← Feed

Posts

• Post #3822648

  I think I'm done with this platform. All I receive is complaints. Clearly what I am doing is unwanted here. Please find me on LinkedIn, X or BlueSky. Bye.

• Post #3785950

  I’m excited for the next book stream 😊 For Chapter 5 of *Alice and Bob Learn Secure Coding*, I’ll be joined by Katie Paxton-Fear to cover technology-specific security practices and what secure coding looks like across different architectures and platforms. RSVP: https://twp.ai/9OYU1V 1/2

• Post #3785949

  I *may* have bought a new guitar. ☺️ It's new-to-me, and so pretty! Obviously I need a new amp now, right???

• Post #3785948

  October (Security Awareness Month) will be here before we know it, and my calendar is officially open for bookings! If you're looking for engaging security content that software developers will actually enjoy, I'd love to help. tanya AT shehackspurple DOT ca 1/4

• Post #3785947

  It’s #CyberMentoringMonday!!!! Are you looking for a professional mentor or to learn more about InfoSec? Are you experienced and willing to ‘give back’? Use this thread and hashtag to connect

• Post #3743939

  Announcement: I'm the keynote for Sikkerhetsfestivalen (Security Festival) 2026, in Lillehammer, Norway! August 24 - 26, 2,000 of us will take over that tiny town to learn, party, and connect! Check out the link below to learn more. :-D https://twp.ai/E5D4ib

• Post #3728519

• Post #3725302

  Watch this video to hear key take aways, insights, and observations from my attendance at OWASP Global AppSec EU in Vienna, Austria, 2026. #OWASP #AppSec #aisecurity https://twp.ai/E5DeU3

• Post #3720544

  Your software supply chain is not just “the code we wrote.” It is the tools, packages, pipelines, build systems, humans, shortcuts, and gremlins we let near production. Let’s secure the whole thing, not just the shiny repo. 💜 #episode4 Watch: https://twp.ai/NSWx2b Listen: https://twp.ai/9OXDSP

• Post #3708100

  Do you live in the Cowichan Valley or on Vancouver Island? Want to join us for #OpenHack?!?!?! Of course you do! Sign up for the meetup here: July 22: https://twp.ai/Wpsxcf August 12: https://twp.ai/IltE2T (I will be at this one)

• Post #3701802

  Does “Shift Left” still mean something? If so, what does it mean to you? If not, tell me what ruined it for you. #AppSecThursday #talkAppSectome

• Post #3683657

  It’s #CyberMentoringMonday!!!! Are you looking for a professional mentor or to learn more about InfoSec? Are you experienced and willing to ‘give back’? Use this thread and hashtag to connect

• Post #3566030

  Watch this video to hear key take aways, insights, and observations from my attendance at OWASP Global AppSec EU in Vienna, Austria, 2026. #OWASP #AppSec #aisecurity https://twp.ai/E5Dkei

• Post #3547717

  What was the moment that made you take security seriously? Tell me. #AppSecThursday #talkAppSectome

• Post #3542879

  October (Security Awareness Month) will be here before we know it, and my calendar is officially open for bookings! If you're looking for engaging security content that software developers will actually enjoy, I'd love to help. tanya AT shehackspurple DOT ca 1/4

• Post #3536236

  Starting any minute now (9:00 am PT): Chapter 4 of Alice and Bob Learn Secure Coding! Join Gaving Klondike and I for a great conversation and lesson! YouTube: https://twp.ai/gDBIIS LinkedIn: https://twp.ai/NSWJWC Twitch: https://twp.ai/9OWZw0

• Post #3526467

  I’m excited for the next book stream 😊 For Chapter 5 of *Alice and Bob Learn Secure Coding*, I’ll be joined by Katie Paxton-Fear to cover technology-specific security practices and what secure coding looks like across different architectures and platforms. RSVP: https://twp.ai/9OX6ki 1/2

• Post #3526142

  I’m thrilled to be keynoting at Sikkerhetsfestivalen in Lillehammer, Norway, August 24–26! My talk is: "Threat Modeling Developer Behavior: The Psychology of Bad Code". I’m already excited to meet the community there and share practical ways to make secure software feel more doable for developers. Tickets here: https://twp.ai/9Pbcli

• Post #3495554

  I was on the Colorado Security Podcast with Frank Victory! https://twp.ai/9OXGUK

• Post #3444193

  What do you think the future of AI Security is? Doom and gloom? Or amazing innovations and improvements? Or both?!?!?! #AppSecThursday #talkAppSectome

• Post #3444087

  @shibayashi@communicating.cypherpunk.observer 🔥🔥🔥🔥

• Post #3430411

  Thank you #owasp for having me in Vienna for the always fantastic #owaspglobalappsec! #globalappsecvienna 💟

• Post #2499402

  I’m doing another live book stream 😊 June 3, 8:00 am PST, I’ll be diving into Chapter 3 of Alice and Bob Learn Secure Coding with Scott Helme. This chapter, “Improving”, is one of my favourites because it’s all the “okay but how do I actually do that?” stuff. https://twp.ai/IlpMwJ 1/3

• Post #2499401

  We’re live tomorrow at 11:00am PST! I’ll be joined by Ray LeBlanc to walk through Chapter 2 of Alice and Bob Learn Secure Coding. This is the “get the fundamentals right” chapter: 1/2

• Post #2499400

  Come join Ray LeBlanc and I RIGHT NOW (on the hour) to talk about chapter 2 of my book! https://twp.ai/9OWPH4

• Post #2499399

  🚨 Emergency DevSec Station Drop There's an active npm supply chain attack happening right now. Compromised packages are stealing SSH keys, AWS credentials, GitHub tokens, browser passwords, and crypto wallets on install. Then using your publish token to infect every package you maintain. One command can protect you immediately: npm config set ignore-scripts true 1/2

• Post #2499398

  Dear followers, are you a developer, a security professional, or something else?

• Post #2499397

  I planted my dahlias less than two weeks ago. Look at my beautiful little plant babies! 😍😍😍 I'm so excited to see them grow. #infosecgardening

• Post #2499396

  It’s #CyberMentoringMonday!!!! Are you looking for a professional mentor or to learn more about InfoSec? Are you experienced and willing to ‘give back’? Use this thread and hashtag to connect

• Post #2499394

  The sneakiest supply chain attacks are not loud. They are boring-looking, easy to miss, and often invisible at first. Which is honestly what makes them so effective. Watch the full episode at DevSec Station to learn more. https://twp.ai/9OVPkR