Archive

NewsletterNewsletter
[tl;dr sec] #83 - Comparing Infrastructure as Code Scanners, Jenkins Attack Framework, Good Design Principles

[tl;dr sec] #83 - Comparing Infrastructure as Code Scanners, Jenkins Attack Framework, Good Design Principles

Benchmarking infra as code scanning tools, offense-focused Jenkins tools, and principles that can help scale security.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #82 - Supply Chain Security, Career Resources, Differentiate or Die

[tl;dr sec] #82 - Supply Chain Security, Career Resources, Differentiate or Die

Detecting dependency confusion across many ecosystems, getting started in tech or security, the middle of VCs and products are dying.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #81 - Modern Security Tooling, Visualizing Dependencies, Remembering Dan Kaminsky

[tl;dr sec] #81 - Modern Security Tooling, Visualizing Dependencies, Remembering Dan Kaminsky

Requirements of modern security tooling, graphing your dependencies and their vulnerabilities in Neo4J, and remembering a man who helped so many.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #80 - Celleb-fight me, Hardening CI Infrastructure, Secure Access to 100 AWS Accounts

[tl;dr sec] #80 - Celleb-fight me, Hardening CI Infrastructure, Secure Access to 100 AWS Accounts

Signal creator finds bugs in Cellebrite, recommendations on hardening CI, using Okta to secure access to AWS accounts at scale.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #79 - Memory Safety FTW, Reference Architectures, Content Discovery++ with OpenAPI Specs

[tl;dr sec] #79 - Memory Safety FTW, Reference Architectures, Content Discovery++ with OpenAPI Specs

Moar evidence against memory unsafe languages, the power of secure reference architectures, and leveraging OpenAPI specs to more effectively detect attack surface.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #77 - Hidden OAuth attack vectors, Networking Fundamentals, Career Advice

[tl;dr sec] #77 - Hidden OAuth attack vectors, Networking Fundamentals, Career Advice

Three new OAuth2 and OpenID Connect vulnerabilities, great intro/overview of networking concepts, security manager interviews & advancing your career in security.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #76 - Is Secure Design > Patching? and Supply Chain, Breaking Regexes

[tl;dr sec] #76 - Is Secure Design > Patching? and Supply Chain, Breaking Regexes

An argument for why secure design + threat modeling is higher ROI than patching, making code signing easy, finding regex bugs with regexploit or fuzzing.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #75 - IAM Least Privilege at Speed, Spectre, and How to Beat a Grandmaster at Chess

[tl;dr sec] #75 - IAM Least Privilege at Speed, Spectre, and How to Beat a Grandmaster at Chess

How Netflix enables development velocity + security with ConsoleMe, Spectre PoC and proposed defenses, and why speed is a superpower.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #74 - Building Securely on AWS, Non-fungible Tokens, Deepfake tools

[tl;dr sec] #74 - Building Securely on AWS, Non-fungible Tokens, Deepfake tools

AWS security for small teams & Well-Architected resources, NFT overview, tools for creating and detecting deepfakes.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #73 - JSON Woes, Career Advice, and Blub Studies

[tl;dr sec] #73 - JSON Woes, Career Advice, and Blub Studies

JSON libraries parse differently and that can lead to bugs, a number of career advice resources, and how to become compoundingly more effective.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #72 - Finding Access Control Bugs, Supply Chain Security, Security Logging in AWS

[tl;dr sec] #72 - Finding Access Control Bugs, Supply Chain Security, Security Logging in AWS

Tips + a Burp extension for finding access control issues, tools and reflections on supply chain security, an architecture for multi-account security logging in AWS.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #71 - Securing CI/CD, Electron Security, Growing Your Userbase by Ignoring 'Virality'

[tl;dr sec] #71 - Securing CI/CD, Electron Security, Growing Your Userbase by Ignoring 'Virality'

Tips and best practices for securing your CI/CD pipeline, Electron tooling and dangerous APIs, what to focus on instead of virality to grow your userbase.

Clint Gibler
Clint Gibler
FirstBack
1516171819202122
Next Last