Josha 🎲

We met in the 90s on IRC. Mostly computery hacking stuff. Founder BronSec Inc.

[Josha 🎲 @RaiseAllin]

I like to tell ppl the hardest thing to do in security is accept risk, but its also the most valuable and where security ppl can really earn their $ #infosec #thoughtops

[Josha 🎲 @RaiseAllin]

I have a method for breaking all current prime-factor based encryption but I used my novel nano-dark-matter-AI-warp encryption to post the proof paper on the time flux index and the fact that you can't see it proves my encryption is unbreakable. #qed

[Josha 🎲 @RaiseAllin]

@imelven @VillageRedTeam 🔊🔥

[Josha 🎲 @RaiseAllin]

@imelven @VillageRedTeam

[Josha 🎲 @RaiseAllin]

What's a better way to hedge against a stock market correction: buying VIX calls or investing in stock photos of pit traders looking despondent?

[Josha 🎲 @RaiseAllin]

Can we all agree that security questions (especially based on personal details that can often be enumerated via OSINT) are a ridiculous security non-feature that adds friction with little practical risk reduction and they should be eliminated?

[Josha 🎲 @RaiseAllin]

The occurrence of vulnerabilities is INEVITABLE. Defense is HARD. You can be right 22 million times and wrong ONCE and you "lose" in the eyes of users and media. Oh well. We all know the real game is not 0 vulns but increasing attack cost and improving response capabilities.

[Josha 🎲 @RaiseAllin]

@dyn___ Haha dude WOW I mean... Wow. Way to miss the 🎯 @business

[Josha 🎲 @RaiseAllin]

Idea for a new twitter feature: filter any post with a GIF below a certain resolution. I'm so tired the same crappy spittake.gif that's been around for 15 years. Get your GIF game into the modern era, people.

[Josha 🎲 @RaiseAllin]

@VessOnSecurity @WeldPond They are probably running Windows XP.

[Josha 🎲 @RaiseAllin]

@mcmahoniel You know what I think he's right. We shouldn't do any women focused events until men represent AT LEAST 50% of the infosec community.

[Josha 🎲 @RaiseAllin]

The reality of supply chain attacks is that they are totally outside of most threat models... and that is probably the right decision.

[Josha 🎲 @RaiseAllin]

The simplest and least effective security strategy is one built on inflexible proclamations and security platitudes that shut down dialogue, preventing reducing risk in a meaningful way. Always listen, evaluate and be ready to adapt and compromise.

[Josha 🎲 @RaiseAllin]

@sargun Not as many as security compromises that have been made worse by lack of well defined role based access control. Which is almost all of them.

[Josha 🎲 @RaiseAllin]

@mhat Shall I start sending you Portland redfin links now?

[Josha 🎲 @RaiseAllin]

@mhat "Sometimes the only way to win is not to play"

[Josha 🎲 @RaiseAllin]

So how does every feel now about "college degree required" on job listings?

[Josha 🎲 @RaiseAllin]

@mhat I've disabled all social push notifications. Major quality of life improvement.

[Josha 🎲 @RaiseAllin]

@alexstamos The most interesting analysis will be of enforcement actions. This will be the key indicator of the cost/risk of sloppy, underfunded or "interpretive" implementations of GDPR.

[Josha 🎲 @RaiseAllin]

@mhat I'm with you.