Ed @EdOverflow

Web developer & security researcher. Senior Pentester @cure53berlin. Author of @securitytxt. ➡️ https://t.co/BOy1tiLLBr edoverflow.com Joined October 2016

Tweets

1K
Followers

20K
Following

161
Likes

3K

swisscyberstorm @swisscyberstorm

2 years ago

The Swiss Federal Government has adopted a report on ethical hacking referencing two @swisscyberstorm 2023 speakers: @EdOverflow and @_oakgul. Read the report here (in German and French): lnkd.in/dye5-qkY Watch all SCS talks here: youtube.com/@swisscybersto… #SCS23 #bugbounty

0 3 8 2K 1

Ed @EdOverflow

2 years ago

I will be giving a talk on Coordinated Vulnerability Disclosure (CVD) at Swiss Cyber Storm. If you are interested in attending, please find additional information below.

swisscyberstorm @swisscyberstorm

2 years ago

I will be giving a talk on Coordinated Vulnerability Disclosure (CVD) at Swiss Cyber Storm. If you are interested in attending, please find additional information below.

0 3 4 7K 0

Download Image

1 2 15 5K 0

Ed @EdOverflow

2 years ago

I have set up a LinkedIn profile if people want to stay connected: linkedin.com/in/edoverflow/.

0 0 9 5K 0

security.txt (RFC 9116) @securitytxt

2 years ago

Where did you first hear about security.txt?

7 2 2 4K 1

security.txt (RFC 9116) @securitytxt

3 years ago

How do you pronounce "security.txt"?

2 2 14 8K 2

Ed @EdOverflow

3 years ago

I am working on something fun with @KarimPwnz to address the challenge of repetitive security questionnaires: @BlueMagnetIO (bluemagnet.io).

0 4 15 7K 0

Download Image

security.txt (RFC 9116) @securitytxt

3 years ago

Exciting news! @Apple joins the list of companies with a security.txt file. Now, we only need @netflix to complete the FAANG list. 🙌

6 87 671 200K 125

Download Image

Ed @EdOverflow

3 years ago

I have been playing around with SvelteKit a lot recently. I wrote a short blog post on adding security headers to SvelteKit applications: edoverflow.com/2023/sveltekit…. I might do a more long-form one on the security pitfalls of SvelteKit applications at some point.

1 4 26 5K 9

Download Image

Ed @EdOverflow

3 years ago

Reminder: if you would like to follow my blog via RSS, I have a feed at edoverflow.com/index.xml. :)

0 0 7 3K 4

Ed @EdOverflow

3 years ago

Nice blog post by @KarimPwnz on the security implications of command injection in GitHub Actions.

Karim Rahal @KarimPwnz

3 years ago

Nice blog post by @KarimPwnz on the security implications of command injection in GitHub Actions.

3 37 149 34K 61

0 1 11 3K 1

Ed @EdOverflow

3 years ago

Retweeting this because I know BSides London tickets are hard to come by. :)

controlplane @controlplaneio

3 years ago

Retweeting this because I know BSides London tickets are hard to come by. :)

1 31 23 0 1

Download Image

0 1 8 0 0

Troy Hunt @troyhunt

3 years ago

I love that the Dutch government is actively promoting security.txt and encouraging companies to establish a route for reporting security incidents 😊 /cc @EdOverflow digitaltrustcenter.nl/nieuws/interne…

2 19 77 0 6

Internet.nl | @[email protected] @internet_nl

3 years ago

Where can ethical hackers report vulnerabilities at your organization? Publish a security.txt file and test it with Internet․nl. Check the new @securitytxt test: en.internet.nl/article/securi… @DTC_NL @AlertOnline #cybersecuritymonth

2 41 72 0 11

Download Image

Ed @EdOverflow

3 years ago

This looks like a fun chain by @fransrosen. If readers are interested in rapidly checking CSP hosts, I wrote a tool for grabbing them concurrently: github.com/EdOverflow/csp.

publiclyDisclosed @disclosedh1

3 years ago

This looks like a fun chain by @fransrosen. If readers are interested in rapidly checking CSP hosts, I wrote a tool for grabbing them concurrently: github.com/EdOverflow/csp. https://t.co/gpz79jLGlj