Secure Coding Trainer, Best-selling author of Alice and Bob Learn Secure Coding & Alice and Bob Learn Application Security. #AppSec she/her 🌻

Canada - West Coast 🍁
Joined June 2017
**Not everything needs to be a damn AI agent.** There. I said it. And I will keep saying it. Warning: hot takes ahead. Recently, I was teaching a secure AI class, and one of my students was telling me about an AI agent they were building. 1/16
7
5
2
52
5,158
I just learned something about Canadian privacy law that absolutely SHOCKED me. Seriously. 1/7
1
1
12
1,032
I made a video explaining what happened with Crime Stoppers, the gaps in Canadian privacy law, and why I think our lawmakers need to address them. Because I've been saying this for years: **You can't have privacy without security.** 6/7
1
2
188
You can write perfectly secure application code and STILL end up with a critical security vulnerability. That's one of the most important lessons from PHP2Shell, and it's a perfect example of why **software supply chain security** matters so much. 1/8
4
2
8
1,081
For example, updating a container base image in your repository doesn't mean your running application has been fixed. You still need to rebuild, redeploy, and verify. I made a video explaining the recent PHP2Shell vulnerabilities and what developers need to know. 7/8
1
1
160
The tree is really are big in British Columbia. #infosecgardening
11
921
🎉 **GOOD NEWS for twp.ai/IlvwD3 users! You're protected against PHP2Shell!** Yesterday, two critical vulnerabilities were disclosed in PHP, the programming language that powers WordPress. And understandably, a LOT of website owners are worried! 1/8
1
7
967
And a big thank you to the twp.ai/1VmZrK5 and PHP security teams for working together to protect users before the public disclosure! **Please share this with anyone you know who runs a WordPress website.** They may be wondering whether they're affected! 7/8
1
206