Break&Build Security – Medium

Break&Build Security

Reducing DDoS Attack Asymmetry with Self-Checking API Keys

Preventing Distributed Denial of Service (DDoS) attacks requires multiple layers of protection. These attacks come in various types and…

Jun 13

Reducing DDoS Attack Asymmetry with Self-Checking API Keys

Jun 13

OWASP Global AppSec Dublin 2023

I gave my talk about [T]OTP brute forcing in OWASP Global AppSec Dublin in February 2023, I had given a similar talk in DEFCON 2022, and…

Feb 28, 2023

OWASP Global AppSec Dublin 2023

Feb 28, 2023

DEFCON30: AES GCM common pitfalls and how to work around them

I wanted to share one of the talks I gave at DEFCON30, 2022, “AES GCM common pitfalls and how to work around them”. It was presented live…

Aug 24, 2022

Aug 24, 2022

Patent: “Verifying incoming communications”

I’m happy to announce the patent I co-wrote as lead inventor along with Lucas Vidal, and Serge Kruppa is finally published.

Jul 30, 2022

Patent: “Verifying incoming communications”

Jul 30, 2022

Fixing vulnerabilities in WAF is OK, right?

A few weeks ago I had a discussion with a Principal Software Engineer on the best strategy to patch a vulnerability, they insisted on WAF…

May 3, 2022

Fixing vulnerabilities in WAF is OK, right?

May 3, 2022

Published in
System Weakness

Defeating OTP through probabilistic attacks and how to mitigate

You likely receive OTPs (one-time-passwords) all the time, usually in the form of an SMS with a 4 to 8 digit code in it. Pretty common when…

Mar 21, 2022

Defeating OTP through probabilistic attacks and how to mitigate

Mar 21, 2022

Moving to Medium (for now)

After many years of blogging in Blogspot, I’m finally moving out of it. It didn’t feel like a modern platform anymore (for a long time…

Mar 21, 2022

Mar 21, 2022

Break&Build Security

Break&Build Security

https://www.linkedin.com/in/santikanto/ I’m Santiago Kantorowicz, Principal Associate Security Architect @ Twilio. Passionate about CyberSecurity.

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams