Scott Behrens

Technical Director of Security Engineering at @Netflix. Previously Appsec builder/breaker. Spend free time writing music and weightlifting

[Scott Behrens @HelloArbit]

Excited to share a blogpost Melodie and I have been working on for a while on the benefit of building Neurodiverse Information Security teams. https://t.co/MuKdQ1pXS7

[Scott Behrens @HelloArbit]

@Jacfial @investvoyager @Ehrls15 still having the issue, just DM'd you

[Scott Behrens @HelloArbit]

@investvoyager Can you please let me withdraw my coins to a hardware wallet? I keep getting limits and "withdraw errors", even though I have already paid for the coins several weeks ago. Also, your support ticket system is auto-closing all help tickets submitted :-( CC: @Ehrls15

[Scott Behrens @HelloArbit]

@AP @yurikageyama Filipinos speak Tagalog, consider updating your article.

[Scott Behrens @HelloArbit]

I wrote some strategies for how to be an ally for people managing ADHD in the workplace: https://t.co/igyHR7q3EQ. Please give it a read and let me know your thoughts!

[Scott Behrens @HelloArbit]

@rmhrisk @Scott_Helme @sleevi_ @manicode @BSidesSF @ianhaken @Burton I encourage you to check out the tool and talk, we believe there was a fair bit of novelty of the value of our demo thanks to CT unique properties which make it less of a 'party trick', but, thank you for starting this discussion!

[Scott Behrens @HelloArbit]

@rmhrisk @Scott_Helme @sleevi_ @manicode @BSidesSF @ianhaken @Burton Using the logs is pretty reliably, give the tool a shot! we have pushed up a number of videos and images and can pull them down (albeit a bit slow) We demo cat storage but nefarious purposes come to mind similar to what we've seen in blockchain graffiti.

[Scott Behrens @HelloArbit]

@rmhrisk @Scott_Helme @sleevi_ @manicode @BSidesSF @ianhaken @Burton Good points, The properties that CT logs give such as append only and non redactable really aid in the useful properties of this storage mechanism.

[Scott Behrens @HelloArbit]

@rmhrisk @Scott_Helme @sleevi_ @manicode @BSidesSF @ianhaken Right, leverage SANs as our storage mechanism ~13k a cert, sharding across multiple certs possible, so far some video files and our slides from the talk you can pull with $> catlog clone https://t.co/JUSife9BAE

[Scott Behrens @HelloArbit]

@rmhrisk @sleevi_ @Scott_Helme @manicode @BSidesSF @ianhaken Any indication on when Icarus will be EOL'd?

[Scott Behrens @HelloArbit]

@sleevi_ @Scott_Helme @rmhrisk @manicode @BSidesSF @ianhaken Cool, we demo data chunking and some mechanisms for large file storage, tool here in the even you missed the link: https://t.co/Bvdfp1ecyZ (nix only since requires base32 cli)

[Scott Behrens @HelloArbit]

@Scott_Helme @sleevi_ @rmhrisk @manicode @BSidesSF @ianhaken The talk was recorded and will be posted!

[Scott Behrens @HelloArbit]

@anthonykasza @BSidesSF next time full cat costume!

[Scott Behrens @HelloArbit]

@Scott_Helme @sleevi_ @rmhrisk @manicode @BSidesSF @ianhaken if you want to try it out, grab our data storage for CT log tool here: https://t.co/Bvdfp0WBHr supports data chunking and other features making CT logs your new favorite way to store data on the internet forever!

[Scott Behrens @HelloArbit]

I can't believe I'm an hour into trying to get a very permissive CSP policy setup and I am still stuck in violation hell. I empathize with all the developers I've ever asked to set this up. Totally different errors and useful debug information in FF/Chrome debugging this as well.

[Clint Gibler @clintgibler]

Stoked to moderate a #DevSecOps panel at @AppSecCali- @frgx Director of Security Engr @Dropbox, @astha_singhal AppSec Engr Manager @netflix, @dugdep Director of ProdSec @datadoghq, John Heasman Deputy CISO @DocuSign, @Divya_Dw Security Engr Manager @Snap https://t.co/alJfd7eEwL

[Scott Behrens @HelloArbit]

What’s good tonight near @AppSecCali?