bensedat
The Synopsys Software Integrity Group (SIG) builds security tools used by companies around the world to secure software. The DevSec Tools team is building innovative API testing products primarily using Elixir. We're a small team at a fascinating intersection of both software and security engineering and using them together to make security easier and faster. Apply at https://tinfoilsecurity.com/go/job_SWEsr2.
We're hiring for the Tinfoil Security engineering team at Synopsys! We're looking for senior engineers to help develop Tinfoil's Webapp and API security tools. We have a close-knit team and a diverse tech stack (Elixir, Ruby, Javascript/Typescript, Go).
The role is listed here: https://tinfoil.co/go/job_SWEsr2
Email [email protected] and [email protected] with a github and resume; we'd love to hear from you!
We're hiring for the Tinfoil Security engineering team at Synopsys! We're looking for engineers at all skill levels to continue developing Tinfoil's Webapp and API security tools. We have a close-knit team and a diverse tech stack (Elixir, Ruby, Javascript/Typescript, Go).
https://tinfoil.co/go/job_SWE2 https://tinfoil.co/go/job_SWEsr2
API Pulse – Monitor the Health of Your API
Protect Yourself from Magecart Using Subresource Integrity
At Tinfoil Security we're working to make the internet a more secure place. We write tools that are used to secure the largest web applications and APIs in the world. If you've ever watched a video or streamed music online, your data has probably been secured by code we've written. To date, our software has found and fixed over two million security vulnerabilities in the web. Our goal is to reduce the time it takes to find and fix vulnerabilities and make it a part of the software building process.
Software Engineer: We work in many different domains in a highly collaborative environment. This involves everything from distributed systems to static analysis to information architecture. We value speed, but we value stability and an approachable user experience more. Our software stack is primarily Elixir, Ruby, and Go, but we're advocates of choosing the best tool for the job. If something like Elm is going to help you solve a problem more effectively then we want to provide you a place to convince us of that and keep our software moving forward.
Lead Front-end Engineer: You will be responsible for leading our front-end efforts, using cutting-edge technology and design methodologies. You will take charge of defining and implementing our design system, and will be trusted to put that design system into practice by building new interfaces and revolutionizing our old ones.
Sound interesting? Check out more info at https://www.tinfoilsecurity.com/jobs.
Securing Yourself at DEFCON 26
At Tinfoil Security we're working to make the internet a more secure place. We write tools that are used to secure the largest web applications and APIs in the world. If you've ever watched a video or streamed music online, your data has probably been secured by code we've written. To date, our software has found and fixed over two million security vulnerabilities in the web. Our goal is to reduce the time it takes to find and fix vulnerabilities and make it a part of the software building process.
We work in many different domains in a highly collaborative environment. This involves everything from distributed systems to static analysis to information architecture. We value speed, but we value stability and an approachable user experience more. Our software stack is primarily Elixir, Ruby, and Go, but we're advocates of choosing the best tool for the job. If something like Elm is going to help you solve a problem more effectively then we want to provide you a place to convince us of that and keep our software moving forward.
Sound interesting? Check out more info at https://www.tinfoilsecurity.com/jobs.
[CVE-2018-8048] Rails/Loofah XSS Vulnerability
Apache Struts 2 Vulnerability Explained in Plain English
Steam Security and Trading Update
Docker Cloud Announced
Atom Project Adopts Open Code of Conduct
[CVE-2015-3226] XSS Vulnerability in ActiveSupport::JSON.encode
Awesome ZSH Plugins and Frameworks
Anthem Hacked
EDIT: More information was requested so here goes: I've always been interested in food science and trying to make food more predictable. I think that's why I like baking so much. Pantelligent has given me the tools and visualizations to figure out what is actually happening on my stove. I've learned how to gauge the temperature of the pan, and how my electric stove has a really huge carryover heat capacity. I can pretty much turn the stove off halfway through the cooking process and coast the rest of the way with residual heat and still cook all the way through, without overcooking.
Arbitrary file existence disclosure in Action Pack (CVE-2014-7818)
Show HN: Check if you're vulnerable to POODLE
September Atom Package Roundup
Artificial sweeteners linked to glucose intolerance
A plugin manager for zsh, inspired by oh-my-zsh and vundle
as compared to: https://github.com/rails/rails/compare/v4.1.2...v4.1.3 and https://github.com/rails/rails/compare/v4.0.6...v4.0.7