Security, Astronomy, Geek. Personal account
Joined April 2011
- Tweets270
- Following0
- Followers66
- Likes1.4K
jay kelath retweeted
Incredible research: $75,000 bounty🤯
"My research uncovered 7 0day vulnerabilities in Safari (CVE-2020-3852, CVE-2020-3864, CVE-2020-3865, CVE-2020-3885, CVE-2020-3887, CVE-2020-9784, & CVE-2020-9787), 3 were used in kill chain to access the camera."
ryanpickren.com/webcam-hacki…
jay kelath retweeted
I never announced my move last October but I relocated to Austin, TX to accept a role as the Security Manager at YETI.
With that said, who wants to join me?
I am working on a req to hire a traditional blue team Security Engineer. My DMs are open if you'd like to chat.
jay kelath retweeted
So You Want to Learn Azure Security? michaelhowardsecure.blog/202…
jay kelath retweeted
How we trust libraries:
- number of users
- authority of author(s)
- last change was recent
- number of commits
- number of issues
- readme/changelog/releases maturity
- number of blogs
What did I miss? And is it different from selecting Saas Services?
How do new libs grow this
jay kelath retweeted
Awesome CodeQL query from @ggolawski that detects many variants of LDAP Injections in Java: Plain Java JNDI, UnboundID, Spring LDAP and Apache LDAP API. We are pleased to award him our maximum bounty reward $3000
github.com/Semmle/ql/pull/26…
jay kelath retweeted
Azure Functions, The Game by @marcduiker 😍👏👏👏 marcduiker.itch.io/azure-fun…
jay kelath retweeted
🎁 1000+ #golang exercises are waiting for you. From the simplest ones to the advanced.
Check out: github.com/inancgumus/learng…
PS: I salute you if you can solve the advanced slice exercises.
jay kelath retweeted
I was today years old when I found out that @signalapp has a note to self feature which also supports disappearing messages.
jay kelath retweeted
Nice article listing missing pieces in Kubernetes core to make on-prem clusters work like GKE etc. charlescary.com/bringing-on-…
On the flip side, these are the same challenges we solve while bringing GKE to on-prem with Anthos.
jay kelath retweeted
Thread
Real World Crypto 2020 is upon us. RWC is the marquee applied cryptography conference, bringing together academia and industry (51% of attendees have no academic affiliation). It's the largest RWC ever with 642 attendees.
Talk summaries to follow.
#realworldcrypto
jay kelath retweeted
Love this from Marc Andreesen:
"The world is a very malleable place. If you know what you want, and you go for it with maximum energy and drive and passion, the world will often reconfigure itself around you much more quickly and easily than you would think."
— @pmarca – at Brooklyn, NY
jay kelath retweeted
What a crypto backdoor looks like. NSA Backdoor Key from Lotus-Notes cypherspace.org/adam/hacks/l…
jay kelath retweeted
Last year @SpenGietz wrote about 21 methods that could lead to #AWS #privesc. Gerben Kleijn discovered that those 21 methods could be grouped into 5 categories. Learn more about his findings & how to securely set up user permissions. hubs.ly/H0ml8540
jay kelath retweeted
Pretty happy to see a “BeyondProd” paper get published. Going to make it easier to explain to people that BeyondCorp doesn’t mean “put all your production services on the internet with mTLS” cloud.google.com/blog/produc… – at Nashville, TN
jay kelath retweeted
So, earlier today, Google published a whitepaper on 🌟BeyondProd🌟, about how Google does cloud-native security. Here’s a summary thread /1
jay kelath retweeted
Well this is it. Tonight is the last episode of Silicon Valley ever. I also think it’s one of our best ever. Thanks in large part to @realalecberg. There will be crazy cameos you won’t believe. It’s been an amazing run. I’m gonna miss this. (This pic is from the last table read.)
jay kelath retweeted
I just published Evolving Threat series — Infiltrating Python’s Software Supply Chain link.medium.com/N4oWlDJPe2 . Thanks @InsanityBit for the quick review
jay kelath retweeted
Hello Twitter people. My team is organizing a great CTF in two weeks. I prepared some WEB challenges for you, so I cannot imagine not seeing you there!
Some of you have asked how you can gain skills in the security field and this is it, try us :) Retweets more than appreciated.
Hey! We are organizing justCTF just before the end of the year.
ctftime.org/event/943
Are you ready to compete for big prizes? 🙀 If the answer is YES - RT!
Thanks to @trailofbits and @wirtualnapolska for sponsoring the event!
🐱🐟
#capturetheflag #ctf
