#bsidessf — Public Fediverse posts

Who's missing #BSidesSF & #RSAC 2026? 💙 Quick runZero recap:

✅ Making memories: #BSidesSF social sponsor & special Yeti badge!
✅ 2 RSA talks (available on RSAC website).
✅ Tongacon!
✅ Hosted book signings w/Caroline Wong & Joseph Menn.
✅ Debuted the runZero Day livestream!

Ready for all the highlights? Read the full recap: https://www.runzero.com/blog/rsac-bsidessf-2026/

Who's missing #BSidesSF & #RSAC 2026? 💙 Quick runZero recap:

✅ Making memories: #BSidesSF social sponsor & special Yeti badge!
✅ 2 RSA talks (available on RSAC website).
✅ Tongacon!
✅ Hosted book signings w/Caroline Wong & Joseph Menn.
✅ Debuted the runZero Day livestream!

Ready for all the highlights? Read the full recap: https://www.runzero.com/blog/rsac-bsidessf-2026/

That’s a wrap on #BSidesSF 2026: The musical! 🎭

We danced, we sang, and we enjoyed connecting with the insightful and highly skilled people in the security community.

Thanks for another great conference BSidesSF, and see you next year!

That’s a wrap on #BSidesSF 2026: The musical! 🎭

We danced, we sang, and we enjoyed connecting with the insightful and highly skilled people in the security community.

Thanks for another great conference BSidesSF, and see you next year!

#BSidesSF 2026
Your AI Agent Has Production Access: Now What?
from Jack, from Anthropic

#BSidesSF 2026
Your AI Agent Has Production Access: Now What?
from Jack, from Anthropic

#BSidesSF 2026

Hunting Malicious IDE Extensions: Building Detection at Scale Across Developer Workstations

Vinod Tiwari, Story Protocol

#BSidesSF 2026

Hunting Malicious IDE Extensions: Building Detection at Scale Across Developer Workstations

Vinod Tiwari, Story Protocol

#BSidesSF 2026
A blueprint for building a generic authorization service for your organization
Ashwin Sidhalinganahalli, Roblox
and
Fletcher Ramee, Roblox

#BSidesSF 2026
A blueprint for building a generic authorization service for your organization
Ashwin Sidhalinganahalli, Roblox
and
Fletcher Ramee, Roblox

#BSidesSF 2026
A Worm in the Apple: Wormable Zero-Click RCE in AirPlay Impacts Billions of Apple and IoT Devices
Avi Lumelsky
and
Uri Katz

#BSidesSF 2026
A Worm in the Apple: Wormable Zero-Click RCE in AirPlay Impacts Billions of Apple and IoT Devices
Avi Lumelsky
and
Uri Katz

#BSidesSF 2026
How We Red-Teamed Our Own AI Agent: Lessons from Operation Pale Fire
Josiah Peedikayil, Block

#BSidesSF 2026
How We Red-Teamed Our Own AI Agent: Lessons from Operation Pale Fire
Josiah Peedikayil, Block

#BSidesSF 2026
The Great Credential Caper: How to Perform and then Defend Against the (Nearly Impossible) to Defend

From
Christo Roberts
and
Dan Hollinger

#BSidesSF 2026
The Great Credential Caper: How to Perform and then Defend Against the (Nearly Impossible) to Defend

From
Christo Roberts
and
Dan Hollinger

#BSidesSF 2026
Against the Tyranny of Optimization: On the Stability of Automated Republics
Katie Moussouris

#BSidesSF 2026
Against the Tyranny of Optimization: On the Stability of Automated Republics
Katie Moussouris

If you missed the keynote at #bsidessf then you missed @k8em0 actually singing part of her talk!

If you missed the keynote at #bsidessf then you missed @k8em0 actually singing part of her talk!

Ready for a little downtime today at #BSidesSF 2026? Escape to the runZero sponsored Lounge (outside) and the Bar & Chill Out space (inside) from 9 AM-5 PM PT.

Stop by, say hello, get some swag, and take a selfie with Zeti!

👉 Don’t forget, two complimentary drink tickets were provided at registration!

Ready for a little downtime today at #BSidesSF 2026? Escape to the runZero sponsored Lounge (outside) and the Bar & Chill Out space (inside) from 9 AM-5 PM PT.

Stop by, say hello, get some swag, and take a selfie with Zeti!

👉 Don’t forget, two complimentary drink tickets were provided at registration!

I will be speaking on Sunday at BSides on "Power Dynamics in Security Leadership: a legato leitmotif lullaby on leading lightly and luminously"
Sunday 4:25pm, AMC Theatre 12
https://sched.co/2E1io
#BSidesSF

I will be speaking on Sunday at BSides on "Power Dynamics in Security Leadership: a legato leitmotif lullaby on leading lightly and luminously"
Sunday 4:25pm, AMC Theatre 12
https://sched.co/2E1io
#BSidesSF

I'm on call at work and I made the choice to skip BSides and I am REGRETTING it.

#BSidesSF #NotInAttendance

I'm on call at work and I made the choice to skip BSides and I am REGRETTING it.

#BSidesSF #NotInAttendance

#BSidesSF 2026
Breaking Tokens: Modern Attacks on OAuth, OIDC, and JWT Auth Flows
Bhaumik Shah, CEO, SecurifyAI

#BSidesSF 2026
Breaking Tokens: Modern Attacks on OAuth, OIDC, and JWT Auth Flows
Bhaumik Shah, CEO, SecurifyAI

Finally at @bsidessf 🎉
I'm giving a talk tomorrow at noon ✌🏻
https://bsidessf2026.sched.com/event/2E1hG/building-an-open-source-security-project-with-1m+-installations-nulb?iframe=yes&w=100%&sidebar=yes&bg=no
#bsidessf

Finally at @bsidessf 🎉
I'm giving a talk tomorrow at noon ✌🏻
https://bsidessf2026.sched.com/event/2E1hG/building-an-open-source-security-project-with-1m+-installations-nulb?iframe=yes&w=100%&sidebar=yes&bg=no
#bsidessf

#BSidesSF 2026
When the supply chain hits a sour note
Kennedy Toomey, Datadog

#BSidesSF 2026
When the supply chain hits a sour note
Kennedy Toomey, Datadog

#BSidesSF 2026
The Room Where It Happens (Identity Compromise Edition): Behind the scenes of Okta attack campaigns
Julie Agnes Sparks, Datadog

#BSidesSF 2026
The Room Where It Happens (Identity Compromise Edition): Behind the scenes of Okta attack campaigns
Julie Agnes Sparks, Datadog

Blog post about my #bsidessf talk on using SSH certificates for git signing: https://codon.org.uk/~mjg59/blog/p/ssh-certificates-and-git-signing/

Blog post about my #bsidessf talk on using SSH certificates for git signing: https://codon.org.uk/~mjg59/blog/p/ssh-certificates-and-git-signing/

#BSidesSF 2026

Not My Vibe: When AI Coding Agents Go Off the Rails 🤖

Aonan Guan
and
Zhengyu Liu

#BSidesSF 2026

Not My Vibe: When AI Coding Agents Go Off the Rails 🤖

Aonan Guan
and
Zhengyu Liu

#BSidesSF 2026

Your Threat Model Is Lying to You: Why Modeling the Design Isn’t Enough in 2026

Farshad Abasi, Eureka DevSecOps | Forward Security

#BSidesSF 2026

Your Threat Model Is Lying to You: Why Modeling the Design Isn’t Enough in 2026

Farshad Abasi, Eureka DevSecOps | Forward Security

I'm at #bsidessf and a little later this afternoon (3:50) I'll be in theatre 9 giving a talk on git signatures and why you should use SSH certificates

I'm at #bsidessf and a little later this afternoon (3:50) I'll be in theatre 9 giving a talk on git signatures and why you should use SSH certificates

#BSidesSF 2026 panel I have been looking forward to for a while:

State of (Absolute) AppSec

Seth Law, Principal Consultant, Redpoint Security
Ken Johnson, CTO & Co-Founder, DryRun Security
Kevin McDermott, Head of Security, Superhuman
Astha Singhal, Director of Security, Netflix
Clint Gibler, CEO, tl;dr sec

#BSidesSF 2026 panel I have been looking forward to for a while:

State of (Absolute) AppSec

Seth Law, Principal Consultant, Redpoint Security
Ken Johnson, CTO & Co-Founder, DryRun Security
Kevin McDermott, Head of Security, Superhuman
Astha Singhal, Director of Security, Netflix
Clint Gibler, CEO, tl;dr sec

#BSidesSF 2026 opening keynote:
Let's Do the Timewarp Again! A Look Back to Move Forward

from Anna Westelius from Netflix

#BSidesSF 2026 opening keynote:
Let's Do the Timewarp Again! A Look Back to Move Forward

from Anna Westelius from Netflix

Nice to see an old school no-photo policy at #bsidessf. Reminds me of #shmoocon. Yes, in our hyper surveillance culture such a policy might be pointless but it’s a nice thought.

Nice to see an old school no-photo policy at #bsidessf. Reminds me of #shmoocon. Yes, in our hyper surveillance culture such a policy might be pointless but it’s a nice thought.

Super excited that #BSidesSF 2026 is here!!!

Opening remarks

Super excited that #BSidesSF 2026 is here!!!

Opening remarks