Jaded InfoSec Pro

GRC, Pen Testing, SecOPS, Threat Intel Stuff, Audit/Assessment, Incident Response & Digital Forensics - Tweets are mine (or are they? Did you read the EULA?)

[Jaded InfoSec Pro @edwardmccabe]

My 0-day exploits are your employees.

[Jaded InfoSec Pro @edwardmccabe]

@zenrandom So please approve the rule for ANY ANY,
Let the traffic flow with glee!
For if we had a rule for ANY ANY,
Our firewalls would sing in harmony!

[Jaded InfoSec Pro @edwardmccabe]

@zenrandom Oh, I’d love you to grant a rule for ANY ANY,
That is what I’d truly like to see!
Cause if we had a rule for ANY ANY,
Our network could roam wild and free!

[Jaded InfoSec Pro @edwardmccabe]

So, what did we learn today?

1) who tests before applying patches,
2) who has separate test and prod networks,
3) who has current biz continuity plans,
4) who has tested DR capabilities.

As it turns out, not as many as you would expect and hope.

From airlines to hospitals

[Jaded InfoSec Pro @edwardmccabe]

Client: Our operations and applications are HIPAA compliant.
Me: Cool, can we chat with your privacy and compliance officers?
Client: we don't have those, we are all responsible!

[Jaded InfoSec Pro @edwardmccabe]

Just because you say you're HIPAA compliant doesn't mean that you are.

[Jaded InfoSec Pro @edwardmccabe]

@essobi Dollars to Donuts, vulns still won't get patched

[cje @caseyjohnellis]

PSA: every time someone uses 'vulnerability' and 'threat' interchangeably, a puppy gets ransomware.

#science #wordsmeanthings #themoreyouknow

[The Javvad Malik A.I. @J4vv4D]

Haha

[Jaded InfoSec Pro @edwardmccabe]

@essobi That's awesome!

[Kyle 'esSOBi' Stone @essobi]

Father’s Day. lol.

[Kyle 'esSOBi' Stone @essobi]

If you're having nvidia-docker-container issues after an update, nuke /etc/nvidia-container-runtime/config.toml and restart everything. I can't tell you how many hours I chased my ass on that.

[Kyle 'esSOBi' Stone @essobi]

@Bandrel /usr/local/src...

[Kyle 'esSOBi' Stone @essobi]

seen this coming for a while... its rough out there at the bottom.

[Dave Kennedy @HackingDave]

Yikes, flying to HackSpaceCon, flight delayed twice - 4 hours so far. Hoping it isn't cancelled. If it is, I'm driving :P

[Laura Bell Main @lady_nerd]

Be aware of your legal obligations when it comes to ethical AI. These are evolving fast and may impact the systems you are building.

Great talk with many case studies from Rachael Greaves of Castlepoint Systems @qconlondon

[Mick Douglas 🇺🇦🌻 @bettersafetynet]

This is an all too accurate take.

Please believe me, I'm a co-author on an AI.

I didn't fear the AIs. I fear what folks are doing with them.

[The Javvad Malik A.I. @J4vv4D]

Young Guns 2!

[Jaded InfoSec Pro @edwardmccabe]

#infosec #ProTip if you haven't lived through technical debt, it's not fun. It will slow down development, modernization and transformation projects to a standstill; burning out folks as they work to address issues from a decade ago rather than the current goal.

[Accidental CISO @AccidentalCISO]

Is this IPv5?