hacker/hustler. chairman/founder/cto @bugcrowd and cofounder @disclose_io. husband, dad, musician, believer. pioneer of crowdsourced security as-a-service.
entrepreneurship
The good: * Introducing someone to something that genuinely serves a need that they have (marketing) and having them accept it on terms that are agreeable to both of you (sales). * Market and sell your thing with the attitude of wanting to serve your prospects. This makes ALL the difference. * Do
vulnerability-disclosure
disclose.io is a collaborative and vendor-agnostic project to standardize best practices around safe harbour for good-faith security research. The project expands on the work done by Bugcrowd and CipherLaw’s Open Source Vulnerability Disclosure Framework, Amit Elazari’s #legalbugbounty, and Dropbox’s call to protect security researchers. Our framework
entrepreneurship
Kim Heras and the Pushstart crew put on another Mentor Live event last night. Think speed dating for start-ups and mentors. I was privileged to get to participate as a mentor, and I thought I’d share some of the bits of advice a I found myself given out more
opinion
My wife and I were among the hordes who queued up for an iPhone 5 this morning. First impressions on iPhone 5: * Fast. Like really, really fast. Super fluid and responsive. Apps open instantly. * Taller, thinner and lighter. It’s actually a bit awkward and foreign handling one for the
entrepreneurship
tl;dr: I love your idea. I want to hear about your idea. Please, do not interpret this post as me stifling your idea. But an idea without a commitment to execution is useless… at best an interesting conversation over a beer or a coffee. Don’t let that be
opinion
My wife and I were among the hordes who queued up for an iPhone 5 this morning. First impressions on iPhone 5: * Fast. Like really, really fast. Super fluid and responsive. Apps open instantly. * Taller, thinner and lighter. It’s actually a bit awkward and foreign handling one for the
cybersecurity
Bugcrowd is the premiere crowdsourced security platform. More enterprise organizations trust Bugcrowd’s Crowdcontrol platform to manage their bug bounty, vulnerability disclosure, and next-gen pen test programs. By combining the largest, most experienced triage team with the most trusted hackers around the world, Bugcrowd generates better results, reduces risk, and
cybersecurity
First things first… If you receive a spam SMS you should forward the message to the Australian Media and Communications Authority Spam SMS service on 0429 999 888. I recommend doing it a few times. This is the proper way to deal with this issue. Now… for those of you
cybersecurity
First things first… If you receive a spam SMS you should forward the message to the Australian Media and Communications Authority Spam SMS service on 0429 999 888. I recommend doing it a few times. This is the proper way to deal with this issue. Now… for those of you
cybersecurity
Check out this website by Mark Wickendam. Let it be said first up that I think this site is awesome. I lol’d hard, visited it again, lol’d hard again, and so on. As one of the guys behind http://rdpcheck.com (a legit site and I suspect one
vulnerability-research
There’s a lot of hubbub going around about the recent vulnerability from Microsoft. It’s called MS12-020 and it affects the Remote Desktop Protocol (a.k.a. RDP or Terminal Services if you are old school). The hubbub is warranted… Once researchers get code working to exploit this vulnerability
vulnerability-research
We’ve created a tool at RDPCheck to help you test your exposure to an attack from the outside on Microsoft’s recent MS12-020 Windows Remote Desktop Protocol security flaw.The flaw affects every version of Windows so this DOES apply to you (unless you’re on a Mac…) So