I just experience a poor payment authorization design for @PlayStation .
Turn on passkeys, disabled payment friction when the transaction is not subscription.
And no way to add friction from my profile on the console.
I’ve been thinking a lot about security for AI agents. The questions keep coming back to the basics:
Who is making the request?
What can it access?
What can it execute?
Can we explain what happened?
The fundamentals matter. How we apply them is changing.
cheltenham.dev
Antonio retweeted
🚨 #Scam alert! 🚨
There is disinformation online and messages circulating that claim individuals can apply for a new Grocery Rebate.
It’s a scam! There is no new Grocery Rebate.
More info ➡️ ow.ly/ZE7950VThau #CdnTax
ALT The word “scam” written on a green background with a notification bell.
Antonio retweeted
Shopify: The Boring Edition.
We focused on the hard and unsexy work of nailing the basics, getting all the parts of Shopify to work seamlessly together, and run at tip top performance. You've got to sweat the details.
Some of my favorite updates 🧵
Antonio retweeted
From Jun 26-28, we spent 3 days IRL hacking at @Shopify’s 36th Hack Days
6000+ ppl prototyping, building, and experimenting on 1,000+ projects
Sometimes, hacking leads to things that ship like Shopify POS or our move to the cloud. Other times, hacking helps us discover solutions that don’t work
Both are valuable
Antonio retweeted
Shopify stores are the fastest in the world. Our stores load up to 2.4x faster than stores on other platforms.
This isn't just my opinion... this is coming from publicly available data from Google Core Web Vitals. That’s a BIG deal when speed = sales. Milliseconds matter.
Faster store = better shopper experience = higher conversion rate. It’s that simple.
Our stores are faster by default because of our core infrastructure.
We are constantly investing in modernizing our cloud infrastructure and working with our best-in-class industry partners to make sure you don’t have to spend time and resources on site speed.
All of this makes our server speed up to 3.9x faster than the competition.
If you’re choosing a slower platform you’re choosing to make fewer sales. It’s that simple.
Speed matters.
shopify.com/enterprise/blog/…
Antonio retweeted
1/ "Mimikatz Security Support Provider mimilib.dll will be registered as a Windows Security Package.
Once the Security Package is registered and the system is rebooted, the mimilib.dll will be loaded into lsass.exe process memory and intercept all logon passwords next time someone logs onto the system or otherwise authenticates, say, via runas.exe." [1]
A TA used exactly this technique outlined above, to register a malicious DLL as a Security Package (see the screenshot below). [2]
Antonio retweeted
Tracking a Rust-based C2
From downloading the framework to refining search queries, I'll guide you through my process of tracking adversary infrastructure.
Today, we'll briefly look at "link," which supports implants targeting Windows, MacOS, and Linux.
1/10
Antonio retweeted
🚩 This is worrying and continues to increase, multiple threat actors, including ransomware operators and initial access brokers, are abusing the @GoogleAds service, but at a higher level. Attackers manage to show the original domain (URL) in the malicious ads, which is eventually displayed to thousands of potential victims on Google's main results page.
Three recent examples, thanks to Intel from Colin Cowie (Sophos) and Jérôme Segura (Malwarebytes) 👏
1.- #Pikabot (I think this is new 👀)
▪ infosec.exchange/@th3_protoC…
▪ infosec.exchange/@th3_protoC…
2.- #BatLoader
▪ infosec.exchange/@th3_protoC…
3.- #FakeBat + Hunting Panel:
▪ malwarebytes.com/blog/threat…
🚨 DON'T TRUST Ads, be cautious, investigate, confirm.
Antonio retweeted
Understanding Machine Learning: From Theory to Algorithms (PDF Book)
Download : bit.ly/3Rp6N6f
Antonio retweeted
That's a wrap on another incredible BFCM! You got a nerdy preview from @tobi, and we're back with the final stats. Let’s go!🧵👇
We achieved 99.999+% uptime, handling 29.7 PB of data served from across our infrastructure over the entire event! That’s over 5 TB/min.
Antonio retweeted
I'm hiring several AI+Security engineers and researchers at @robusthq in the next few months in SF.
AI Sec Engineer: algorithmically pentest models and detect common attack patterns. "Build it"
AI Sec Researcher: derisk, red team, publish. "Invent it"
robustintelligence.com/compa…
Antonio retweeted
Just a few weeks left until I get to speak about the good and bad sides of AI and what it means for k8s and the cloud.
kccncna2023.sched.com/event/…
Antonio retweeted
Google's upcoming "IP Protection" feature to hide users' IP addresses by routing traffic through a proxy.
#google #chrome #privacy #CyberSecurity
bleepingcomputer.com/news/go…
bleepingcomputer.com/news/go…
Antonio retweeted
After several months of work, we finally enabled Pitchfork reforking on 100% of Shopify's monolith.
~30% reduction in memory usage, ~9% better latency and more!
railsatscale.com/2023-10-23-…
