JohnsNotHere @JohnsNotHere@infosec.exchange

Well, it's happening. I've been asked to start presenting to my senior leadership and eventually my board on security concerns within my org. What metrics do you guys share? I have a list (AV stats, phishing stats, training stats, details on pen test results and resolutions, vulnerability assessment results, etc).

What do you share with your leadership when it comes to security? Also looking for recommendations on reading materials or talks on this. ;-)

For those who are in and around Waterloo, Ontario (in Canada), we have our CFP live! Even if you're not, feel free to look, we're just not offering travel assistance in our first year.

Two tracks, one business and one technical. If you're interested in speaking, take a look:

https://www.papercall.io/cybercityconf

Website: https://cybercityconf.io

Tickets will be available soon for those interested in coming without speaking.

#cybercityconf

Me and a few friends are starting up a new Infosec conference in my home base of Waterloo, Ontario. Details are on Twitter but I'm re-posting here for those who may be interested. Come have a look!

----

We are very excited to announce that we will be holding a #cybersecurity and #privacy conference in #waterlooregion @Catalyst137kw on 01.10.2019!!

Call for papers and registration will open up soon.

Follow us for all the details!
#CyberCityConf
#WelcometotheCyberCity

Got a small #SQLi tip for those doing #KringleCon. When using -- to comment, add a space and another -. MySQL-like engines need whitespace and a character following the -- to know its a comment, and most forms trim whitespace from input values. See: http://www.mysqltutorial.org/mysql-comment/

Well, it's happening. I've been asked to start presenting to my senior leadership and eventually my board on security concerns within my org. What metrics do you guys share? I have a list (AV stats, phishing stats, training stats, details on pen test results and resolutions, vulnerability assessment results, etc).

What do you share with your leadership when it comes to security? Also looking for recommendations on reading materials or talks on this. ;-)

By the gods it happened again! Many thanks to @tinker for joining me for another set of stories! Oh, and I finally got to hear how he managed to get that DC that we were all curious about. ;-) #infosec #podcast #tinkerunchained

For those who are in and around Waterloo, Ontario (in Canada), we have our CFP live! Even if you're not, feel free to look, we're just not offering travel assistance in our first year.

Two tracks, one business and one technical. If you're interested in speaking, take a look:

https://www.papercall.io/cybercityconf

Website: https://cybercityconf.io

Tickets will be available soon for those interested in coming without speaking.

#cybercityconf

Me and a few friends are starting up a new Infosec conference in my home base of Waterloo, Ontario. Details are on Twitter but I'm re-posting here for those who may be interested. Come have a look!

----

We are very excited to announce that we will be holding a #cybersecurity and #privacy conference in #waterlooregion @Catalyst137kw on 01.10.2019!!

Call for papers and registration will open up soon.

Follow us for all the details!
#CyberCityConf
#WelcometotheCyberCity

Episode 56 – John Reads: Choose Your Own Red Team Adventure

https://purplesquadsec.com/podcast/episode-56-john-reads-choose-your-own-red-team-adventure/

I do not consider myself a smart man. I *do* consider myself a stubborn man, Sometimes you'll face something hard, something you don't know, something you don't understand.

Don't.
Give.
Up.

Do what you need to in order to overcome it. You'll be a better person for it after.

Purple Squad Security - Episode 55 – Talking Privacy with Matt Beland

https://purplesquadsec.com/podcast/episode-55-talking-privacy-with-matt-beland/

Purple Squad Security Episode 54 – Tribe of Hackers with Marcus J. Carey

https://purplesquadsec.com/podcast/episode-54-tribe-of-hackers-with-marcus-j-carey/

So for those who want the full background, I found the original Register article that sparked this, as well as the research done:

https://www.theregister.co.uk/2019/04/16/spamhaus_port_scans/

and

https://vc.gg/spamhaus-post-draft.txt

I'll leave my personal opinions out of the Fediverse since I rather like it here.