Collin Greene·Nov 1, 2017Fixing security bugsThis article covers some ways I’ve gotten security bugs fixed inside a company.A response icon3A response icon3
Collin Greene·Sep 16, 2017Equifax + 3rd party code != securityIt appears the Equifax breach hinged on an unupdated Apache Struts vulnerability. Lots of security people are talking about lots of…
Collin Greene·Jul 26, 2017Some parts of being a great EngineerMuch ink has been spilled in defining, or refuting, the concept of the 10x engineer.
Collin Greene·Jul 12, 2017Feedback loopsI’ve worked in three big areas in my career: building software, securing software and leadership.
Collin Greene·Jun 28, 2017Outcomes > bugsA reasonable mission for an application security team is to find and fix security bugs in a codebase. I held this view at one point and I…
InHackerNoon.combyCollin Greene·May 25, 2017Manager lingo for engineersA while back I changed from an engineer to a manager.
Collin Greene·May 2, 2017Business risk for security engineersThere are these two young fish swimming along and they happen to meet an older fish swimming the other way who nods at them and says…
InUber Privacy & SecuritybyCollin Greene·Jan 31, 2017From the Ground Up: Building Product Security at UberBecause software has inherent vulnerabilities, smart security teams build protections inside and outside their code to help prevent…
Collin Greene·Jan 27, 2017Product security primitivesWorking in software security for a while I’ve recognized a few core ideas that have helped guide the efforts of a product security team. I…
InHackerNoon.combyCollin Greene·Jan 15, 2017Why product security is hardWhen software security flaws can fetch over a million dollars it is useful to examine why building secure software is so difficult.