Sitaraman L

Opinions are my own

[Travis McPeak @travismcpeak]

Looking forward to this!

[Sitaraman L @lsitaraman]

@0xTib3rius I have seen folks transition into Product Security, Security Architecture, Vulnerability Management and not a stretch to go into other roles. Trick is to find a company / hiring manager who values what they have done in past and is ready to coach to transition. Happy to chat.

[Sitaraman L @lsitaraman]

@bcantrill @Vivek After reading this I scrolled through 10 years of pictures at Collesisum. Wish they sold and stayed in Oakland.

[Sitaraman L @lsitaraman]

@ImposeCost Two of my favorite activities- coffee roasting and running ( ran yesterday by Carmel beach)

[Sitaraman L @lsitaraman]

@sisterinferior @gamitch0315 For 3 years on the cert expires I get a call from my former colleague asking me to walkthrough the steps not just to regenerate but to get it configured on Identity systems. He know if he let it expire it’s 100s of call next day morning.

[Sitaraman L @lsitaraman]

@craighunter_ @petergyang Came here to say reading this book and implementing them will fix many issues.

[Sitaraman L @lsitaraman]

@HarryStebbings I have been using Brooks for 10 plus years. Recently tried Hoka and it’s pretty good. Not a bad idea to get fitted as well. Every store for last 10 years told me Brooks. I need couple of more race before I can let go of Brooks ( still use them for long runs )

[Sitaraman L @lsitaraman]

@SrinivasR1729 Thank you. My interest in math is what led me to help teams solve Cryptographic algorithm / implementation issues and paved the way for me to continue in Cybersecurity.

[Sitaraman L @lsitaraman]

Finally did my first full marathon today. It was not easy. Hills in SF doesn’t help either. But it was worth it for going through process - training, weekly mileage/ long run, etc. @sfmarathon did an amazing job of organizing. Glad to see @UCSFHospitals at aid station.

[Sitaraman L @lsitaraman]

Well said @nellyporter !! Encryption/ attestation etc are vague terms outside of this room @ConfidentialC2
(Paraphrasing)

[Sitaraman L @lsitaraman]

Packed room for Keynote @ConfidentialC2 and talks so far has been impressive.
Encryption, Key management , Attestation and eventually identity and access control as applications abstract the CC for users and system admins. I am super excited about multi party computation

[Sitaraman L @lsitaraman]

@chrissanders88 This is sad news. So sorry to hear this Chris. Someone recently told me “May their memory be a blessing “. I am at loss of words. Our condolences.

[Sitaraman L @lsitaraman]

Email from library had Link to go to website. Cert is issued to SendGrid. Someone choose default option or forgot to map Cert.
With some redirects. When redirect fails it stops with this error.

[Sitaraman L @lsitaraman]

How is your morning going #infosec #tls !! My daughter came and asked me what this error is. Glad she spotted the error and chrome doesn’t even given an option to bypass. I can’t explain in simple terms Trust / cert hierarchy/ why library website is not working ?

[Sitaraman L @lsitaraman]

@FrankMcG I usually find mapping to a reference architect ( any of tools you mentioned ) and then revisiting every few months helps. That tells where you want to go, everything else (IMHO) is fire drill and risk management. This applies to products and enterprise.

[Sitaraman L @lsitaraman]

@ebailey1367 @FrankMcG Some people don’t believe me when I say this. I can vouch for this 100% . Therapy for me is running these days.

[Sitaraman L @lsitaraman]

@abhaybhargav While I would like this to be the case, Product Security in most orgs and Job Desc focus more on Vulnerability- detection and management and other tools ( hint shift left) but never look at how to secure the products / how products fit into enterprise.

[Sitaraman L @lsitaraman]

@ImposeCost Yup. Glad I am not alone.

[Sitaraman L @lsitaraman]

@csuwildcat With for ever cross chain breaches, I don’t know any of SW BitCoiners paid attention to how Keys are managed no matter where it is stored.