Viewing profile — dagrz

Author here. There's no complaint. It's an observation rather than an absolute good or bad. It's something you have the consider in designing your application.

How would you feel if an attacker could read your AWS resource tags? Turns out they can! We’ve found a way to enumerate various metadata from public resources and created a tool to…

Author here. There's been a lot of great work recently on hacking Github-AWS OIDC integrations but I've think we've undersold how bad it is. Here's my guide to finding all the vuln…

I feel like Secure Code Warrior has solved this problem much better with gamification. https://www.securecodewarrior.com/

This applies to everything you do which depends on review. Want a particular job? Put in more effort than everyone else. Create a ‘I want to work for you’ website. Be prepared at t…

Author here - As an information security manager at a large organisation, this scares me. As much as we train our users and put governance structures in place to help them do the r…

This is awesome. I don't know much about typography but every time I try to learn something, I give up pretty quickly because of the overwhelming amount of (boring) information. I …

Is it me or does the author of this article, and the abusers of the exploits he writes about, land on the wrong side of both the law and common morality? Surely EA being a "terribl…

Whenever I see a new post about this saga I feel compelled to post this mini documentary about it before everyone gets into the same old arguments. Sex, Lies and Julian Assange htt…

You are pointing your anger in the wrong direction. The reality is that security is a hard problem, much too hard for Blizzard, much too hard for RSA, much too hard for banks, and …

For the scenerio you mentioned, just having the login/comment submissions work over SSL results in zero added security. In short, this is because of tools such as SSL strip. A bett…

There are a few people who blog about some great ideas they have. Check out the one by Bosco Tan at http://boscotan.tumblr.com/