@gbmHopper

She | *New* Security Engineer, programmer, dancer, judoka, #infosec nerd, and likes velociraptors. All with the enthusiasm of an over caffeinated squirrel.

 Oregon, USA
Joined June 2016
  • Tweets1.8K
  • Following431
  • Followers224
86Media
Chaos Squirrel (Amanda) retweeted
Rachel Tobac
@RachelTobac18 Aug 2022
🚨ATTENTION🚨 Apple found two 0-days actively in use that could effectively give attackers full access to device. For most folks: update software by end of day If threat model is elevated (journalist, activist, targeted by nation states, etc): update now techcrunch.com/2022/08/17/ip…

Apple releases iOS, iPadOS and macOS security fixes

Update your Apple devices today.

techcrunch.com
86
1,987
256
3,231
Chaos Squirrel (Amanda) retweeted
GoldiΞ@NFTgoldilocks22 Jul 2022
Creative people need time to sit around and do nothing
2,656
59,785
6,086
448,555
Chaos Squirrel (Amanda) retweeted
taber@cakesandcourage30 Jun 2022
Supreme Court votes 6-3 to deploy the dev branch directly to prod
106
1,405
185
11,638
Now, in the country of America, I have less rights than men. Land of the free...for men. Fuck the patriarchy.
1
My favorite thing about playing video games with Agile Coaches is they do a superb retro after each session. 😂
If you are in appsec and you have the opportunity to help define the SDLC at your work, TAKE THE OPPORTUNITY! Helping define the SDLC puts you in such a great position to not only succeed at appsec initiatives, but also makes the process more consistent for the devs. 1/3
1
2
Devs are less likely to fight with you over a process you both designed and agreed to than handing requirements out for them to handle and manage themselves. If you have an SDLC defined already, work with management/architecture peeps to get buy in for changes. 2/3
1
2
If management shows resistance, what are ways you could show value up front that would give them confidence in your capabilities? Is it working with the testers to define security test cases? What do you do to build relationships with your stakeholders? 3/3
1
When your devs ask for help with TLS cipher suites... But then DO THE RESEARCH TO HAVE AN INFORMED CONVERSATION. Omg I'm so freaking proud of them.
1
3
Chaos Squirrel (Amanda) retweeted
Ricky
@rickyfm12 Dec 2021
We don’t need everyone to upgrade log4j, just enough for herd immunity to takeover
120
1,576
271
6,136
So, a story: This past week I went in for a colonoscopy and an endoscopy to help find out what has been wrong with my digestion this past year. Original plan was to just do the endo since we had already done imaging and saw several instances that showed reflux, which pointed 1/n
1
more replies
but I can't seem to shake the feeling that I just possibly dodged a huge bullet(I mean, it was definitely big enough to be considered a bullet. lol). The scary part? I'M NOT EVEN CLOSE TO THE NORMAL AGE THAT PEEPS SHOULD GET THIS PROCEDURE. Had been having digestive issues 4/n
1
throughout the pandemic, thought it was related to stress, sitting too much (I have been working from home), that possible GERD thing too, but I never expected this. Please please please get yourself checked if you are having problems in that region. It might be worth it. 5/END
"Can you help me understand <blank>" is office code for "ya fucked up, better have a good reason"
Helicopter: Security engineer Boat: The Enterprise living with the effects of deciding that "we dont need a staging environment, we have QA".
This Post is from an account that no longer exists. Learn more
1
Today's my birthday. I feel....older. Lol.
2
2
Chaos Squirrel (Amanda) retweeted
KTuosto@KT668902082 Nov 2021
Calling all women in cybersecurity! I am writing a research paper on the ups and downs of being a woman in cybersecurity. If you have any personal stories or websites I should look into. I would love to hear your suggestions. #WomenWhoCode #cybersecurity
2
Load more