@googlecloud Distinguished SWE, CloudSec. Former (Acting) Deputy Technical Director for Cyber @CISAgov. Minnesotan. Personal Account. RT=/=endorsement.
Davis, CA
Joined December 2017
- Tweets221
- Following145
- Followers203
- Likes1K
Updated light display this year: new more scalable control PCB design (finally compatible with xlights fseq files), more complex effects, relays to drive the flood lights, and of course more pixels!
⬇️⬇️⬇️
We published a fact sheet on Contec CMS8000 patient monitor firmware vulnerabilities involving an undisclosed backdoor and unauthorized exposure. Orgs using this medical device should follow our guidance: go.dhs.gov/UvF
Grant Dasher retweeted
For those at @AuthenticateCon next week, @IdentityZackand I will be moderating a great public sector track on Tuesday - featuring speakers from @NISTcyber @CISAgov @logindotgov @federalreserve and @migovernment!
Welcome @CooleyDeb !
As part of our support for Int’l standards, we’re excited to welcome Deb Cooley! 🎉 With a distinguished USG career, she’s made many impactful contributions to internet security. Want to join Deb at CISA? Visit cisa.gov/careers for open positions & intern opportunities!
Sad to be missing @Identiverse this year, but looks like a great event!
Attending @Identiverse? Join us LIVE at FIDO's Masterclass: Fundamentals of Passkeys – Mariposa 8 • 1:00 pm – 1:50 pm identiverse.com/idv24/sessio… #passkeys
We took the day off and traveled to get some great shots of the Eclipse. First time for me seeing full totality.
Grant Dasher retweeted
👉Since last summer, we’ve worked closely with @Microsoft, @OMBPress, & @ONCD to advance Security-By-Design. As part of this ongoing work, we’re pleased that expanded logging capabilities will now be available to all federal agencies. Learn more: go.dhs.gov/JPS
Grant Dasher retweeted
Perfection!
The Michigan Wolverines are national champions!
#GoBlue
ALT Michigan 34, Washington 13
Bullish article on passkeys. As we say at CISA, this technology is the gold standard for MFA and can eliminate entire classes of attacks when employed.
Is the death of the password in sight?
2023 was the year that passkeys started to take off, and 2024 will be even bigger.
My new story explains what passkeys are, how they went mainstream this year, and what's ahead for this password killer.
themessenger.com/tech/passwo…
There is more that is needed, especially to make passkey's viable in the enterprise and to solve remaining interoperability issues. But its great to see this technology getting recognition.
Lots of work went into these baselines. We're taking an agile approach so they will evolve as capabilities and threats change. Also make sure to check out our github.com/cisagov/scubagear tool where we just released version 1.0.0 to automate conformance testing for the baselines!
Now available: the finalized Microsoft 365 Secure Configuration Baselines, designed to bolster the security and resilience of organizations’ Microsoft 365 (M365) cloud services. go.dhs.gov/Jox
First year in our new house means it's time for a programmable tree. Custom controller PCB worked like a charm, because...why not. It's definitely not up to @RGB_Lights or Great Christmas Light Fight standards but that's what next year is for, right?
We brewed a magical potion for our trick or treaters this year and it was a big success. Though neighborhood competition is stiff!
It feels like the secret no one wants to say sometimes :)
This Post is from an account that no longer exists. Learn more
Making zucchini bread with an absurdly large zucchini from our neighbors... life in the central valley!
Good example of secure-by-design motivated research. A small amount of up front work built a test framework that can more comprehensively eliminate memory safety issues from packet processing code.
My student Paschal Amusuo will present his first full paper at ASE'23 next week. He studied vulnerabilities in embedded network stacks, checked test suites to see why CVEs escaped, and his EmNetTest tool found 7 new CVEs. A research brief:
davisjam.medium.com/systemat…
