
Secure Coding Trainer, Best-selling author of Alice and Bob Learn Secure Coding & Alice and Bob Learn Application Security. #AppSec she/her 🌻
Canada - West Coast 🍁
Joined June 2017
- Tweets61.1K
- Following2.4K
- Followers50.3K
- Likes107K

Tanya Janca | Shehackspurple@shehackspurple12h
🇨🇦
CanadaConnected via Canada Android AppAccount-level information, not a live location or per-post device.
I just learned something about Canadian privacy law that absolutely SHOCKED me. Seriously.
1/7

ALT A close-up of a serious-looking Tanya Janca on the left appears beside a red-and-black graphic about privacy and crime tips. Large text reads “CRIME STOPPERS,” “BREACH:,” and “WHO PROTECTS CANADIANS’ PRIVACY?” with a Canada maple leaf, “CRIME TIPS” and “CONFIDENTIAL” folders, and a glowing red padlock.

Tanya Janca | Shehackspurple@shehackspurpleOct 24
🇨🇦
CanadaConnected via Canada Android AppAccount-level information, not a live location or per-post device.
You can write perfectly secure application code and STILL end up with a critical security vulnerability.
That's one of the most important lessons from PHP2Shell, and it's a perfect example of why **software supply chain security** matters so much.
1/8

Tanya Janca | Shehackspurple@shehackspurpleOct 24
🇨🇦
CanadaConnected via Canada Android AppAccount-level information, not a live location or per-post device.
The tree is really are big in British Columbia. #infosecgardening

Tanya Janca | Shehackspurple@shehackspurpleOct 23
🇨🇦
CanadaConnected via Canada Android AppAccount-level information, not a live location or per-post device.

Tanya Janca | Shehackspurple@shehackspurpleOct 23
🇨🇦
CanadaConnected via Canada Android AppAccount-level information, not a live location or per-post device.
What’s your fav developer podcast? Why?
#AppSecThursday #talkAppSectome

Tanya Janca | Shehackspurple@shehackspurpleOct 22
🇨🇦
CanadaConnected via Canada Android AppAccount-level information, not a live location or per-post device.
🎉 **GOOD NEWS for twp.ai/IlvwD3 users! You're protected against PHP2Shell!**
Yesterday, two critical vulnerabilities were disclosed in PHP, the programming language that powers WordPress.
And understandably, a LOT of website owners are worried!
1/8

Tanya Janca | Shehackspurple@shehackspurpleOct 22
🇨🇦
CanadaConnected via Canada Android AppAccount-level information, not a live location or per-post device.
👑 I asked Claude to build me an app that would call me Queen every morning.
What could possibly go wrong?
Well...
I wanted a cute little application that would greet me, give me a compliment, and share an inspirational quote.
1/5

Tanya Janca | Shehackspurple@shehackspurpleOct 19
🇨🇦
CanadaConnected via Canada Android AppAccount-level information, not a live location or per-post device.

Tanya Janca | Shehackspurple@shehackspurpleOct 16
🇨🇦
CanadaConnected via Canada Android AppAccount-level information, not a live location or per-post device.

Tanya Janca | Shehackspurple@shehackspurpleOct 15
🇨🇦
CanadaConnected via Canada Android AppAccount-level information, not a live location or per-post device.
What’s one security myth you want to bust right now? Let’s clarify together.
#AppSecThursday #talkAppSectome








