I'm headed to Las Vegas for the annual series of events known as 'hacker summer camp': Diana Initiative, Black Hat, Def Con, B-Sides LV, SquadCon, etc. Below is my schedule. Please feel free to come to any of these events to meet up with me, I would love to see you, even if we are…
Category: Uncategorized
My schedule at RSAC and B-Sides
I am headed to the B-Sides San Francisco and RSAC conferences in San Francisco, California, USA, from Saturday April 26th, to Friday May 2nd. I'd love a chance to meet up with you, if you will be there.
Trip Report: OWASP AppSec PNW
June 15 & 16th, 2024, I was in beautiful Vancouver Canada with my colleagues Amanda McCarvill and Brandan Wu for the annual, local, moving conference that spreads the Pacific North West to give a talk, but it turned into so much more: OWASP AppSec PNW! The night before was the speaker's dinner, where I got…
We Hack Purple Community is closing
Hello folks! As you may have heard, We Hack Purple Community is closing at the end of this month. We were bought by Semgrep a year ago, and the time has come to close down. You can join the Semgrep Community, and/or my personal community, by doing any number of (free) things: Joining the Semgrep Academy …
Operations First!
Many years ago, when I was a software developer, a very smart boss said to me: “Tanya, it’s always operations first. Projects after.” At first, I was confused, how will I make any progress on my projects if I’m always doing operations? And, what the HECK is “operations” anyway? Reader, this was an incredibly important…
#WeHackHealth Getting Better Sleep
If you’ve been following the #WeHackHealth hashtag, quite a few people who work in the field of information security have been sharing health tips, encouraging each other to focus on their own health, and showing progress reports on their efforts. Several people I know have been following it closely, participating, and reaping the benefits of…
Preventing Secrets in Code
When I started programming in the 90's the security of software wasn't on everyone's mind like it is now. I took no security classes in my 3-year college computer science program, and it never even came up as a subject. I was taught to save the connection string for each different environment in the comments…
Why can’t I get over log4j?
I haven’t written in my personal blog in a while, and I have good reasons (I moved to a new city, the new place will be a farm, I restarted my international travel, something secret that I can’t announce yet, and also did I mention I was a bit busy?). But I still can’t get…
Parody Songs
For those who are not aware, I used to be a professional musician. I went both under my name (Tanya Janca, folk singer) and was in several different musical groups including Couchwrecked, who wrote the song Hottawa. I just released another parody video and thought I would share it. "Open Source Ain't So Good" Set…
The Difference Between Applications and Infrastructure
Recently someone asked me what the difference was between Applications and Infrastructure. He asked why a Linux operating system wasn't "software" and I said it was but it's a perfect copy... I tend to speak about 'custom software'. We ended up talking for a very long time about it, and I thought a blog post…
