Ismeet @ismeet

I read a book on Security once. Joined February 2009

Tweets

204
Followers

53
Following

331
Likes

66

Dan Kaminsky @dakami

6 years ago

If you can just ask the dev, just ask the dev. White hat superpower. Trust me, your mental models of why things were written a certain way are wrong. That’s why your hacks work :) When they explain something to you, listen for what they’re not worried about. Look there.

2 5 125 0 6

SummerCon @SummerC0n

5 years ago

While we like to think of ourselves as gamblin' folks, there's no responsible way to have a gathering as large as Summercon in NYC in mid-June. So we are working with Eventbrite to refund everybody's tickets. 1/

4 21 57 0 0

samy k͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓amkar͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛ @samykamkar

6 years ago

I've developed a new technique for bypassing firewalls/NATs and producing full TCP/UDP session to targeted user. Anyone have RCE for a service that's typically only run behind NATs (eg desktop software like Sonos, Spotify, Dropbox, etc which bind to *) and want to merge projects?

80 385 2K 0 161

HackerOne @Hacker0x01

6 years ago

On the heels of @philvenables moving keynote at #securityat, we're excited to share @GoldmanSachs public bug bounty program! The public program will include periodic updates of fresh scope. 👀👏 Check it out: hackerone.com/goldmansachs 👈 #TogetherWeHitHarder

0 16 47 0 0

HackerOne @Hacker0x01

6 years ago

We’re excited to have @philvenables, Senior Advisor & Board Director at @GoldmanSachs, as our keynote speaker for #securityat! 👏🏽 Learn how and why Goldman Sachs works side-by-side with hackers in the name of cybersecurity. hackerone.com/security-at #financialservices

Phil Venables @philvenables

6 years ago

0 1 8 0 0

0 3 17 0 0

Randall Koutnik @rkoutnik

7 years ago

Why programmers like cooking: You peel the carrot, you chop the carrot, you put the carrot in the stew. You don’t suddenly find out that your peeler is several versions behind and they dropped support for carrots in 4.3

154 4K 11K 0 114

Julien Vehent @jvehent

7 years ago

Engineers usually know how to do the hard stuff quite well. What causes compromises is mishandling the boring stuff no one cares about. This is why mature frameworks and coding standards are so important, and why continuously adopting the latest cool tech gets you breached.

2 12 42 0 0

XKCD Comic @xkcdComic

8 years ago

2018 CVE List xkcd.com/1957/ m.xkcd.com/1957/

31 1K 2K 0 4

Download Image

Jim Manico from Manicode Security @manicode

8 years ago

@righettod Argon2 will be native in PHP 7.2! I don’t have a citation handy but will find one later. 😎🤙🏼

1 1 1 0 0

Julien Vehent @jvehent

8 years ago

Most pentesters talk I see target corporate Windows networks. Does anyone do pentesting in web hosting cloud environments nowadays? Particularly interested in entry point and latest techniques for lateral movement.

4 5 13 0 0

Julien Vehent @jvehent

8 years ago

In Infosec school, they forget to teach you that 10% of the job is knowing security techniques, and 90% is figuring out how to make it work in a massively complex production environment.

14 170 489 0 0

Dougall @dougallj

8 years ago

Yes - Intel does have broken speculative execution, @scarybeasts (not an arbitrary read yet, but definitely a leak that shouldn't work)

4 72 130 0 0

Download Image

samy k͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓amkar͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛ @samykamkar

8 years ago

As a high school dropout, I often struggle comprehending mathematical formulas from academic papers (aka numbers combined with squiggly lines). This github just explained so much to me: github.com/Jam3/math-as-c…