I published a deep dive into TOCTOU (Time-Of-Check to Time-Of-Use) attacks, and I'd appreciate it if you'd give it a read :)
Covers manipulation of execution flows to exploit race conditions, symlinks, + other conditional checks:
#InfoSec
#TOCTOU
I am proud to announce I have joined a vulnerability research team, focusing on offensive security and open source software.
I will be assisting with a project contracted by
@DHSgov
and
@CISAgov
.
I want to thank
@MehdiMirakhorli
for making this opportunity possible.
#InfoSec
Today is my last day as an Offensive Security Intern at
@Apple
.
I am deeply grateful for the experience of working in industry while pursuing my degree.
I want to thank everyone at Apple for making my internship a wonderful experience.
#OffensiveSecurity
#InfoSec
#Apple
I'm back @ Apple once again ❤️
I want to thank everyone in Apple Information Security who made this opportunity possible.
I truly love my work at Apple, and I am so excited to see you all again!
#Day1
#Apple
#InfoSec
My first DEFCON experience was awesome. 🤩
Thank you so much,
@Jhaddix
, for sherpa-ing me around; you’re the best mentor I could ever ask for.
Here are some of the highlights!
#DEFCON30
I am proud to announce that I am an Outstanding Undergraduate Scholar, the highest academic distinction at the Rochester Institute of Technology.
The scholars represent the top 1% of RIT's student body; roughly 1 or 2 students from each major receive it annually.
#Cybersecurity
🎉 I am excited to announce I was featured on the
@PhillipWylie
Show to discuss:
- exploit development,
- malicious tooling, and
- open source software!
Thank you for having me on the podcast, Phillip!
#OffensiveSecurity
#InfoSec
#OpenSource
Last week, I concluded my work as a vulnerability researcher, focusing on offensive security and open source software.
I am deeply grateful for the ability to work in industry while pursuing my degree. I want to thank
@MehdiMirakhorli
,
@DHSgov
,
@CISAgov
, and everyone on my team
I graduated Summa Cum Laude from my Bachelors of Science in Computing Security at
@RITtigers
!!!
I want to thank Stephen Jacobs (
@OpenAtRIT
) for the countless hours of mentorship, recommendation letters, and kindness throughout my undergraduate career.🧡
#RIT
#InfoSec
I am excited to announce my comprehensive guide on— NLP, the development of LLMs based on transformer architectures, and how to fine-tune these models for specific tasks—for security engineers!
#InfoSec
#OpenSource
#LLMs
Yesterday, I ran my first mile without stopping to walk!
My mile time is 8:59, and I could not be more proud of myself 🙌
I started my fitness journey in October, and it feels amazing to finally run a full mile.
Next goal, 2 miles!
I'm honored to be selected as one of
@wisporg
's Hacker Summer Camp Scholarship recipients!
Thank you so much for supporting me. 💜
I am so grateful for the opportunity to attend
@defcon
this year.
#WISP
#DEFCON
#InfoSec
I am so happy to be back at school. RITSEC,
@RITtigers
’s
#CyberSecurity
club, had amazing turn out for our first meeting. I met so many new people, and I cannot wait to see what we will accomplish this year.
Amazing job today
@ritsecclub
! 🧡
#hacker
#hacking
My goal for the next two years is to attend as many security conferences as possible.
There are so many cool ones, and I loved all of the conferences I've attended so far.
Even better, I hope I can do remote full-time work in the future to conference hop.
I looked at some "a year ago today" photos, and felt grateful for how much life has improved. I was in such a dark place back then, and my low self-esteem really clouded my judgment. Super cringe to think (or post) about, but honestly, idgaf. I'm happy :)
@vict0ni
@securibee
My gorgeous
@system76
laptop has a singular sticker of Kim Kardashian on the bottom of it.
My old one had some cool stickers (attached).
Blog hit 10k follows 🥳
I am incredibly grateful to reach this milestone. Thank you to everyone who has supported me over the years. I can't wait to see where my blog goes next.
#InfoSec
#OpenSource
I'm excited to announce my first fitness blog post — how I went from 1 mile to a half marathon (13.1 miles) in 4 months!🏃🏻♀️
I learned so much throughout this journey, and I'm excited to share it today.
#HealthOptimization
#Fitness
#Performance
For folks confused by this tweet, few things:
1. Without a license, public code—even small snippets—are not considered “open source” because using the code can open up you or your organization to legal disputes.
The author never said the source code could be used, etc
1/X
I am excited to announce that I was selected to present my
@OpenatRit
research, “Economics and Ethics Behind Successful Free & Open Source Security Projects,” at the
#WiCyS2022
conference in Cleveland, OH. Thank you for this opportunity,
@WiCySorg
!
#FOSS
@lynn_dohm
@RIThonors
If you want to study
#security
in university, I recommend you consider RIT.
@RITSECclub
,
@OpenAtRIT
, and RIT’s Honors Program have given me more opportunities than I could ask for.
Ex:
@RIThonors
touring tech orgs in SanFran is one of the best experiences I’ve had this year.
Last week, I attended the Women in CyberSecurity (
@WiCySorg
) Conference in Denver, Colorado.
I met some of my internet friends in-person—Sara Takhim,
@dawnlight246810
, and Annabelle Klosterman—after two years of chatting with them online!
It was a magical experience 💜
#WiCyS
I'm honored to announce that I am one of four Goldwater Scholarship nominees at
@RITtigers
. 💛
I've pursued research since freshman year, and I'm grateful to know my work has impacted my university and field.
@GoldwaterSC
#OpenSourceSecurity
#Scholarship
Last year, Yin On Chan and I created an intrusion detection system (IDS) under Dr. Leon Reznik, and it's now open source!
The IDS achieves detection accuracy rates of 94.4% (misuse) and 99.0% (anomaly).
#OpenSource
#NeuralNetworks
#InfoSec
@RITtigers
I am proud to announce that I will be an Offensive Security Intern at
#Apple
this summer. I am excited to experience red teaming, build tools, and expand my knowledge of offensive security. I cannot wait to see what this summer unfolds!
#California
💻☀️
It's been a minute since I've posted on X-Twitter, but my blog is still going strong! 😄
Checkout my latest post on data, registers, and mimicking scope in MIPS assembly
#infosec
#assembly
I am so happy! Professor Stephen Jacobs @ RIT (
@OpenatRIT
) is allowing me to do an
#opensource
independent study with him over the summer! 🎉
Hoping to contribute to a
@theopenssf
working group throughout the project, but not sure exactly what’s going on yet. 💜
#security
#OSS
When using
#Bumble
, I recommend disabling location services.
I noticed that I can determine the locations of people I've matched with based on where I drive.
It is accurate enough that (I think) I could narrow it down to the apartment building and that is kinda scary IMO.
Thank you
@ISC2
for awarding me an Undergraduate Women in Security scholarship! 💚
(ISC)2 awards over $130k in scholarships each year, and I am honored that (ISC)2 has supported my education at the
@RITtigers
over the past three years.
#CyberSecurity
#WomenInTech
#OpenSource
I'm elated to announce that I'll be attending
@FunOCaml
in Berlin, Germany on Sept. 16-17th! I am so grateful to
@OCaml_Org
for this opportunity to learn more about functional programming. Hope to see you there 🐫
#OCaml
I'm excited to announce that I was selected for the
@CrowdStrike
NextGen Scholarship. The scholarship was created to support students pursuing careers in cybersecurity and artificial intelligence. Thank you, CrowdStrike, for supporting my education. ❤️
I am super excited to present my
@RIThonors
’ research, “Effectiveness of Threat Mitigation in Layers of the Open Systems Interconnection Model,” at the
#WiCyS2021
conference in Denver, Colorado. Sept 9 @ 11am MDT
Learn more:
@WiCySorg
@lynn_dohm
#RIT
Reminder! ✨ I will be presenting my
@RIThonors
’ research, “Effectiveness of Threat Mitigation in Layers of the Open Systems Interconnection Model,” at the
#WiCyS2021
conference in Denver, Colorado. Sept 9 @ 11am MDT
Learn more:
@WiCySorg
@lynn_dohm
#RIT
@yarden_shafir
As an attendee who is new to the security space, I find intros helpful.
I usually decide to attend talks using the title and description; I don’t know anything about creator.
Intros help me learn abt jobs, orgs, and events; I can connect w them afterwards easier too.
💜 I am so excited to be a Teaching Assistant for the Humanitarian Free & Open Source Software Development class (IGME 582). 🥳
I learned so much from this course; it inspired much of my research, and it influenced my academic trajectory at RIT.
10/10!
@OpenatRit
#opensource
I'm elated to announce that I am an ACE Certified Personal Trainer! 🏋🏻♀️
Around this time last year, I was recovering from sepsis, and I'm so happy to be where I am at now with my health and fitness goals.
@ACEfitness
@ICE_Excellence
Thank you
@OpenSourceOrg
for covering Open
@RIT
!
I am student in the program, and it heavily influenced my academic and career path. I am even TA-ing one of its
#FOSS
classes this semester. 💚✨
#opensource
@OpenatRit
Ayy I'm on
@RITtigers
webpage for its Computing Security major!
Thank you, RIT, for the honor.
If you know anyone who wants to pursue a degree in cybersecurity, tell them about RIT.
I've had a wonderful experience.
I am excited to announce I'll be a guest on
#SecurityHappyHour
!
Catch
@CyberWarriorSt1
and me discussing security education, open source, red teaming, and wherever our rants take us.
LIVE on Friday, 2 May 2023 @ 7 PM ET ⏺
Hope to see you there!
#InfoSec
Today is my last day as an Offensive Security Intern at Apple. I want to thank my team for making my internship a wonderful experience. Off to Black Hat and DEF CON I go! 👩💻
#OffSec
#InfoSec
#Apple
I downloaded the Nextdoor app because I found a lost cat (tldr).
Before the Nextdoor app, I lived normally.
Now, I’m worried about being bitten by a coyote and someone blowing up cars in my neighborhood 🫥
In Aug 2021, I completed a student research project under Dr. Amit Ray at the Rochester Institute of Technology.
These projects are short and they introduce students to a subject area within a short period of time.
#OpenSource
#Malware
#Security
Honored that my university’s chapter,
@WiCySRIT
, was selected for the Student Chapter of the Year Award! 💖
I am so proud to work with all of you, and I hope to see you all next year.
Special thanks to
@apotheosik
, Kayla Hodgson,
@invisibleh00man
, and our wonderful members!
I daily drive
@System76
, and I love it.
After using a MacBook Pro, I wish my System76 laptop could be used on "soft surfaces" without a table.
My laptop just gets too hot.
Do y'all have any laptops I could do this with?
If not, no issue.
System76 is fabulous!
I am proud to announce that
@InfosecEdu
selected me as a 2021 Undergraduate Scholarship recipient. I cannot wait to see where this opportunity takes me. Thank you so much,
#Infosec
, for selecting me for this award. 💫
I honestly don’t know what to put on Twitter.
It’s like I want to join and share, but I also want to be helpful.
Those things conflict for me I guess???
I’ve always thought CSS was easy because I could fix most problems with a quick Google search.
Recently tried to revamp my website and … wow, CSS is hard.
Super honored to receive a shmooze-a-student scholarship! Cant wait to meet and learn from some awesome OSS security peeps
@shmoocon
🖤🤍💕
#shmoocon
#WashingtonDC
Goals for 2022:
🔬 Publish
#infosec
#FOSS
research
🌟 200 volunteer hours; 50 hour increase from 2021
🌊 Be more patient - hardest one
📈 Implement and learn personal branding strategies (thx
@CynthiaLIVE
📚)
🍳 Cook one meal per day
🌺 Make more
#security
buddies
Last but not least, the amazing and kind people I met, but didn’t get photos with 😂, like
@nnwakelam
,
@0ldMate_
, and
@eckert_madeline
😊
Although we didn’t meet in-person,
@TerryODaniel
, I appreciate your kindness and support when I lost my luggage 🤣💛✨
RITSEC is looking for student photographers on March 4-6th to capture the national Information
#Security
Talent Search (ISTS) Competition. 💻✨
Pay: $25/hr
ISTS17 Vid:
Photos from another
@ritsecclub
comp:
Education has made an enormous impact on my life.
Although I have struggled with academics most of my life, I dreamed of academic success, like becoming valedictorian and graduating Summa Cum Laude since childhood.
I am glad to see some of my childhood aspirations come true. 🧡
Hey everyone!
I am deleting my Revue account.
If you are interested in subscribing to my blog, you can learn more below.
#OffensiveSecurity
#OpenSource
I learned so much and I am grateful that experienced security folks are taking time to chat with security newbies.
It’s greatly appreciated and makes everyone feel welcome in an otherwise overwhelming and intimidating space. 😊
#ShmooCon
#security
I am proud to announce that I am the 2021 Betty Stevens-Frecknall National Scholarship recipient. I want to thank the Foundation for IT Education for selecting me for this award. It will help me pursue a degree at a school I love, and I am grateful for this opportunity. 💛