Security Engineering Manager @meta, leading a team scaling the detection and prevention of web vulnerabilities
New York, New York
Joined March 2011
- Tweets61
- Following110
- Followers265
- Likes230
Graham Bleaney retweeted
We are looking for an experienced application security engineer to help build a world where everyone, everywhere has secure access to the world’s financial system. We have the vibe of a FinTech startup with the perks of a big company. Apply here:
facebook.com/careers/v2/jobs…
Graham Bleaney retweeted
The second round of our RFP is now published, with proposals being accepted until July 14!
"Towards Trustworthy Products in AR, VR, Smart Devices".
research.fb.com/programs/res…
Graham Bleaney retweeted
🤔 Explain Like I’m 5 🤔
In just over a minute, Jessica (@hey_its_jlin) gives an overview of #Pysa, an #OpenSource Python static analysis tool used to detect and prevent security issues in #Python code.
Check it out here: youtu.be/LDxAczqkBiY
Graham Bleaney retweeted
wired.com/story/facebook-mes…
A decade of facebook bug bounty. 130,000 reports, 6,900 valid, 11.7million paid out.
An incredible team of folks lead this program now - it started in a basement and with us taking weekly trips to western union to send money orders to fulfill bounties.
Graham Bleaney retweeted
Sometimes we find bugs in code that isn't ours, now (following the p0 playbook) we have a pathway to disclose them zdnet.com/article/facebook-e…
Graham Bleaney retweeted
Want to know more about Pysa security static analysis? "Ask me anything" on hacker news now news.ycombinator.com/item?id…
Graham Bleaney retweeted
Day 1 of #AppSec Village 2020 at #DefConSafeMode includes @GrahamBleaney of @Facebook's workshop on #pysa and #Python #security #vulnerabilities. Subscribe to our @YouTube channel so as not to miss the stream of talks youtube.com/c/appsecvillage.
Graham Bleaney retweeted
We discovered a 17-year-old vulnerability in all of Windows DNS Servers.
SIGRed (CVE-2020-1350) is a wormable, critical vulnerability that can be used to achieve full Domain Administrator privileges.
research.checkpoint.com/2020…
Graham Bleaney retweeted
Google recently awarded $10k for an exotic stored XSS on Google Scholar using polymorphic images. Another “magic” show performed by our own @lorenzostella! Read how on our latest blog post: blog.doyensec.com/2020/04/30… #xss #bugbounty #magic
Graham Bleaney retweeted
And it's live! We've launched an RFP for university research in the area of AR, VR, & Smart Devices as it relates to Trust (Security, Privacy, Integrity, Ethics).
Please share!
research.fb.com/programs/res…
Graham Bleaney retweeted
Facebook bug bounty 2019 recap - facebook.com/notes/facebook-…
We have paid 2.2 million and almost 10million over the programs lifetime
Graham Bleaney retweeted
Facebook is starting a "prodsec but for privacy" team to compliment existing privacy work. This team will identify privacy risks and be the technical voice on the "jedi council" of privacy decisions. First up the manager role: facebook.com/careers/jobs/23…