InformIT: Twitter Security

[matt at piscis-security.com (Matt Fisher)]

Thought I'd throw this out there in case you hadn't heard already: 
http://www.fcw.com/Articles/2009/04/10/Web-Facebook-GSA.aspx . 

It's starting to affect me real-world already. those of us in the DC area, ramp up your incident response rates now, 
cause you know it's coming and you know it's going to be good. 

-matt. 


-----Original Message-----
From: sc-l-bounces at securecoding.org [mailto:sc-l-bounces at securecoding.org] On Behalf Of Gunnar Peterson
Sent: Tuesday, May 19, 2009 5:43 PM
To: Gary McGraw
Cc: Secure Code Mailing List
Subject:        

hi gary

one other interesting note on twitter security that i am retweeting  
from  @cykyc  & @focalintent:
you put your SSN in number-dash format, twitter automatically  
obfuscates it to XXX-XX-XXXX!

Now we just need fortune 500 to run twitter instead of ERP, CRM, etc.

-gunnar

On May 15, 2009, at 7:42 AM, Gary McGraw wrote:

> hi sc-l,
>
> It was inevitable---an article about Twitter Security.  If my latest  
> column were a tweet, it wouldn't have much content.  You can be the  
> judge about whether a longer form does:
>
> http://www.informit.com/articles/article.aspx?p=1350268
>
> As always, your feedback is welcome.
>
> gem
>
> company www.cigital.com
> podcast www.cigital.com/silverbullet
> blog www.cigital.com/justiceleague
> book www.swsec.com
>
> _______________________________________________
> Secure Coding mailing list (SC-L) SC-L at securecoding.org
> List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
> List charter available at - http://www.securecoding.org/list/charter.php
> SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com 
> )
> as a free, non-commercial service to the software security community.
> _______________________________________________

_______________________________________________
Secure Coding mailing list (SC-L) SC-L at securecoding.org
List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
List charter available at - http://www.securecoding.org/list/charter.php
SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
as a free, non-commercial service to the software security community.
_______________________________________________