Sign in

Michele Spagnuolo

@miki.it
920 followers 1.1K following 3 posts

💼: Staff Information Security Engineer at Google. 🛠️: Rosetta Flash, BitIodine. 💛: web security, ⟠, ₿, finance. Data is the most dangerous form of opinion.

PostsRepliesMedia
Michele Spagnuolo @miki.it · 01/03/2025
Excited to present Security Signals with @ddworken.bsky.social and @webappsec.dev, my primary project at Google for the past five years. Thanks, @madwebwork.bsky.social! Paper: research.google/pubs/securit... Slides: speakerdeck.com/mikispag/sec...
research.google
Security Signals: Making Web Security Posture Measurable At Scale
0124
Reposted by Michele Spagnuolo
Roberto Empijei Clapis @empijei.bsky.social · 14/12/2024
One of the best tools I've seen to convert between various encodings. Thanks @miki.it for suggesting it. gchq.github.io/CyberChef/
gchq.github.io
CyberChef
The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
091
Michele Spagnuolo @miki.it · 17/11/2024
Happy to publish the effort of my last five years: Security Signals. research.google/pubs/securit...
research.google
Security Signals: Making Web Security Posture Measurable At Scale
0277
Reposted by Michele Spagnuolo
Lukas Weichselbaum @webappsec.dev · 17/11/2024
I'm in the process of creating a *web security* starter pack and need your help finding more webbies here. Please share and recommend folks passionate about web security in comments below so we can get this community started here 🙂 go.bsky.app/Uf8dZhz
165525
Reposted by Michele Spagnuolo
ChrisO_wiki @chriso-wiki.bsky.social · 16/11/2024
1/ X's algorithm was changed in mid-July 2024 to systematically boost Republican-leaning accounts and Elon Musk's own account following his endorsement of Donald Trump, according to a newly released computational study of engagement from the Queensland University of Technology.⬇️
27970643002
Reposted by Michele Spagnuolo
Lukas Weichselbaum @webappsec.dev · 16/11/2024
XSS vulnerabilities keeping you up at night? 😱 Google's new "Commitment to Secure by Design" whitepaper has answers! Safe Coding and web platform improvements are key. Read more (page 7): static.googleusercontent.com/media/public...
static.googleusercontent.com
082
Reposted by Michele Spagnuolo
Alex Rebert @ayper.bsky.social · 15/11/2024
Excited to share our latest blog post on memory safety! We’re tackling spatial safety in our massing C++ codebase by hardening live++ by default. It adds bounds checks to things like std::vector, preventing a fair bit of out-of-bounds vulnerabilities: security.googleblog.com/2024/11/retr...
security.googleblog.com
Retrofitting Spatial Safety to hundreds of millions of lines of C++
Posted by Alex Rebert and Max Shavrick, Security Foundations, and Kinuko Yasada, Core Developer Attackers regularly exploit spatial mem...
1278