[tl;dr sec] #9 - Autonomous Bug Reporting, HTTP Desync Attacks, & Censorship

Fuzzing is finding security bugs faster than CVEs can be issued, HTTP desync attacks advance, China's censorship power is felt around the world.

[tl;dr sec] #8 - DevSecCon Seattle 2019

DevSecCon Seattle 2019 Round Up

[tl;dr sec] #7 - AppSec Cali 2019 DevSecOps Panel Summary

Notes from an AppSec Cali 2019 panel, AWS security tools, fuzzing with grammars and Gitlab, and Google P0's iOS exploit chain discovery.

Lessons Learned from the DevSecOps Trenches

[tl;dr sec] #6 - Post Hacker Summer Camp

Neat talks from Hacker Summer Camp on email -> phone number, DNS rebinding, automated C++ reverse engineering, and publicly exposed AWS EBS volumes.

[tl;dr sec] #5 - Stepping Up Our Game

[tl;dr sec] #5 - Stepping Up Our Game (Black Hat 2017 keynote by Alex Stamos)

Stepping Up Our Game: Re-focusing the Security Community on Defense and Making Security Work for Everyone

[tl;dr sec] #4 - Data Driven Bug Bounty

[tl;dr sec] #4: Data Driven Bug Bounty 📊

Data Driven Bug Bounty

[tl;dr sec] #3 (in)Secure Development - Why some product teams are great and others aren’t…

[tl;dr sec] (in)Secure Development - Why some product teams are great and others aren’t...

(in)Secure Development - Why some product teams are great and others aren’t...

[tl;dr sec] 2019-05-30 - Issue #2

[tl;dr sec] Research from Portswigger, fuzzing papers, and CORS tricks