#AppSec folks- what code repo are you using and are you building an SBOM prior to running security scanning on dependencies or are you just gathering dependencies and running scans?
What's the best practice here? What's the MVP?
How are you ensuring all dependencies are gathered for a given application /service prior to scanning?
Training has created an inquiring mind that would appreciate learning more from peers.
#Birding or #birdwatching question: is there anyone in the #Boston area who has either a good spotting scope or binoculars better than 10x, or is a member of Cottage Park Yacht Club in #WinthropMA ? I keep seeing #swallows of some species that appear to be roosting under the metal cap on one of their dock pillars, but they're dark all over, with only one having even a slightly pale belly. I don't have a telephoto lens- I need help ID'ing the species in person.
Thanks!
PLEASE SHARE ESP TO UNDERREPRESENTED WOMEN LOOKING FOR INFOSEC JOBS: We at Red Queen Dynamics are proud to bring you the Infosec.Exchange State Of The Instance webinar on August 3rd at 11AM Pacific.
Join me, @jerry, Mari Galloway, and Talya Parker to talk about opportunities for underrepresented women in cybersecurity startups after the Twittersplosion removed all our weak social ties. How do we find job postings now that we've all gone to different places? There will be some *very frank opinions* shared.
Get jobs! Talk to Jerry about how I.E. is working to increase the voice of underrepresented women on this platform! Learn from Mari and @TalyaParker about how best to reach to communities respectfully to provide job postings!
Learn more and sign up here: https://redqueendynamics.com/en/blog/infosec.exchanges-state-of-the-instance-navigating-startup-hiring-in-the-post-twitter-world
Hey fellow #cybersecurity and #appsec professionals, hobbiests, hackers and tinkerers. I'm headed to Vegas for #BlackHat2023 and #Defcon31 for the first time in 13 years. It seems like ages and mostly because it's going to be the first time participating as a corporate AppSec lackey and not a vendor consultant, a research analyst, speaker or working for the conferences managing press like in some of the early days*.
Looking forward to seeing some of the (now older) familiar faces and meeting so many of the new folks I've only had the pleasure of making acquaintances on infosec social media from afar, and getting caught up as well as just breathing a bit while getting some training and a certificate.
Come say hi if you see me! #McIntyre
"Securing the Web forward: Addressing developer concerns in web security" by Dan Appelquist
https://www.w3.org/blog/2023/securing-the-web-forward-addressing-developer-concerns-in-web-security/
Jeff Moss
Camwyn
JosephMenn
Tarah Wheeler
World Wide Web Consortium
The Oatmeal