
Ed
@EdOverflow
Web developer & security researcher. Senior Pentester @cure53berlin. Author of @securitytxt. ➡️ https://www.linkedin.com/in/edoverflow
你可能會喜歡
After 5 years of work, security.txt is officially an RFC. I am pleased to announce RFC 9116: rfc-editor.org/rfc/rfc9116. I would like to use this opportunity to thank those who made this possible. Thank you. ❤️

The Swiss Federal Government has adopted a report on ethical hacking referencing two @swisscyberstorm 2023 speakers: @EdOverflow and @_oakgul. Read the report here (in German and French): lnkd.in/dye5-qkY Watch all SCS talks here: youtube.com/@swisscybersto… #SCS23 #bugbounty
I will be giving a talk on Coordinated Vulnerability Disclosure (CVD) at Swiss Cyber Storm. If you are interested in attending, please find additional information below.
Speaking @swisscyberstorm 2023 Edwin Foudil (@cure53berlin): “Navigating The Coordinated Vulnerability Disclosure Landscape” Demystifying concepts surrounding CVD and showing solutions to overcome challenges Program: lnkd.in/d52RpEnH Tickets: lnkd.in/eTXQRjnP #SCS23

I have set up a LinkedIn profile if people want to stay connected: linkedin.com/in/edoverflow/.
Where did you first hear about security.txt?
How do you pronounce "security.txt"?
I am working on something fun with @KarimPwnz to address the challenge of repetitive security questionnaires: @BlueMagnetIO (bluemagnet.io).

Exciting news! @Apple joins the list of companies with a security.txt file. Now, we only need @netflix to complete the FAANG list. 🙌

I have been playing around with SvelteKit a lot recently. I wrote a short blog post on adding security headers to SvelteKit applications: edoverflow.com/2023/sveltekit…. I might do a more long-form one on the security pitfalls of SvelteKit applications at some point.

Reminder: if you would like to follow my blog via RSS, I have a feed at edoverflow.com/index.xml. :)
Nice blog post by @KarimPwnz on the security implications of command injection in GitHub Actions.
You have command injection in a GitHub Actions workflow. Now what? Read my blogpost on leaking secrets from GitHub Actions workflows: karimrahal.com/2023/01/05/git…
Retweeting this because I know BSides London tickets are hard to come by. :)
Security BSides London: Are you a woman who works (or wants to work) in tech? We have FIVE tickets to give away for the Security BSides London conference, Saturday 10 December. Just DM us to get one. Please RT. @BSidesLondon #BSidesLDN2022 #WomenInTech

I love that the Dutch government is actively promoting security.txt and encouraging companies to establish a route for reporting security incidents 😊 /cc @EdOverflow digitaltrustcenter.nl/nieuws/interne…
Where can ethical hackers report vulnerabilities at your organization? Publish a security.txt file and test it with Internet․nl. Check the new @securitytxt test: en.internet.nl/article/securi… @DTC_NL @AlertOnline #cybersecuritymonth

This looks like a fun chain by @fransrosen. If readers are interested in rapidly checking CSP hosts, I wrote a tool for grabbing them concurrently: github.com/EdOverflow/csp.

Dropbox disclosed a bug submitted by fransrosen: hackerone.com/reports/1590794 - Bounty: $6,909 #hackerone #bugbounty

United States 趨勢
- 1. No Kings 974K posts
- 2. Carnell Tate 5,537 posts
- 3. Brian Kelly 7,270 posts
- 4. Vandy 12.5K posts
- 5. #UFCVancouver 7,848 posts
- 6. Ole Miss 9,387 posts
- 7. Vanderbilt 10.3K posts
- 8. Diego Pavia 4,195 posts
- 9. Beamer 3,488 posts
- 10. Tony Vitello 3,452 posts
- 11. Dork Cult Protest Day 48.1K posts
- 12. Clark Lea 1,239 posts
- 13. Julian Sayin 1,492 posts
- 14. Hammond 2,258 posts
- 15. Sorokin N/A
- 16. Constitutional Republic 20K posts
- 17. Gunner 4,896 posts
- 18. South Carolina 11.4K posts
- 19. Shula 2,894 posts
- 20. Shapen N/A
你可能會喜歡
-
Frans Rosén
@fransrosen -
Brett Buerhaus
@bbuerhaus -
James Kettle
@albinowax -
Geekboy
@emgeekboy -
Th3g3nt3lman
@Th3G3nt3lman -
Yassine Aboukir 🐐
@Yassineaboukir -
André Baptista
@0xacb -
todayisnew
@codecancare -
Joel Margolis (teknogeek)
@0xteknogeek -
Patrik Fehrenbach
@ITSecurityguard -
spaceraccoon | Eugene Lim
@spaceraccoonsec -
Julien | MrTuxracer 🇪🇺
@MrTuxracer -
Ron Chan
@ngalongc -
Tanner
@itscachemoney -
Nicolas Grégoire
@Agarri_FR
Something went wrong.
Something went wrong.