1. X
  2. Patrick Thomas (@[email protected])
Log inSign up
Patrick Thomas (@[email protected])
2,733 posts
Patrick Thomas (@coffeetocode@infosec.exchange) profile banner
user avatar

Patrick Thomas (@[email protected])

@coffeetocode
Software engineer to security consultant, now security partner at @Netflix. Infosec pragmatist.
SF Bay Area
coffeetocode.net
Joined February 2010
885
Following
1,916
Followers
RepliesRepliesMediaMedia

Log in or sign up for X

See what’s happening and join the conversation

Continue with phone
or
Log in with username or email
Terms·Privacy·Cookies·Accessibility·Ads Info·© 2026 X Corp.
  • Pinned
    user avatar
    Patrick Thomas (@[email protected])
    @coffeetocode
    Nov 4, 2016
    "Penetration Test" is a crazy overloaded term. Important to start w/ discussion of goals and tradeoffs between testers and client team.
  • user avatar
    Patrick Thomas (@[email protected])
    @coffeetocode
    Apr 22, 2023
    Thanks for the #BSidesSF Semgrep workshop @enncoded @LewisArdern @onefiftyman . You packed a *ton* into 2 hours. Really appreciate the work that went into it.
  • user avatar
    Patrick Thomas (@[email protected])
    @coffeetocode
    Feb 22, 2023
    What can we say, twitter-driven development sometimes works :) netflix.com/.well-known/se… Ya'll are good folks. Keep it going!
    user avatar
    security.txt (RFC 9116)
    @securitytxt
    Feb 1, 2023
    Exciting news! @Apple joins the list of companies with a security.txt file. Now, we only need @netflix to complete the FAANG list. 🙌
  • user avatar
    Patrick Thomas (@[email protected])
    @coffeetocode
    Nov 21, 2022
    I love formal forecasting exercises (esp those run by @Magoo) because they really force you to slow down consider all the potentially relevant facts, and introspect your biases. FWIW I was 80% here, but I think I was undervaluing the "autopilot" nature of modern CI/CD.
    user avatar
    Ryan McGeehan
    @Magoo
    Nov 21, 2022
    Replying to @Magoo
    That's what myself and 26 others sought to gather over the weekend. The panel we put together forecasted a 72.8% belief it would happen. Here's the spread of forecasts magoo.github.io/risk-measureme…
  • user avatar
    Patrick Thomas (@[email protected])
    @coffeetocode
    Nov 12, 2022
    Of the ~950 people I follow on twitter, some hacky profile scraping says that about 60 of those currently have a Mastodon link. So for me that's basically from ~0% to 15% exodus (or at least strongly hedging) in a *week*.