Developed http://flaws.cloud, CloudMapper, and Parliament.
Founding team for @fwdcloudsec.
Admin for Cloud Security Forum Slack.
Threat researcher at https://www.wiz.io/
https://twitter.com/0xdabbad00
One decade ago tomorrow I released SlopFinder, my first project that ended up getting some public attention. http://www.h-online.com/security/news/item/Many-popular-Windows-programs-have-insufficient-protection-1764311.html
I've since stopped paying for the domain it was hosted on, but it let you drag and drop Windows executables to check if they had DEP & ASLR.
What's funny is this was a quick hack on a much more elaborate project called IceBuddha, which was an in-browser hex viewer that would parse and display the entire binary structure of files, and use a library to dynamically cross compile Python->Javascript all in the browser!
It could parse PE files, mach-o, gif, and even a certain unique file structure used by a malware strain. That got no attention, and neither did SlopFinder, until weeks later I released a blog post showing how I used SlopFinder to get some interesting results.
It took 3 blog posts about SlopFinder before it got attention. Once it finally did, icebuddha retroactively got a bit of attention and I started getting some followers on the bird site that I had joined a few months prior to that.
Anyway, it's fun looking back on where life has taken me since then, and a good lesson in perseverance.