroonmeer: If you are the one managing your companies cloud env, you should check out @0xdabbad00’s CloudMapper.

He sat down with @jvehent to walk through it (with usage examples, the thinking behind its design, etc)

youtu.be/9DOMdW6_sYE

Alright people, this is basically a license to show the craziest openssl command you've ever used. What have you got? twitter.com/b0rk/status/108752

RT subyraman: Now available: Webauthn.Guide, a resource for the tech world to learn about the Web Authentication API to enable passwordless authentication.

I've been working on this during the last few months with designer Emily Rosen; excited to share it! webauthn.guide/

RT ciphercoffee: @jvehent I'd say that depends. I mean, I only was involved with Let's Encrypt for 15 months, but I'd argue that we launched close-enough-to-complete. 🤓 It mostly meant I skipped the critical-but-unsexy years of contracts that heroes like @0xjosh and @the_real_ekr undertook.

And here it is: Securing DevOps Show & Tell: Cloudmapper w/ Scott Piper (@0xdabbad00)
youtube.com/watch?v=9DOMdW6_sY
Cloudmapper is a swiss-army knife for auditing AWS accounts, and Scott takes us through all of its features, both released and upcoming. Enjoy!

When I see curriculums of security folks who jumped ship every two years, what I really see is people who didn't stick around long enough to take large projects from start to finish. 3 to 5 years is what it takes to properly complete a security project.

Can confirm. For security folks still trying to roll dashboards on their own, give redash and aws s3+athena a try, it'll change your life! twitter.com/lxt/status/1088145

Just had a really good chat with @0xdabbad00 about Cloudmapper. Recording coming soon in what will be the first installment of the Securing DevOps Show & Tell.

the internet: I will never use a service that doesn't support MFA

also the internet: OMG I LOST MY PHONE PLEASE RECOVER MY ACCOUNT THROUGH INSECURE MEANS NOAW!!!

RT firefox: Have you ever had personal info exposed in a data breach?

If you're not sure, you're not alone! That's why we made Firefox Monitor.

Try it out on any browser: mzl.la/2R0uRem

RT codepitbull: I work in IT, which is the reason our house has:
- mechanical locks
- mechanical windows
- routers using OpenWRT
- no smart home crap
- no Alexa/Google Assistant/...
- no internet connected thermostats

RT notsofast: NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, NO, t.co/C7ZPtI2bsk

RT BillGates: This is one of my favorite infographics. A lot of people underestimate just how much life has improved over the last two centuries: b-gat.es/2S23hlG t.co/kuII7j4AuW

If you're Google and your security team has 500 people writing high security access proxies, please do throw away your VPN.

But if you're a startup and your team of 3 ops + 1 sec has to write, deploy and maintain the entire infra, that uncool VPN will save your butts every day. twitter.com/sethvargo/status/1

RT astha_singhal: Call for volunteers is now open for @BSidesSF 2019! Come work with a fun and dedicated team of volunteers to make this amazing, community-driven event happen: bsidessf.org/volunteer.html.

RT claudijd: ssh_scan users! We'd like to understand more about how you use it, what works, and what doesn't. Tell us your story here => github.com/mozilla/ssh_scan/is

Afficher plus
Framapiaf

Framapiaf est un service de microblog similaire à Twitter. Il est libre, décentralisé et fédéré. Il permet de courts messages (max. 500 caractères), de définir leur degré de confidentialité et de suivre les membres du réseau sans publicité ni pistage.