tomdev (@tomdev) header
tomdev (@tomdev) profile picture

tomdev

@tomdev

I got the plans right here • Infrastructure Engineer @ HackerOne • Groningen

 Groningen, The Netherlands
Joined November 2008
  • Tweets10K
  • Following846
  • Followers2K
896Media
Photo by tomdev (@tomdev)Photo by tomdev (@tomdev)Photo by tomdev (@tomdev)Photo by tomdev (@tomdev)Photo by tomdev (@tomdev)Photo by tomdev (@tomdev)Photo by tomdev (@tomdev)Photo by tomdev (@tomdev)Photo by tomdev (@tomdev)Photo by tomdev (@tomdev)
Secure AI by Design at @Hacker0x01: hackerone.com/blog/secure-ai…
3
7
29
8,982
Disaster Recovery exercise; how to make them fun? Have a giant reptile take doen us-west-2!
Image from tomdev (@tomdev)
2
185
2/ The culprit? A discrepancy in the hash of constants.js. Our Rails asset pipeline appends a hash to filenames based on content, and somehow, the content was different across some server instances.
1
1
225
more replies
7/ This incident reminded us that no dependency is trivial. Stay vigilant and prepare for the unexpected—because sometimes, a time zone can take down your platform. 💻🚨
1
1
186
What’s the weirdest bug you’ve faced? Let’s share war stories! 👇
1
185
🚨 A time zone change broke our platform! Here's how Kazakhstan's decision to unify its time zones led to an unexpected cascade of issues. A thread from some interesting debugging performed earlier this year🧵👇
1
4
7
1,988
1/ On March 1, 2024, users started reporting intermittent issues. Some pages failed to load, and we traced the problem to a critical JavaScript file, constants.js. But why was it missing? 🤔
1
1
155
When you break stuff, I will tell you.
Image from tomdev (@tomdev)
4
500
Been using these computer thingies since 1996. Also me, each and every time:
Image from tomdev (@tomdev)
2
192
Today, @Hacker0x01 is announcing Automations, a powerful feature that enables customers to automate the majority of their (often currently manual) processes. It is offered in two flavors: no-code for basic use cases and a full blown code sandbox for more advanced use cases. All hosted in HackerOne’s secure infrastructure. Automations also integrates with Hai, HackerOne’s copilot assistant, to unlock AI agent-like behavior in the platform. For example, it is now possible to automatically evaluate reports on submission to assign it to the right owner, determine the criticality based on the risk profile of your company’s data, or even automatically add remediation advice with code examples tailored to your company — all directly in a HackerOne report. Automations is a powerful tool and we can’t wait to see what you’ll build with it to further automate vulnerability intake and reduce time to triage and time to remediation. Start using it today: docs.hackerone.com/en/articl…
3
4
1
65
9,482
Working on some query optimization with my colleague: "It's about 1 million total requests per day so let's roughly 3x that. Our servers can take that 30 minutes and go hit the gym for a good workout. So much free time" Be nice to your servers 🥰
169
Exciting milestone alert! Join me in congratulating the GitHub team for the 10-year anniversary of their Bug Bounty Program. 💪 sprou.tt/1hPVp4A2rZz
10 years of the GitHub Security Bug Bounty Program

10 years of the GitHub Security Bug Bounty Program

Let’s take a look at 10 key moments from the first decade of the GitHub Security Bug Bounty program.

github.blog
1
8
508
Americans: I have to own a big car because I sometimes need to move things around Dutch:
195
4,173
509
48,512
3,651,496
A group of ducks in Portugal witnessed the meteor while on Twitch
874
33,860
5,091
291,862
77,565,331
Worked with @Martzen0x01 on updating the hacker101.com web classes for web security. Anything you think is missing content-wise? Any new hacking tools that are not listed yet?

Home

Hacker101 is a free class for web security. Whether you’re a programmer with an interest in bug bounties or a seasoned security professional, Hacker101 has something to teach you.

hacker101.com
4
1
17
1,873
Even though this thread is two years old, it's still an amazing resource on managing up, which I revisit quite often. On managing up, by Wes Kao:
Wes Kao 🏛 (@wes_kao) profile pictureWes Kao 🏛
@wes_kao20 Mar 2022
Most people suck at managing up. They waste their boss’ time with too much (or too little) information. Here’s how to give the right amount of context:
2
394
Load more