Dylan Ayrey
where else to find them
no profile links on file
what they talk about
all 6 in the filters
where they keep going back
- BSidesSF6 editions2018–2026
on a stage with
all 4 in the filters
who talks about the same things
- Joseph Leon2 talks
- Antonio Sanso3 talks
- Hayden Blauzvern6 talks
- Dwayne McDaniel14 talks
- Adam Englander7 talks
- Mackenzie Jackson17 talks
| title | conference | date |
|---|---|---|
| Follow the data to learn the secret | BSidesSF 2026 | 2026-03-21 |
Scans of HuggingFace (25% so far) with Truffle Hog process millions of files across ~880,000 datasets and flag almost 100,000 live secrets, including API keys… | ||
| Let's Talk About the AI Apocalypse | BSidesSF 2025 | 2025-04-26 |
Argues that a single attacker can assemble a self‑contained, exponentially spreading worm by fine‑tuning a small LLM and bundling existing tooling: an Llama… | ||
| Millions Of Public Certificates Are Reusing Old Private Keys | OWASP Global AppSec San Francisco 2024 | 2024-09-23 |
Analysis of 7 billion certs in Certificate Transparency finds millions reusing private keys, including organizations that reissue the same key after revocation… | ||
| Self-Discovering API Key Permissions and Resources | OWASP Global AppSec San Francisco 2024 | 2024-09-23 |
A concrete method called self-discovery enumerates ownership, permissions and resources for exposed API keys by sending safe, non‑destructive API probes, using… | ||
| The Secret Life of Secrets | BSidesSF 2024 | 2024-05-04 |
A comparison of key designs shows concrete risks and fixes: webhook URLs leak far more because they look like regular links and end up in logs; researchers… | ||
| The GCP Metadata API | BSidesSF 2020 | 2020-02-23 |
GCP’s metadata API returns instance credentials and can be abused despite extra protections; defaults attach powerful service accounts to cloud functions and… | ||
| Offensive Javascript Techniques for Red Teamers | BSidesSF 2019 | 2019-03-03 |
Walks through concrete offensive JavaScript workflows: using BeEF, fetch/WebRTC and prebuilt recon (Certificate Transparency, VirusTotal, PassiveTotal) to… | ||
| Fighting Secrets In Source Code With TruffleHog | BSidesSF 2018 | 2018-04-15 |
Tool hunts secrets in git history using entropy scanning and curated regexes, packaged as truffleHog and extended to npm/PyPI as SantaHog. Scans flagged… | ||
| nothing matches | ||