Devsecurely @devsecurely

Our sole purpose is to make security concepts accessible for all developers | We taught 320+ developers how to secure their applications. devsecurely.com Paris Joined September 2023

Tweets

962
Followers

514
Following

431
Likes

799

Devsecurely @devsecurely

7 months ago

@EiiKwesiKay Look at this masterpiece: x.com/imaibou/status…

Imed Bounab @imaibou

7 months ago

A Fortune 500 company. A 6-figure security budget. Vs. a 14-year-old and one leaked API key. 🎬 API: The Big Leak

3 0 11 543 0

0 0 1 15 0

View Details

Devsecurely @devsecurely

7 months ago

@imaibou The scene where everyone celebrated a pull request merge. That happens in our office all the time!

1 0 0 16 0

View Details

@imaibou When I realized the importance of skills, it became easy to improve all aspects of my life. I was able to just identify the skill I was missing to achieve a certain goal. Then it became a matter of finding the right learning material, reading it and practicing. Easy peasy.

1 0 1 15 0

View Details

Devsecurely @devsecurely

a year ago

@imaibou Fascinating origin story!

1 0 2 18 0

View Details

Devsecurely @devsecurely

a year ago

@imaibou I can't agree more on the "simplifying tech concepts" part. If you build incredibly complex solutions, but you can't explain them clearly to your superiors, then it's like it never happened.

0 0 1 21 0

View Details

Devsecurely @devsecurely

a year ago

@imaibou I can't even begin to count how many websites I compromised because of these silly passwords

0 0 0 3 0

View Details

Devsecurely @devsecurely

a year ago

Don't give them much to attack in the first place!

Imed Bounab @imaibou

a year ago

In your opinion, which goal is easier to score against? The big one on the left obviously!! The most efficient way to protect your IT infrastructure is to reduce the attack surface. If you don't need to expose a service on the internet, don't expose it.

1 0 5 383 0

1 0 2 163 0

View Details

Devsecurely @devsecurely

a year ago

@imaibou The discipline part hits hard. Sometimes you get tired of a particular project and don't feel motivated to continue. You need to learn to keep pushing until you reach the finish line.

0 0 0 22 0

View Details

Devsecurely @devsecurely

a year ago

@imaibou Let's connect!

1 0 1 25 0

View Details

Devsecurely @devsecurely

a year ago

@imaibou Never trust user input

0 0 0 3 0

View Details

Devsecurely @devsecurely

a year ago

Restrict the attack surface to reduce the risk of getting hacked !

Imed Bounab @imaibou

a year ago

Don't leave the door to your safe open. You should restrict access to admin interfaces. Yes, even when they require login. You shouldn't give hackers the opportunity to try and guess the correct credentials. Only allow the admin's IP address to access the service

2 0 7 605 0

0 0 5 130 0

View Details

Devsecurely @devsecurely

a year ago

@imaibou With great power comes great responsibility

0 0 0 4 0

View Details

Devsecurely @devsecurely

a year ago

Exactly! Why would you not do it? It's easy, free, and has a lot of advantages.

Imed Bounab @imaibou

a year ago

It's a very bad idea to not have HTTPS. Hackers can: - See what your users do on your website - Steal your users' cookies and passwords - Change the website content and replace it with scams Also, modern browsers will not open your website and will show a big warning instead

0 0 1 323 1

0 0 1 124 0

View Details

Devsecurely @devsecurely

2 years ago

This must be one of the rare cases where getting hacked was a good thing 😅

Imed Bounab @imaibou

2 years ago

My website got HACKED back in 2011. I lost all my users and all that work was for nothing. I then started to learn everything I can about cybersecurity and became a penetration tester. Now I teach developers about cybersecurity Lets #connect and make internet a safer space!

14 1 39 2K 1

0 0 0 67 0

View Details

Imed Bounab @imaibou

2 years ago

In soccer, the goal is the surface area defined by the goalposts. The goalkeeper knows exactly what to defend. You should identify all the websites you own that are accessible on the internet. Clearly define the attack surface you need to defend.