A blog about AppSec/InfoSec from your friendly AppSec Ghost! đź‘»
Tag: Information Security
Introduction I wrote the original version of this blogpost almost a year ago when I got a new laptop. The post offered a few options although in the end I only used the 3rd option. Also, during 2022, git added support for SSH commit signing and so did GitHub which significantly simplifies the process of … Continue reading Getting multiple GitHub accounts on one Linux/WSLÂ machine – 2023 update
I am delivering training courses on how to build effective processes around application security scanning tools as part of my work for Bounce Security. The course’s official name is “Building a High-Value AppSec Scanning Programme” and it’s unofficial, more fun but less descriptive name is “Tune your Toolbox for Velocity and Value”. This post will serve as a way of getting more information about the course.
BEFORE YOU START READING I created an updated version of this post for 2023 which focuses on the easiest method of setting this up, uses SSH commit signing instead of GPG which also significantly simplifies things and fixes a few errors. So if you are looking for an easier solution then you might want to … Continue reading Getting multiple GitHub accounts on one Linux/WSL machine
Some *completely unofficial* answers to questions about OWASP and the AppSecEU 2018 debacle based purely on publicly available information.
My thoughts on how daily reporting can both enhance and damage the security testing process.
Josh Grossman - Application Security Specialist 