Zack Smith @SecOpsEngineer

Senior Cyber Security Engineer | Doing data things Joined December 2021

Tweets

859
Followers

962
Following

1K
Likes

2K

Zack Smith @SecOpsEngineer

4 weeks ago

@regex101 Have you thought about a browser extension? Support some local search features on the users current web page, but point them to the site if they want the more advanced features. It could help get existing users to return, assuming you can get them to install the extension

1 0 1 37 0

View Details

Zack Smith @SecOpsEngineer

2 months ago

@regex101 What benefit would a desktop app provide? I like the web experience, so don't think I'd switch unless I'm missing something

1 0 0 29 0

View Details

Zack Smith @SecOpsEngineer

3 months ago

@nalinrajput23 YouTube and Android are both part of Google. They don't need to put the Spyware into the YouTube app, since they already own the OS. That's gotta be it.

0 0 2 726 0

View Details

Zack Smith @SecOpsEngineer

5 months ago

@d1ngbat_ @endingwithali I will still say I work in fashion, despite the holes in my work t-shirt and sweatpants. The skeptical looks I get make it worth it

0 0 0 47 0

View Details

Zack Smith @SecOpsEngineer

5 months ago

@endingwithali I'm a security engineer at an apparel company, but my wife rolls her eyes when I say I work in fashion. Same thing?

2 0 74 17K 7

View Details

Zack Smith @SecOpsEngineer

6 months ago

@forgebitz 0

0 0 0 15 0

View Details

Zack Smith @SecOpsEngineer

7 months ago

@T_Zahil I think Patrick O'Shaughnessy said something similar in a podcast with @davidsenra. Everyone's mind recalls the world a little differently

0 0 0 29 0

View Details

Zack Smith @SecOpsEngineer

8 months ago

@mailspec Yes, in many ways user privacy isn't strictly a technology issue. It's often a UX problem. Friction for the user results in insecure behavior.

0 0 1 12 0

View Details

Zack Smith @SecOpsEngineer

9 months ago

@thesamparr These themes will allow you to build out series of shorts, compilations for target groups, etc. Different themes could be linked to different landing pages for leads, allowing you to know more about the stage a lead is in and what they're thinking about. This is just a start.

0 0 0 15 0

View Details

Zack Smith @SecOpsEngineer

9 months ago

@thesamparr I am assuming you have your own target buckets. Take all content that you've previously produced or will produce and group them up with similar themes that match target groups. Use those themes to identify gaps in content and build out a roadmap. Add themes/groups as you grow.

1 0 0 20 0

View Details

Zack Smith @SecOpsEngineer

11 months ago

@s4rah_dev A dad walking around the neighborhood with his kid was giving each house a shot of malört. Does that count?

0 0 1 26 0

View Details

Zack Smith @SecOpsEngineer

a year ago

Earlier this year I had the opportunity to speak at @bsides312. It looks like the video of my talk just got posted, so if you think using python for dark web intelligence sounds interesting you should check it out! youtu.be/uVkqON80rAg?si…

1 0 5 386 0

View Details

Zack Smith @SecOpsEngineer

a year ago

@shrisec @hetmehtaa A lot of it boils down to how they approach coworkers or other teams that are opposed to security related change. Something like focusing on finding a way to help them achieve their end goal while still maintaining a level of security. We want to block breaches, not the business

0 0 1 24 0

View Details

Zack Smith @SecOpsEngineer

a year ago

@hetmehtaa It doesn't cover all CVEs but exploit-db is pretty good. Also check out rapid7.com/db/?type=metas…

0 0 4 211 0

View Details

Zack Smith @SecOpsEngineer

a year ago

@gitpush_gitpaid Seems Chrome is just against devs finding love at this point. Clearly, you're a bad actor...

1 0 1 46 0

View Details

Zack Smith @SecOpsEngineer

a year ago

@The_Geminiman Having done the clean-up for that after the fact, years of giving out access flippantly can make quite a mess. Just-in-time access has made a good difference in this area, but not fixed it entirely

1 0 0 24 0

View Details

Zack Smith @SecOpsEngineer

a year ago

secutils.com/cve/CVE-2019-5… Path traversal in Ruby on Rails (Action View). Affects versions < 5.2.2.1. CVSS 7.5. Attackers can disclose arbitrary files using manipulated HTTP Accept headers. Still relevant in legacy Rails deployments.

0 0 2 196 0

View Details

Zack Smith @SecOpsEngineer

a year ago

secutils.com/cve/CVE-2014-3… A buffer overflow in Multi-Router Looking Glass (MRLG) that allows remote attackers to write arbitrary memory. Affects versions ≤ 5.4.1. CVSS 9.8. Exploitation can lead to memory corruption and potential code execution. This one is over a decade old!