I am looking into attacking/defending applications using genai. Any resources would be helpful and if you have any experience in pentesting such applications, i would love to hear about it!
So far i have come across the owasp top for LLMs: https://owasp.org/www-project-top-10-for-large-language-model-applications/
Can you recommend any other resource for prep?
I have registered for AWS security specialty exam and need to prepare for it.
Taxi Driver
Fantastic writeup. I wonder, how does a threat actor get access to a signing key like this? There was no mention of how the key got leaked in the first place.
Yes. My company has a certification drive where it provides a voucher for free of cost.
AWS SAA was a prerequisite for the security speciality in the certification drive but I cleared my exam after the nomination window and it doesn’t look like I can change it at this point.
I had to clear the AWS SAA before nominations started for the certification drive. Unfortunately I cleared my exam after the nomination window. Otherwise would have opted for Security speciality or SAP.
I had to clear the AWS SAA before nominations started for the certification drive. Unfortunately I cleared my exam after the nomination window. Otherwise would have opted for Security speciality or SAP.
Cleared my AWS SAA cert now working on AZ-104!
The vaults created on your device are stored in clear-text. I have seen discussions about encrypting the vault yourself using cryptomator or veracrypt.
I believe they have E2EE for the remote vaults if you subscribe to Obsidian Sync.
You can use cryptomator to encrypt your vault if you are storing it on your cloud drive but i couldn’t find out an easy way to enable sync that with my android device.
Obsidian looks great. Too bad it doesn’t let you encrypt your vault via the application.
Thanks for sharing!