120 Followers
31 Following
175 Posts
Braised farm-raised free-range InfoSec with a side of sous vide artesian organic SecDevOps and avocado toast. Security-engineering manager with delusions of adequacy.
This brings back memories. At this point itโ€™s probably an esoteric reference even. ๐Ÿ˜‚
Meanwhile on LinkedIn. (took these screenshots myself) I got as far back as 2 years before I got bored. Clearly this isn't a new thing.
No idea if it still works but I keep it none the less.

Repeat after me:

WAF are not a fix for vulnerabilities.
WAF are not a fix for vulnerabilities.
WAF are not a fix for vulnerabilities.

---

Had to report a critical vuln to someone and the response was an update WAF policy as the solution.

It happens, but the context I cannot elaborate on here is that this situation is particularly disappointing.