Security, hax0ry, Cloud, DevSecOps or whatever the cool kids are calling it these days. Anything posted does not reflect the views or opinions of my employer.
New York City
- Tweets 2,801
- Following 682
- Followers 409
- Likes 1,517
Pure class 💚
I’m super biased, but that’s a great looking flask!
Every year, we send all our customers a little gift from @ThinkstCanary - because... we can, and want to say thanks.
This year, it’s the Rambler from @YETICoolers
3
Nicholas Arvanitis retweeted
Come help us keep Cash App's ecosystem of financial services and our Customers' money safe!
We're the Cash Security team and we're redefining how security works with the rest of the organization. We spend 80% of our time writing code and 20% teaching how to think about security.
Who wants jobs?
I've got jobs!
You want a job?
Have I got the job for you!
Roles from Melbourne, AU to SF/Bay Area to NYC to Kitchener-Waterloo, Canada and open to remote!
1
2
7
The opportunity to work with and learn from @dinodaizovi should be a massive incentive on its own!
Periodic reminder that I'm hiring security engineers for my team on Cash App: cash.app/careers (our roles to be posted soon...)
Nicholas Arvanitis retweeted
The “conventional wisdom” on Apple for the past decade is that they needed to enter completely new markets to grow. As the world’s first $2T company, it turns out continuing to build better and better products and services works just fine.
38
97
836
This is attack surface reduction++. So awesome!
U2F + Context Aware Access + Advanced Protection + Default-Deny App Exec is overpowered.
Can't oauth phish
Can't phish mfa
Can't exec malware on the box to steal a session
As far as I can tell an attacker needs a full exploit chain/RCE+Privesc during an active session.
1
There are many lessons that SaaS and software providers can take from @ThinkstCanary, but if you take two, make it these:
- There’s no substitute for this kind of transparency in garnering trust
- Smart security engineering addresses constraints well!
Max wrote up a quick blog post discussing our internal "broker" (which we place between our own servers and 3rd party API's).
It's worth a quick skim, and its worth pondering if you have (or need) something similar in your org.
blog.thinkst.com/2020/08/3rd…
2
2
4
It’s also awesome to see a smart and creative application of the original crypto anchoring work presented by @diogomonica and @nathanmccauley
2
So much this. If you want words, write a 6-pager: medium.com/@inowland/using-6… (h/t: @inowland)
2
w00t more @nostarch awesomeness on sale 😍
One day left for 35% off everything at nostarch.com/ with code UNDEFCON for our #Defcon28 virtual booth.
Nicholas Arvanitis retweeted
Find common ground. Take a stand. Never generalize.
Our COO, Tina Thomson, shares her perspective from growing up in apartheid-era South Africa on confronting racial injustice today.
medium.com/cityeq/7-lessons-…
2
4
Nicholas Arvanitis retweeted
It is more important than ever to step up and to speak out. We stand with the Black community and our Black colleagues. Racism, police brutality and inequality are cancers in our society. Black Lives Matter.
A statement from our co-founders: flatiron.com/blog/black-live…
1
13
54
Nicholas Arvanitis retweeted
Leadership role expectations:
- 24/7 thought leadership
- Conference speaking
- Podcasts interviews
Leadership role reality:
- Saying the same things over again consistently at scale
- Asking two teams if they’ve talked to each other
- Finding where that Google doc is
68
1,228
8,068
Thanks @rands, you get me so well. I’m so happy I started reading the early release of The Art of Leadership
9
22
I tried really hard to pick only a single favorite. It was a struggle. But I think this is the one 😂 Happy to have the temporary break 🙏🏻🙌🏻
Entry #6: How I’m feeling when I shitpost on Twitter at the gym in the morning to bless my followers with meme-y infosec content so we can take a break from the encroaching dystopia & perpetual state of disappointment that pervades our industry
2