Helping to make product security more awesome at GitHub. Passionate about user security, API hardening, applied crypto, and defensive layer cakes.
Atlanta, GA
Joined April 2008
- Tweets7.9K
- Following508
- Followers1.4K
- Likes10.8K
Patrick Toomey retweeted
I’m hiring for the bounty team!
We're hiring a Product Security Engineer for our Bug Bounty team! Remote in the US. githubinc.jibeapply.com/jobs… ✨
Bringing joy to whomever I can talk into this totally being worth the admittedly splurgy spend for a tree stand.
This Krinner tree stand is amazing. @radkat and I both independently bought it without consulting each other. Kinda want to keep both now it's so awesome. Put the tree up myself without any risk to our marriage! 🎄😜
@bradfitz it’s that time of year again. Ten years in…just as joyous as year one. It’s also still good as new. It’s the BIFL product all other faux-BIFL products wish they could be.
Patrick Toomey retweeted
A big deal.
“Introducing passwordless authentication on GitHub.com
Passkeys are now available in public beta. Opting in lets you upgrade security keys to passkeys, and use those in place of both your password and your 2FA method.” github.blog/2023-07-12-intro…
Patrick Toomey retweeted
You can now properly pick a preferred 2FA setting for your GitHub account!
Preferred 2FA methods and settings improvements github.blog/changelog/2023-0…
@mercuryweather - love the app! 2 quick things. Tapping the widget takes you into the app with an overlay UI even when the main city is the same as what is in the widget. 2. Each tap of the widget without tapping “done” stacks another layer (two stacked in screenshot).
Patrick Toomey retweeted
An update on how GitHub will bring 2FA to millions of developers in 2023 as part of our work to ensure a more secure software supply chain: github.blog/2022-12-14-raisi…
@davechensky @DecodingTv - Finally getting around to watching House of the Dragon and wanted to subscribe to support you all. However, the private RSS feed seems empty. I tried both overcast and apple podcasts.
As goes the laws of nature..after having tried to add it 10 times over the last hour and failing..it naturally worked the next time I tried again after posting this Tweet 😆. Nothing to see here.
Patrick Toomey retweeted
GitHub Mobile can be used as a second factor for password reset github.blog/changelog/2022-0…
Patrick Toomey retweeted
Following the talk from @abu_y0ussef, @netsecurity1 and @cleptho in Vancouver at @CanSecWest 2022, you can find here the material behind their research:
Blogpost: synacktiv.com/en/publication…
Slides: synacktiv.com/sites/default/…
Github: github.com/synacktiv/canon-m…
Patrick Toomey retweeted
Mathematical expressions can now be displayed in Markdown on GitHub using the $$ and $ delimiters - all with the help of the wonderful @MathJax project. github.blog/2022-05-19-math-…
Patrick Toomey retweeted
BIG NEWS!
now introducing STABLEBULBS, a new way to ensure the market remains sound! each bulb is pinned to the guilder in value
how? trust me bro, i know what i'm doing. absolutely no due diligence required!
ALT a series of stablebulbs being planted
Went to open the kids ketchup and instantly went 😯. They fixed the worst and most ubiquitous cap design around. I can’t tell you on how often I’ve let the expletives fly in front of the kids with this cap design (especially on toothpaste). (Left: bad, Right: 🤩). @WholeFoods 🙇♂️
ALT Cruel joke
ALT A glass of ice water in hell
@TomsofMaine - all I’m saying is I’ll pay whatever you ask to switch to this cap design for tomsofmaine.com/products/ora…. Name your price 😀.
Patrick Toomey retweeted
Love digging into code and finding whatever security issues may lie hidden inside? Have I got a job for you..check out this role with our ProdSec assessment team here at GitHub! boards.greenhouse.io/github/…
#prodsec #appsec #assesment #github
Hey @TIDAL …just throwing out there that adding support for “hey @sonos” would be pretty great! I have to imagine the sonos/tidal overalap is reasonably large 🤞 theverge.com/2022/5/4/230561…