During incident investigation & response, stating speculation or assumption as fact is a critical error that can misdirect and waste valuable resources, giving the adversary an advantage they didn’t earn. When you don’t have data, say so.
It is OK to not know everything.
We are still looking for a winner of the infosec meme contest. Submit your meme no later than tomorrow at noon CST. You must use #BSidesSTL2019 to enter!
Are you headed to @bsidesSTL next week? Do you want to help out charities that help out the community? We are selling old-school BSidesSTL shirts. We have limited sizes available. Bring some cash and support the community. See you all next Saturday!
Trying to snag a last minute @DerbyCon ticket? Indelible is sponsoring one! Comment with your favorite infosec community moment, we'll pick our favorite and give a ticket away! We'll pick the winner sometime after 8pmEST
#derbycon#derbyconticket#ticket#Contest
@AccidentalCISO Firm but caring teachers. Had three of them that come to mind. They challenged and were available to help, but you were expected to perform within your zone. Became my ideal of leadership.
@Microsoft Let's up this error msg to the next level k. "We're unable to connect right now" with no context happening every 60 seconds can be improved. Could be me, but still.
@AccidentalCISO 4/4 Puleo's research showed "once they left the organization to try to do away with the burnout, 10% of them developed cancer." https://t.co/xD8dwfqyk5
@AccidentalCISO 3/ HBR in 2017 reported that one of the causes of #burnout is "Overloading of the most capable" people. #cyber seems to have this issue. Anecdotally, it feels pssble to make a case that the biz will benefit by elongating time vs attempting to overloading and losing capable staff.