SwiftOnSecurity: Difference between revisions

Content deleted Content added
add MVP category
Atlassian: more accurate description of security vulnerability
Line 1:
'''SwiftOnSecurity''' is a [[Pseudonym|pseudonymous]] [[computer security]] expert and [[influencer]] on [[Twitter]] who pretends to be [[Taylor Swift]].<ref>{{Cite news|last=Conger|first=Kate|url=https://www.nytimes.com/2019/09/05/business/parisa-tabriz-google-work-diary.html|title=The Work Diary of Parisa Tabriz, Google’s ‘Security Princess’|date=2019-09-05|work=[[The New York Times]]|access-date=2020-02-23|url-status=live|language=en-US|issn=0362-4331}}</ref><ref>{{Cite web|url=https://www.zdnet.com/article/when-security-meets-sarcasm-infosec-taylor-swift-cybersecurity/|title=When security meets sarcasm: Taylor Swift brings infosec to the masses|last=Whittaker|first=Zack|date=|website=[[ZDNet]]|language=en|url-status=live|archive-url=|archive-date=|access-date=2020-02-23}}</ref><ref>{{Cite news|last=Zimmerman|first=Jess|url=https://www.theguardian.com/commentisfree/2015/jun/18/parody-twitter-accounts-more-freedom|title=Parody Twitter accounts have more freedom than you and I ever will {{!}} Jess Zimmerman|date=2015-06-18|work=[[The Guardian]]|access-date=2020-02-23|url-status=live|language=en-GB|issn=0261-3077}}</ref> As of February 2020, they have over 300.000 followers.<ref>{{Cite web|url=https://twitter.com/swiftonsecurity|title=SwiftOnSecurity (@SwiftOnSecurity) {{!}} Twitter|last=|first=|date=|website=[[Twitter]]|language=en|url-status=live|archive-url=|archive-date=|access-date=2020-02-23}}</ref> The name was chosen due to Taylor Swift’s caution to digital security.<ref>{{Cite news|last=Hern|first=Alex|url=https://www.theguardian.com/music/shortcuts/2019/jan/29/digital-security-taylor-swift-facetime-privacy-bug-breaches|title=How Taylor Swift became a cybersecurity icon|date=2019-01-29|work=The Guardian|access-date=2020-02-23|language=en-GB|issn=0261-3077}}</ref> The account has been cited in news articles about computer security.<ref>{{Cite web|url=http://social.techcrunch.com/2019/06/02/password-expiration-is-dead-long-live-your-passwords/|title=Password expiration is dead, long live your passwords|last=|first=|date=|website=[[TechCrunch]]|language=en-US|url-status=live|archive-url=|archive-date=|access-date=2020-02-23}}</ref><ref>{{Cite web|url=https://threatpost.com/google-busy-removing-more-malicious-chrome-extensions-from-web-store/128435/|title=Google Busy Removing More Malicious Chrome Extensions from Web Store|website=threatpost.com|language=en|access-date=2020-02-23}}</ref> They are a [[Microsoft Most Valuable Professional|Microsoft MVP]] and works as an [[Endpoint security|endpoint monitoring]] lead for a [[Fortune 500]] company.<ref>{{Cite web|url=http://decentsecurity.com/about|title=About this site|website=Decent Security|language=en-US|access-date=2020-02-23}}</ref> Their blog contains general computer security advice and also specifically for [[Microsoft Windows|Windows]] and [[phishing]].<ref>{{Cite web|url=http://decentsecurity.com/|title=Decent Security|website=Decent Security|language=en-US|access-date=2020-02-23}}</ref>
== Atlassian ==
In December 2019, SwiftOnSecurity tweeted about an issue in [[Atlassian]] software, regardingthat embedded the usage[[private key]] of a [[Self-signedDomain certificatename|self-signed certificates___domain]]. This turned out to be a [[Vulnerability (computing)|security vulnerability]] and was assigned [[Common Vulnerabilities and Exposures|CVE]]-2019-15006.<ref>{{Cite web|url=https://www.theregister.co.uk/2019/12/05/atlassian_zero_day_bug/|title=Atlassian scrambles to fix zero-day security hole accidentally disclosed on Twitter|last=Thomas|first=Claburn|date=|website=[[The Register]]|language=en|url-status=live|archive-url=|archive-date=|access-date=2020-02-23}}</ref>
 
== References ==