@lewiada

Chief Security Architect @MotoSolutions. @OWASPChicago Chapter Leader. House Music all Night Long!!

 Chicago, IL
Joined July 2011
  • Tweets1.2K
  • Following189
  • Followers276
50Media
Tonight the vampires and the witches cry. Lasher makes the wind blow, and the thunder sounds like something remembering something. #RIP @AnneRiceAuthor
1
Happy 30th birthday Linux! From @kees_cook - "Linux currently runs on everything from the smartphone we rely on everyday to the International Space Station. To rely on the internet is to rely on Linux." - theregister.com/2021/08/25/l…

Happy birthday, Linux: From a bedroom project to billions of devices in 30 years

Greg Kroah-Hartman talks to El Reg about world domination, what was, and what may be for the kernel

theregister.com
4
7
Assertion: SAST is a waste of resources, my experience is >90% false positives. Money & time is better invested in SCA and DAST that provide high fidelity / actionable findings. @manicode @gmfpanda @xmoxxen @_mwc @sec_tigger @0xfde @vanderaj pls help me begin this conversation
27
17
5
45
@ropnop can't believe I left you off this thread!
To my grandfather who died in WWII, whose headstone is at Arlington National Cemetery but whose body was never recovered. I never knew you but I am on this Earth today because of you, and I am proud to honor you. #MemorialDay2021 🇺🇸
4
Come join the @supplychainsbx now at #RSAC2021 and get a preview of all the great content and activities for today. Apparently, supply chain security is important! path.rsaconference.com/flow/…
7
14
I’m teaching a secure coding masterclass at GOTOpia Chicago on April 19th, this Monday! If you care to join please use discount code jim10 for 10% off. gotochgo.com/2021/masterclas… I hope to see you there! Please RT! :)
10
20
WebAutn level 2 is now a recommendation. That is W3C speak for the second version of WebAuthn is now an approved standard. w3.org/TR/webauthn/
1
3
15
New #SBOM document published today on "Software Identity: Challenges and Guidance." Lays out why this is a hard problem (bigger than just SBOM), and suggests a path for progress. ntia.gov/files/ntia/publicat…
2
11
31
Each of us is older than we've ever been, and younger than we will ever be again. #EnjoyThisMoment
1
Solid write up of SW supply chain challenges and opportunities by @SCMagazine's @DerekDoesTech. I can't comment on any proposals, of course, but great job summarizing #SBOM and the current state of play. scmagazine.com/application-s…
1
3
8
#appsec people - what are your favorite security metrics you use to measure if your program is working / software in your company is actually getting more secure?
1
Some ideas: 1. Is TOTAL number of security defects in production going down over time? 2. Is RATE at which NEW security defects are introduced into apps trending down? 3. Are we catching new security findings EARLIER? 4. What is AVG time to remediate, and is it getting FASTER?
1
“The level of trust we have in our systems has to be directly proportional to the visibility we have, and the level of visibility we need has to match the consequences of the failure of those systems.” - Anne Neuberger @ SANS ICS Summit 2021
Do you know what’s in your software?
This Post is from an account that no longer exists. Learn more
The OWASP Software Component Verification Standard project is conducting the 2021 State of the SBOM Survey. Community participation is valuable as we assess the current and future role that Software Bill of Materials play in the industry. docs.google.com/forms/d/e/1F… #SBOM #OWASP

2021 State of the SBOM Survey

The Software Component Verification Standard (SCVS) is an official project governed by the OWASP Foundation. SCVS is collecting feedback from industry to better understand the role that Software Bill...

docs.google.com
17
3
12
🎉 Azure AD Passwordless is GA!🎉 Are you ready to deploy it? Learn more about our Passwordless capabilities here techcommunity.microsoft.com/….
8
30
2
91
A good friends of mine is looking for a kick ass DevSecOps engineer in the Los Angeles area. Please just reply to this thread and let us know if you're interested! Please RT! Thanks all! :)
1
18
15
Question on how folks are using open source in their builds. Who is pulling directly from open source repos like GitHub vs. who is maintaining a copy of the open source code in their own central repo? #appsec #opensource #cicd #devops
100%Direct from GitHub
0%Locally Maintained Repo
3 votes • Final results
1
1
Our latest report outlines four principles that defense organizations should adopt to become more resilient: embrace failure, improve your speed, always be learning, and manage trade-offs and complexity. @ACScowcroft #ACcyber atlanticcouncil.org/in-depth…

How do you fix a flying computer? Seeking resilience in software-intensive mission systems

Defense organizations confront unanticipated and highly impactful disruptions, but must continue to operate using complex mission systems.

atlanticcouncil.org
5
8
Load more