Derick Naef

Principal Product Manager @ Microsoft working to secure IoT and Edge devices. Life long software entrepreneur w/ 2 exits as CEO or CTO.

[Derick Naef @dericknaef]

Oddly satisfying when I can tell GitHub CoPilot what the bug is 🤔 -

[Brad Smith @BradSmi]

With more than 600 million cyberattacks targeting @Microsoft customers every day, strong and effective cybersecurity protection is our top priority. Read the latest Microsoft Digital Defense Report to learn more https://t.co/XKeSsa0fgf

[Derick Naef @dericknaef]

Woohoo - automating Microsoft Defender for IoT Firmware Analysis with Python sample script available! #firmware #iotsecurity

https://t.co/H4SkrmJpSg

[Bill Ackman @BillAckman]

I have learned from experience that the experts, the government, and conventional wisdom are often wrong. ‘Inflation is transitory.” “C19 did not escape from the Wuhan lab.” “@Ukraine will fall in less than a week.” “Its not possible because it hasn’t been done before or because it hasn’t happened before.”

It is often the outlier with no experience in a field that challenges the status quo, that makes the important discovery, that has the unique insight, or creates the transformational innovation.

@elonmusk was not an expert in payments, electric cars or rockets. The ‘experts’ were at Visa, GM and NASA.

When you are part of the establishment, it is hard to challenge the conventional wisdom. You are incentivized not to. And when your economic livelihood can be threatened by an alternative point of view or a new innovation, you are less likely to believe it or its viability.

The greatest opportunities for discovery, innovation, understanding, and profits often exist in the unexplored paths, the unasked and unanswered questions, and in the improbable possibilities.

Our best investments have been: (1) in the stock of a real estate company going bankrupt, (2) from betting that a triple-A rated company was insolvent, and (3) betting that a virus in China would cause a global economic shutdown.

Each of these investments were met with extreme skepticism at the time they were made. In each case, we were the naive ones when we made these investments. We were not bankruptcy investors, experts in bond insurers or credit default swaps, nor did we know anything about viruses or pandemics.

From my experience, knowledge is advanced and insights are gleaned by studying alternative points of view from conventional and unconventional sources of information, and by not discrediting a point of view simply because it comes from someone who is not an accredited member of the relevant establishment, who does not have an advanced degree in the subject at hand, and/or someone whom has been criticized in the media.

In an effort to get to the truth, I try to keep my mind open to alternative possibilities and weigh them against each other. I often find that truth can emerge when two or more articulate and intelligent individuals in an open forum discuss and debate a controversial subject and are required to address unscripted questions from a knowledgeable audience or moderator.

The above is why I added to the pot in attempting to convince @PeterHotez to discuss vaccines with @RobertKennedyJr on @joerogan. I think knowledge will emerge from the discussion that will catalyze further explorations or investigations that will bring us closer to the truth and help us answer questions about vaccine efficacy and safety that remain unsettled for many. And if @PeterHotez is not the best or most knowledgeable advocate for vaccines, then we should find another one.

In getting to the truth, I want to hear from the greatest skeptics and advocates. Both deserve a platform on the path to truth.

And no, I am not an anti-vaxxer.

[Derick Naef @dericknaef]

Very cool, even if it's a long climb to make it work!
https://t.co/722nyt0Dni

[Derick Naef @dericknaef]

😳. From Song of the Cell by Mukherjee

[Derick Naef @dericknaef]

@dwizzzleMSFT Hello

[Derick Naef @dericknaef]

@Austen @sgblank imho

[Microsoft On the Issues @MSFTIssues]

Today, we’re releasing the annual Microsoft Digital Defense Report which covers activity we’ve observed between July 2021 and June 2022 across:
👉Nation-state activity
👉 Cybercrime
👉 Cyber influence operations
👉And more

Here’s what you should know: 🧵

[Derick Naef @dericknaef]

Really appreciate #Microsoft's efforts to bring transparency to pay equity!

https://t.co/t7WEl1ONzt

[IoT Village @IoTvillage]

Thank you to our yearlong sponsor Microsoft for donating Surface Pros for our hands on hackings labs! Come hack with IoT Village, located in the Alliance Ballroom of the Forum!

[Derick Naef @dericknaef]

Feel Good Ukraine Tractor Story Highlights Ag Cyber Risk https://t.co/mL3eTnjNj1 via @securityledger

[Microsoft Threat Intelligence @MsftSecIntel]

The continuous evolution of Trickbot has seen it expand its C2 infrastructure to include IoT devices. The Microsoft Defender for IoT research team has uncovered Trickbot’s method for using MikroTik routers as proxy servers to communicate to its C2. Details:https://t.co/hTP7gMLJtZ

[Derick Naef @dericknaef]

@brysonbort 🤤 https://t.co/yR3nCwdxWS

[Derick Naef @dericknaef]

Online IoT Hacking Village!

https://t.co/xNlDrnaeUY

Get in the stream!!! Talks starting in about 30 min!

[Derick Naef @dericknaef]

These Influencers Aren’t Flesh and Blood, Yet Millions Follow Them https://t.co/h7OvyzgEcS

[Derick Naef @dericknaef]

As reports of cyberattacks rise, hospitals are pressing medical-device makers to disclose proprietary software and step up security commitments https://t.co/HxjmWABGqU via @WSJ

[Derick Naef @dericknaef]

IoT Attacks Escalating with a 217.5% Increase in Volume https://t.co/5zlddymAFf

[stacksmashing @ghidraninja]

Just published a script for running binwalk directly in #Ghidra. The results are bookmarked for easy navigation - useful for finding interesting pieces in firmware blobs and other binaries. https://t.co/sIc2L16HI4

[Derick Naef @dericknaef]

A Moment of Truth for Cyber Insurance https://t.co/Bojt6w3oVm