Mastodawn

David Trejo (dtrejo.com)Jan 24, 2024

Absolute AppSec Dec 19, 2023

In 1 hour we’ll be chatting w/
Chime
engineers (including @dtrejo) about Monocle and learn about their devsec process on the
@absoluteappsec
podcast.

You can watch it here at Noon ET: https://www.youtube.com/watch?v=WGBkmlc2Y6A

Absolute AppSec episode with Chime Security Engineering behind Monocle

YouTube

David Trejo (dtrejo.com)Sep 24, 2023

Show thread

Shriram Krishnamurthi Sep 23, 2023

5/24 It is a commonplace for people to blame deregulation on a wide variety of ills, from high fares to poor service to rural places to such abject horrors are people boarding planes in comfortable clothes. Petzinger takes a much more balanced view. ↵

Show thread

David Trejo (dtrejo.com)Apr 20, 2023

Also, I'll be speaking on Saturday at BSides SF about this and more–see you there? https://bsidessf.org/

BSidesSF

BSidesSF 2026 is happening -- March 21-22! Registration is Open! Tickets for BSidesSF 2026 are now available! You can buy your tickets at the usual place: Right here! Ticket prices wil...

BSidesSF

David Trejo (dtrejo.com)Apr 20, 2023

Excited to share 😺 Monocle Risk Advisor with you! How we handle risky PRs at Chime: https://medium.com/life-at-chime/mitigating-risky-pull-requests-with-monocle-risk-advisor-part-2-7013e1485bf2

#security #securityengineering #github #pullrequests

Mitigating Risky Pull Requests with Monocle Risk Advisor (Part 2)

In case you missed it, check out Part 1: Monocle: How Chime creates a proactive security & engineering culture (Part 1) At Chime, we’re big fans of Gitops, where all application and infrastructure…

Life at Chime

David Trejo (dtrejo.com)Apr 13, 2023

Started rehearsing for my BSides SF talk on April 22nd. Excited for it 😎

Details: https://infosec.exchange/@dtrejo/109832188256725418

David Trejo (@[email protected])

🎉 Good news! I'm giving a conference talk at @bsidessf SF '23 in April! 🎙️ Gamify security best practices to scalably improve engineering culture My coworkers are also presenting: 🎙️ Overwatch: A serverless approach to orchestrating your security automation by Sanchay Jaipuriyar 🎙️ What Does it Mean to Build a Proactive Security Culture in an Organization by @spashtata & @arkadiyt Tickets: affordable, https://bsidessf.org/schedule

Infosec Exchange

David Trejo (dtrejo.com)Feb 24, 2023

How to bulk comment on dependabot PRs: gh pr list --app dependabot --json number -q ".[].number" | xargs -I{} -n 1 gh pr comment {} -b "@dependabot rebase" #github #dependabot

David Trejo (dtrejo.com)Feb 9, 2023

🎉 Good news! I'm giving a conference talk at @bsidessf SF '23 in April!
🎙️ Gamify security best practices to scalably improve engineering culture

My coworkers are also presenting:
🎙️ Overwatch: A serverless approach to orchestrating your security automation by Sanchay Jaipuriyar
🎙️ What Does it Mean to Build a Proactive Security Culture in an Organization by @spashtata & @arkadiyt

Tickets: affordable, https://bsidessf.org/schedule

Schedule

View the BSidesSF 2023 schedule & directory.

BSidesSF

David Trejo (dtrejo.com)Jan 31, 2023

Michael Gebetsroither Jan 31, 2023

RT @Kostastsale
I usually make short-form satirical videos for fun, but never share them with the world. This time tho, I thought I'd make one for the infosec community. Some might even find it educational 😅

If you're in #infosec and you feel a little down this week, this video is for you💙

David Trejo (dtrejo.com)Jan 29, 2023

spaf Jan 28, 2023

Simple FYI for US:

If you last had a COVID vaccination more than two months ago (and no diagnosed COVID infection since then), you are eligible for another booster under CDC guidelines.

As someone in a higher-risk group about to head off to several conferences, I got another booster yesterday. (No improved 5G reception yet, though.)

And, if you have yet to get the bivalent booster (only 16% of US has), then do it! Not only will it help protect you, but it will help protect others -- like me!

David Trejo (dtrejo.com)Dec 22, 2022

racheltobac

Dec 22, 2022

I always talk about how useful Data Brokerage sites are in human hacking (they're the first step in OSINT before launching the attack). Which is why I'm stoked to be partnering with delisting company DeleteMe on a virtual event January 25th at 1pm ET where I chat with CEO Rob Shavell about how I use Data Brokerage sites in my hacking, why I recommend delisting to everyone for their security and privacy, and have a live Q&A with the audience. Please join us for this free event, all are welcome. https://b2b.joindeleteme.com/webinar-january-2023

DeleteMe Webinar

Join us on 1/25/23 with privacy expert Rob Shavell, CEO of DeleteMe, and ethical hacker Rachel Tobac, CEO of Social Proof Security.