
codeEmitter
@code_emitter
Staff Security Engineer, Red Team @GitLab, GCPN, GWAPT, Experienced InfoSec Newb, Coder, CrossFitter, Musician, Internal combustion chamber enthusiast.
You might like
Defending your software supply chain is hard. Forming realistic attack scenarios to test your orgs detection/response capabilities? Also hard. Here’s an approach we tried that improved our readiness. Hope it helps you too. gitlab.com/gitlab-com/gl-…
Setting goals is easy. Finding effective strategies to meet those goals proves hard for me. I’ve started writing down goals, but also specific strategies in tandem. “I will do x for y hours on day z.” I also track if I do it or not. What strategies work best for you?
I had a good laugh that these two tweets just happened to show up right next to each other in my timeline @hellNbak_ 😅

"Learn not to add too many features right away, and get the core idea built and tested." - Leah Culver
@code_emitter present both an offensive & defensive perspective of an attack technique that hides malicious code in open source contributions & that reduce the likelihood of the mods being caught during review. Learn more about this #BHEU Briefing>> blackhat.com/eu-21/briefing…
I recently had a look at @gitpod and found two really nice bugs: about.gitlab.com/blog/2021/07/0…
From my perspective, the greatest benefit of story mapping is not the map. It is the discussions, discovery, and alignment that result from the process of creating a map. #agile
If the thing that stands between you and a better answer is rules, break the rules. #leadership
No one that knew Dan Kaminsky well is talking about DNS today. They are talking about kindness, boundless energy and positivity, spontaneous adventures, and how hard he worked to lift others up. Want to emulate one of the greatest hackers of all time? Let that be your guide.
Me: I’m language agnostic! Seems like a good idea to write this CLI in NodeJS because JSON and Node dependency evaluation! Also me: Let’s talk about JavaScript for infosec tools. No really. Let’s take a good hard look at JavaScript.
This one hit too close to home today 😆
To help out those dealing with the recent exchange series of breaches we at @TrustedSec are sharing some of our scripts we are using in triaging and hunting for compromises. github.com/trustedsec/def… Hope it is of use to the defenders out there.
How we use collaboration, iteration and async communication in @GitLab issues to ensure consistency across severity ratings and #bugbounty payouts. via @gitlab about.gitlab.com/blog/2021/03/1…
The mistake is not the failure. Not taking ownership and not learning are the failures.
United States Trends
- 1. Chauncey Billups 60.7K posts
- 2. Chauncey Billups 60.7K posts
- 3. Damon Jones 15.4K posts
- 4. #7_years_with_ATEEZ 59.9K posts
- 5. Mafia 97.4K posts
- 6. #에이티즈_7주년_항해는_계속된다 47.2K posts
- 7. #A_TO_Z 46.7K posts
- 8. #FalloutDay 3,156 posts
- 9. Kash Patel 38.6K posts
- 10. The FBI 147K posts
- 11. 5sos 32.1K posts
- 12. Tiago Splitter N/A
- 13. Gilbert Arenas 5,725 posts
- 14. Changpeng Zhao 10.4K posts
- 15. Toronto Rangers 2,453 posts
- 16. Gambling 125K posts
- 17. Adam Silver 4,575 posts
- 18. The NBA 194K posts
- 19. Kirby Air Riders 8,076 posts
- 20. La Cosa Nostra 5,871 posts
Something went wrong.
Something went wrong.