La storia di come ho sbagliato a credere di aver sbagliato

Se c’è una cosa che ci inculcano in tesa fin da piccoli, è che bisogna sbagliare per imparare qualcosa.

Ci dicono anche, genitori e insegnanti, che senza esperienza probabilmente sbaglieremo in scelte e…

Rugged DevOps: Less Capture the Flag, More Collaboration

Rugged Software Engineering from LASCON

I may be a little biased because I co-founded the conference back in 2010, however, one of my favorite conferences is the Lonestar Application Security Conference (LASCON) in Austin, TX. LASCON is a security conference unlike others in that one of its main…

Welcome to the Signal Sciences Labs!

While running security engineering at Etsy we were often faced with the fact that security products on the market didn’t solve the real world problems we were encountering every day. The more we talked with our peers, the more we heard the same frustrations…

We definitely need more of this. I’ve been witness to *way* too many terrible security failures, like storing passwords in plain text (and making the user/password the PK on the database), not securing endpoints, transmitting passwords over HTTP, using basic authentication for the proxy (which password was your Active Directory password), relying on…