The "social media amplification" is because this is, without doubt, one of the dumbest security flaws we've ever seen in this industry. Frankly, the criticism has been pretty proportionate to the potential impact of this, and I find that statement hugely tone deaf.
LocoMocoSec: Hawaiʻi Security Conference retweeted
Hurricane Lowell remains a powerful category 4 system as track forecast remains close to Hawaii #HNN #HINEWS #HawaiiNews hawaiinewsnow.com/2026/09/03…
LocoMocoSec: Hawaiʻi Security Conference retweeted
Huge thanks to the LocoMocoSec staff. Really excited I got to share my thoughts about scaling vuln discovery. I know the blog has been dead for a bit, I’m going to get the written version shared out when I get home and hopefully breath some new life into it in the near future
LocoMocoSec: Hawaiʻi Security Conference retweeted
The infosec world is aflame in $CRWD fires and I'm just chilling after @LocoMocoSec at Kauai Coffee. Yum. ☕
LocoMocoSec: Hawaiʻi Security Conference retweeted
That was #LocomocoSec 2024!! Thank you to our sponsors, speakers, attendees and all who contributed to making @LocoMocoSec a success this year! We are incredibly grateful to you & look forward to coming together again in the future! 🤙
LocoMocoSec: Hawaiʻi Security Conference retweeted
Check out the most thorough end to end explanation of Google's recipe to eradicate entire classes of web bugs at scale
My @LocoMocoSec keynote slides on "Google's Recipe for Scaling (Web) Security" are online now: speakerdeck.com/lweichselbau…
LocoMocoSec: Hawaiʻi Security Conference retweeted
A future without clickjacking. Bout time. This will break stuff. Webapp devs start thinking about this now.
That's right. @ddworken talked about this in more detail, but the general idea is that any cross-site embedding should be unauthenticated by default and only possible to enable on a per-document/resource basis using developer.mozilla.org/en-US/…
LocoMocoSec: Hawaiʻi Security Conference retweeted
My @LocoMocoSec keynote slides on "Google's Recipe for Scaling (Web) Security" are online now: speakerdeck.com/lweichselbau…
LocoMocoSec: Hawaiʻi Security Conference retweeted
Watching @LocoMocoSec and @ddworken is talking about how to permanently fix ClickJacking in the web platform, a term coined by @jeremiahg and @RSnake in 2008 and first discussed in 2002. Let's fix it all!
slideslive.com/39021592/loco…
LocoMocoSec: Hawaiʻi Security Conference retweeted
Good morning from day 2 of @LocoMocoSec where even the chicken's vibes are immaculate.
LocoMocoSec: Hawaiʻi Security Conference retweeted
🌟 Day 2 of @LocoMocoSec is here and @manicode is rocking the Semgrep vibes!
Don’t miss your chance to come over to our booth and meet the team. We’re excited to see you and talk all things security! 🌺🙌
#appsec #applicationsecurity #Locomocosec
LocoMocoSec: Hawaiʻi Security Conference retweeted
Mālama ka 'aina means "to take care of the land". We learned that, tried a ton of exotic fruits, and had a chocolate experience akin to a Napa Valley wine tasting @LydgateFarms. Highly recommended if you're in town for @LocoMocoSec! Henry even lets you use the machete.
LocoMocoSec: Hawaiʻi Security Conference retweeted
Great talk from @clevernyyyy at @LocoMocoSec
LocoMocoSec: Hawaiʻi Security Conference retweeted
First time we publicly talk about "Security Signals" at @LocoMocoSec
Full paper is available here: goo.gle/security-signals
cc: @mikispag who's leading this effort at Google.
LocoMocoSec: Hawaiʻi Security Conference retweeted
Our team had a blast at Day 1 of @LocoMocoSec! 🎉 Huge thanks to everyone who stopped by and chatted with us! We’re looking forward to one more awesome day—make sure you visit our booth and say hi!
LocoMocoSec: Hawaiʻi Security Conference retweeted
“Small Language Models for Application Security” 👀 very excited for this talk at @LocoMocoSec


































