Make a deal with BSides Las Vegas
🔒 Paid proposals held safely in escrow — released only when the work's approved.
Known for
3 views
An MCP server becomes dangerous when its capability list grows faster than its controls. A smaller surface often beats another guardrail.
See Saquib Saifee @ Proving Ground during #BSidesLV on Tue Aug 4 @ 17:30.
1 views
Prompt injection isn't an AI safety problem. It's an auth problem. OAuth, JWTs, mTLS encode who is acting. None encode why. Finer scopes can't close that gap.
See Noelle Murata @ [un]prompted during #BSidesLV on Mon Aug 3 @ 14:00.
📊 Post engagement
🔥 Top post: An MCP server becomes dangerous when its capability list grows f · 3 likes + reposts
📊 Activity & format
Recent posts
View on Mastodon ↗
🔥 Top post
An MCP server becomes dangerous when its capability list grows faster than its controls. A smaller surface often beats another guardrail.
See Saquib Saifee @ Proving Ground during #BSidesLV on Tue Aug 4 @ 17:30.
GitHub Security Advisories show where cryptographic failures cluster. Real libraries reveal how small validation mistakes become exploitable flaws.
See Diptendu Kar @ Proving Ground during #BSidesLV on Tue Aug 4 @ 10:00.
Don't forget!
On Monday, [un]prompted will be at BSides Las Vegas with a track dedicated to AI practitioner talks covering development and security. This is a single day event.
Their schedule is online at: https://bsideslv.org/schedule
We can't wait to see everyone in person! We wanted to thank @TrustVanta again for being an All In sponsor 🎰 Don't forget to stop by their table August 3rd–5th! Interested in learning more about their company?
Visit https://www.vanta.com/c…
Your internal hostnames are in the CT logs if you issued public certs for private services. Every major company does it. The data is searchable, public, and has been there for years.
See Kenton McDonough @ PasswordsCon during #BSidesLV on …
Grinding alerts and feeling stuck is a real career phase in SOC work. This talk is for analysts who are hungry to grow but haven't been handed a map, because most shops don't have one.
See Efrain Orsini Jr & Austin Phillips @ Hire Ground d…
Agentic AI can reduce the labor behind vulnerable lab design without removing the need for sound attack-path planning.
See Akshay Rohatgi @ Proving Ground during #BSidesLV on Tue Aug 4 @ 11:00.
In 2014, a small group of hackers walked into DOJ's offices to convince federal prosecutors to stop chilling legitimate security research. Eight years later, it worked.
See Leonard Bailey's Keynote @ Breaking Ground during #BSidesLV on Mon…
GCP's built-in service agent identities are inherently flawed. Two 0-days demonstrate why, and the methodology to find more of them is repeatable by anyone willing to look.
See Moshe Bernstein @ Common Ground during #BSidesLV on Wed Aug 5 …
Prompt injection isn't an AI safety problem. It's an auth problem. OAuth, JWTs, mTLS encode who is acting. None encode why. Finer scopes can't close that gap.
See Noelle Murata @ [un]prompted during #BSidesLV on Mon Aug 3 @ 14:00.
Have you started packing your bags for Vegas? We wanted to thank @semgrep again for being an All In sponsor 🎰 Don't forget to stop by their table August 3rd–5th! Interested in learning more about their company?
Visit https://semgrep.dev/a…
Developers sit closest to the systems that build and ship software. Cloud credentials, CI tokens, SSH keys, and package publishing rights all live on the same laptop. That's why they're targeted first.
See Dwayne McDaniel @ PasswordsCon du…
🐘 Community & instance
💡 Facts
🕵️ Fake follower check
Estimated- Est. 73% real, active audience · Medium fake-follower risk.
- Low engagement (~0.2% of followers engage each post) — a sign of an inflated or inactive audience.
- Established account (3+ years old).
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
About
📸 Gallery
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
More like this
Find more →✉ Message BSides Las Vegas
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with BSides Las Vegas
Booking an event / appearance is a Pro feature. Upgrade to book BSides Las Vegas for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ BSides Las Vegas gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.