Another white rabbit

Hi!
I hear the AI bubble is starting to deflate! Yay!
Some reports show fewer AI based attacks from hackers? WTAF?
Don' victim orgs think that the attackers are dumber than the defenders? (Hey you 50- kids! How do I say SARCASM with an emoji?)
(Now I have to SARCASM my SARCASM. Mybe a facepalm vid?)

I was on the Breaking Badness podcast AGAIN (3rd time, seriously, this episode is new)!!! With Kali Fencl, and it was a blast! She's such a charmer! We talked about AppSec's biggest challenges, perverse incentives and zero trust!

www.youtube.com/watc...

YouTube video by SheHacksPurple I just received OWASP Distinguished Life Time Member Award in the mail. Thank you. ☺️ #appsecurity

I received my much anticipated @owasp.org Distinguished Life Time Member Award in the mail. Thank you. ☺️
youtu.be/16j5g4MnZeQ?...

Announcement: New free course in Semgrep Academy!!!! Learn everything you ever wanted about Security Headers from Scott Helme and I in this one-hour, on-demand course! Please check it out, and tell your (nerdy) friends!

academy.semgrep.dev/...

I was on a security champion panel, “Security Champion Veterans Explain All.” with Dustin Lehr, Brook Schoenfield, Brendan Sheairs, and Chris Romeo! Check out the video!

My Panel: www.demosondemand.co...
All the panels: www.katilyst.com/res...

Hmmm.
Freezing rain yesterday, (not) today, and (the day after) tomorrow.

I haven't finished it yet, but it's great so far!
All that input from other experts has paid off!

Thanks for that link.
I have never lived in the US of A, so I found that video very helpful.
My only reference for 40 Acres was "... Turn This Rig Around".

@moderation.bsky.app why was this marked as adult content? It is not adult content. Please review.

I don't know anything about B.S..ky. Do they penalize you for dumping a link in a post? Do you have to put the link in a reply instead?
Maybe I should post the whole thing here, with more-more more in replies?
My original post was 1481 chars, if that is important.
Thanks!

Rob Echlin on LinkedIn: Does your supplier take AppSec seriously? How can you tell? Don't even… Does your supplier take AppSec seriously? How can you tell? Don't even look at their boastful self description. Start with their job listing for…

Does your supplier take AppSec seriously?
How can you tell?
Don't even look at their boastful self description.

Start with their job listing for developers.
Do they require new employees to learn their Secure SDLC? Do they p...
Doh. The whole thing is at LinkedIn:
www.linkedin.com/posts/robech...

I sent you an email back, with my resume, later in the day on Monday.

Changing my images in BlueSky was NOT an attempt to butter up any reviewer with a dog in their profile.
<grin>

Hi @jiaxiwu.bsky.social
I second the comments about learning Threat Modelling. It is an area I am learning more about.
You can apply it in (almost?) *any* AppSec role, if only as another person who has done it before, even on known-bad tools.

#CyberMentoringMonday I would like a mentor to help me with my AppSec resume and other suggestions.
I am looking for work in AppSec, in Ottawa, Canada, or remote in Canada.
I have been in DevOps/Pipelines/Jenkins/builds since 2000.