
Secure Coding Trainer, Best-selling author of Alice and Bob Learn Secure Coding & Alice and Bob Learn Application Security. #AppSec she/her 🌻
Canada - West Coast 🍁
Joined June 2017
- Tweets61.1K
- Following2.4K
- Followers50.3K
- Likes107K
**Not everything needs to be a damn AI agent.**
There. I said it. And I will keep saying it.
Warning: hot takes ahead.
Recently, I was teaching a secure AI class, and one of my students was telling me about an AI agent they were building.
1/16
I just learned something about Canadian privacy law that absolutely SHOCKED me. Seriously.
1/7

ALT A close-up of a serious-looking Tanya Janca on the left appears beside a red-and-black graphic about privacy and crime tips. Large text reads “CRIME STOPPERS,” “BREACH:,” and “WHO PROTECTS CANADIANS’ PRIVACY?” with a Canada maple leaf, “CRIME TIPS” and “CONFIDENTIAL” folders, and a glowing red padlock.
I made a video explaining what happened with Crime Stoppers, the gaps in Canadian privacy law, and why I think our lawmakers need to address them.
Because I've been saying this for years:
**You can't have privacy without security.**
6/7
And your right to privacy shouldn't depend on whether an organization makes a profit.
🎥 twp.ai/Ilw6w4
#Privacy #Canada #CrimeStoppers #CyberSecurity
7/7
You can write perfectly secure application code and STILL end up with a critical security vulnerability.
That's one of the most important lessons from PHP2Shell, and it's a perfect example of why **software supply chain security** matters so much.
1/8
For example, updating a container base image in your repository doesn't mean your running application has been fixed. You still need to rebuild, redeploy, and verify.
I made a video explaining the recent PHP2Shell vulnerabilities and what developers need to know.
7/8
🎥 twp.ai/E5Guxq
**Secure coding is essential. But securing the entire software supply chain is essential too.**
#SoftwareSupplyChainSecurity #AppSec #SecureCoding #PHP
8/8
The tree is really are big in British Columbia. #infosecgardening
What’s your fav developer podcast? Why?
#AppSecThursday #talkAppSectome
🎉 **GOOD NEWS for twp.ai/IlvwD3 users! You're protected against PHP2Shell!**
Yesterday, two critical vulnerabilities were disclosed in PHP, the programming language that powers WordPress.
And understandably, a LOT of website owners are worried!
1/8
And a big thank you to the twp.ai/1VmZrK5 and PHP security teams for working together to protect users before the public disclosure!
**Please share this with anyone you know who runs a WordPress website.** They may be wondering whether they're affected!
7/8




