Archive

NewsletterNewsletter
[tl;dr sec] #87 - Easy Temporary Cloud Access, Monopol-easy Money, AWS Account Boundaries can be Porous

[tl;dr sec] #87 - Easy Temporary Cloud Access, Monopol-easy Money, AWS Account Boundaries can be Porous

Empowering developers' cloud access while improving security, big tech throwing their weight around, 97+ ways data can be shared across AWS accounts.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #86a - The missing Mobile Security

[tl;dr sec] #86a - The missing Mobile Security

[tl;dr sec] #86a - The Missing Mobile Security

NewsletterNewsletter
[tl;dr sec] #86 - Dockerfile Best Practices, Mobile Security, and Collusion in Academia

[tl;dr sec] #86 - Dockerfile Best Practices, Mobile Security, and Collusion in Academia

20 Dockerfile best practices, free mobile security course, and trade-offs, collusion rings, and more in academia.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #85 - Machine Learning, GraphQL, and Modern Static Analysis

[tl;dr sec] #85 - Machine Learning, GraphQL, and Modern Static Analysis

Attacking ML models, deep learning side-channel attacks, CSRF and batch GraphQL attacks, how modern static analysis should work.

Clint Gibler
Clint Gibler
SummarySummary
Riana Pfefferkorn: I Have a Lot to Say About Signal’s Cellebrite Hack

Riana Pfefferkorn: I Have a Lot to Say About Signal’s Cellebrite Hack

Stanford Internet Observatory Research Scholar [Riana Pfefferkorn](https://twitter.com/Riana_Crypto) shares her thoughts on legal implications of the Cellebrite hack.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #84 - Establishing a Cloud Security Program, Measuring Security, On Signal's Cellebrite Hack

[tl;dr sec] #84 - Establishing a Cloud Security Program, Measuring Security, On Signal's Cellebrite Hack

A roadmap for establishing a cloud security program + a task list, thoughts on measuring security, the legal implications of Signal's Cellebrite hack.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #83 - Comparing Infrastructure as Code Scanners, Jenkins Attack Framework, Good Design Principles

[tl;dr sec] #83 - Comparing Infrastructure as Code Scanners, Jenkins Attack Framework, Good Design Principles

Benchmarking infra as code scanning tools, offense-focused Jenkins tools, and principles that can help scale security.

Clint Gibler
Clint Gibler
SummarySummary
How Figma Switched Their Okta to Only Allow Phish-proof WebAuthn/FIDO Multi-factor Authentication

How Figma Switched Their Okta to Only Allow Phish-proof WebAuthn/FIDO Multi-factor Authentication

An excellent Twitter thread by Dev Akhawe on the value of making this switch, and challenges and lessons learned along the way.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #82 - Supply Chain Security, Career Resources, Differentiate or Die

[tl;dr sec] #82 - Supply Chain Security, Career Resources, Differentiate or Die

Detecting dependency confusion across many ecosystems, getting started in tech or security, the middle of VCs and products are dying.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #81 - Modern Security Tooling, Visualizing Dependencies, Remembering Dan Kaminsky

[tl;dr sec] #81 - Modern Security Tooling, Visualizing Dependencies, Remembering Dan Kaminsky

Requirements of modern security tooling, graphing your dependencies and their vulnerabilities in Neo4J, and remembering a man who helped so many.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #80 - Celleb-fight me, Hardening CI Infrastructure, Secure Access to 100 AWS Accounts

[tl;dr sec] #80 - Celleb-fight me, Hardening CI Infrastructure, Secure Access to 100 AWS Accounts

Signal creator finds bugs in Cellebrite, recommendations on hardening CI, using Okta to secure access to AWS accounts at scale.

Clint Gibler
Clint Gibler
SummarySummary
Dino Dai Zovi on Hardening CI Infrastructure

Dino Dai Zovi on Hardening CI Infrastructure

In the wake of SolarWinds, Dino Dai Zovi describes how he recommends hardening your CI environment.

Clint Gibler
Clint Gibler
FirstBack
1516171819202122
Next Last