Remember: any github action or user with write access to your repo, effectively has read access to all secrets configured in your repo
Pinned Tweet
Follow
Joseph Katsioloudes
@jkcso
I’m passionate about 2 things: #cybersecurity and #opensource. I combine them at by empowering every developer in the world ship secure software.
linkedin.com/in/jkcso/Joined August 2021
Joseph Katsioloudes’s Tweets
My first day in FuzZinG Business School
2
This Wednesday, we are at in Oslo, Norway! Join to discover Security as Code (SaC) and the latest initiatives we pursue to secure open source.
4
13
Take your test pilot for a spin: GitHub Copilot Labs now comes with a test generator, that creates and refines tests!
GIF
65
755
3,739
I was grinding all year long to have my GitHub profile ready for Christmas 🎄🎄🎄🎄🎄
🤣 great idea
68
224
2,439
🎉 CoPilot for CodeQL queries to find security bugs!
0:58
2K views
2
12
41
very excited that the #CVE program republished my article aiming to debunk common myths surrounding CVE assignment! 🙌 CVEs aren't a bad thing so let's stop treating them like they are! #OSS #infosec
cve.org/Media/News/ite
10
16
Instead of the classic “are you arab?” I’ve just been asked “is saudi arabia playing today?” ⚽️🙈
1
NEW Security Feature:
🎉 PRIVATE VULNERABILITY REPORTING 🎉
0:57
6.6K views
7
42
127
Show this thread
Love this free feature from - a 3-letter alias & randomly generated email addresses. Handy for registering at places with $0 security budget 🔥
2
Let's continue with our next expert speaker - Joseph Katsioloudes. Enjoy his talk "Security as Code: A DevSecOps Approach"! #OSMC
1
6
Don’t let security be like Jenga 😉
1
3
22
Mastering cybersecurity is knowing you'll always be a student of cybersecurity.
22
99
562
Why do conferences be asking for the slide deck weeks in advance and need me to use their theme? I’m gonna make it two days before with my own designs and it’s gonna be bomb don’t worry.
You’re stripping me of my chaotic, creative process.
22
19
205
Show this thread
1
11
I love how the word “malformed” is used instead of “specially crafted” when exploiting a DoS bug. Unless “malformed” is a synthetic word composed from “maliciously” and “formed” 😉
2
4
In every audience there are people who smile back ❤️
1
1
7
Similar to vulnerabilities introduced by technical debt 😉
Quote Tweet
Squirrels fail to recover up to 74% of the nuts that they bury, unintentionally planting new trees in the process. 
2
I've been using GitHub CoPilot for a few days now.
I've been in software nearly 2 decades and I'm trying to remember the last time something felt this magical.
I'm googling a lot less because it just figures out what I want. Super impressed.
If you've been ignoring it, stop.
26
29
248
👀
Quote Tweet
Seen at my kid’s school last night. Two PowerMac G5’s as a bench. I don’t know whether to laugh, cry, steal it, or copy it…
1
5
30 cybersecurity search engines for researchers:
1. Dehashed—View leaked credentials.
2. SecurityTrails—Extensive DNS data.
3. DorkSearch—Really fast Google dorking.
4. ExploitDB—Archive of various exploits.
5. ZoomEye—Gather information about targets.
152
1,606
6,157
Show this thread
The single most expensive phrase in software engineering:
"Maybe we should just build it ourselves instead?"
263
1,214
9,562
Most companies are not Uber this morning as a matter of luck, not skill.
This could easily have been ~90% of organizations.
Don’t point and laugh. It could be you next time, and it might be already.
71
438
2,179
on stage, delivering the 101 on how to use CodeQL to identify vulnerabilities.
CodeQL curious?
Check out the info in the slide below:
2
4
34
Show this thread
Quote Tweet
After a short break we'll be back with “Secure your code like NASA with Security as Code (SaC)” by Joseph Katsioloudes. See you at 10:15 (GMT+2)!
Abstract: sec-t.org/talks/#Joseph-
Live stream: youtu.be/wrOpBQcCvAY sec-t.org/talks/#Joseph-
1
2
Such a pleasure to (finally!) meet in Stockholm 🇸🇪 for . Despite both presenting sessions on #CodeQL, the use cases and content is different (which again shows how versatile CodeQL is), adding great value to anyone attending!
8
MOM!!!!
IM NOT PLAYING FORTNITE!!!!! IM CLOSING GITHUB PRs.
101
1,108
10K
Show this thread
🍿🍿🍿 watching some debate over my accent 🤦🏻♂️
2
2
Deeply in love with Cyclades 🇬🇷💙
1
6
OSINT Challenge: Where in Greece is this? 🇬🇷🇬🇷🇬🇷🇬🇷🇬🇷
1
2
One and Only 🇬🇷🇬🇷🇬🇷🇬🇷🇬🇷
5
