@jerrybell @dreiann @FlyingLawyer @AlainODea @chuck @rysiek @superruserr @jeff Last week's panel on Emerging Threat went great. Thanks so much for your input on the matter. It really jump started my research. You could clearly tell who prepared in advance. Thanks! 😀

**Andy Thompson** @rainmaker · May 14, 2018, 23:54

**Andy Thompson** @rainmaker · May 14, 2018, 23:54

I was hoping to be sitting by the riverwalk sipping a margarita by now but it looks like my flight will be delayed past midnight. ##SanAntonio

**Andy Thompson** @rainmaker · May 14, 2018, 20:26

**Andy Thompson** @rainmaker · May 14, 2018, 20:26

https://infosec.exchange/media/EGtqF3FOlFJ-PEuuG0I

**Andy Thompson** · May 14, 2018, 17:53

Andy Thompson boosted

**Nicholas Albright** @nma · May 14, 2018, 17:53

Wow, just checked. My last PGP/GPG/SMIME encrypted email was sent in 2016 (I had to actually pull OFFLINE archives.) My last encrypted (non-email) message was sent 4 minutes ago....To my wife. Times have changed. :)

**Andy Thompson** @rainmaker · May 14, 2018, 00:35

**Andy Thompson** @rainmaker · May 14, 2018, 00:35

Columbus has a lot of bridges.

**Andy Thompson** @rainmaker · May 10, 2018, 23:18

**Andy Thompson** @rainmaker · May 10, 2018, 23:18

Anyone going to #BSides Denver tomorrow?

**Andy Thompson** @rainmaker · May 10, 2018, 13:33

**Andy Thompson** @rainmaker · May 10, 2018, 13:33

Anyone in Omaha?
Im at the Omaha Tech Summit today.

**Andy Thompson** @rainmaker · May 05, 2018, 13:47

**Andy Thompson** @rainmaker · May 05, 2018, 13:47

**Andy Thompson** @rainmaker · May 05, 2018, 13:37

**Andy Thompson** @rainmaker · May 05, 2018, 13:37

I thought the @Derbycon signup was at 7am CST...not 12pm CST.
Whoops!
Better I made this error than the other way around! :)

**Andy Thompson** · Apr 26, 2018, 18:21

Andy Thompson boosted

**FlyingLawyer** @FlyingLawyer · Apr 26, 2018, 18:21

I know this is #infosec exchange (not #privacy exchange), but this will be interesting to watch...especially once the #GDPR hammer drops in a month. They seem to have cherry-picked a few provisions from GDPR without going full omnibus privacy law. It strikes me that there might be some challenging technical issues with disclosing every bit of data you pick up with a cookie on someone else's site, e.g. how sure do you need to be of the identity? https://slate.com/technology/2018/04/the-new-bill-to-regulate-facebook-and-googles-data-might-actually-do-the-trick.html

**Andy Thompson** · May 04, 2018, 00:08

Andy Thompson boosted

**K-y** @iamtheky · May 04, 2018, 00:08

@jerry @rainmaker 3 is legit problems, even for ICS. The controleng watering hole is buried in the Ukraine reports, and everything public about that is worth reading. When you look at what controleng does you could write FUD articles for days.

**Andy Thompson** · May 03, 2018, 22:56

Andy Thompson boosted

**Alain O'Dea🇨🇦** @AlainODea · May 03, 2018, 22:56

@rainmaker I think compromised Open Source dependencies (libraries, packages, etc.) will go from interesting infosec research to common attack vector. I think build system APTs will become more common and be a major source of this problem.

**Andy Thompson** · May 03, 2018, 22:20

Andy Thompson boosted

**Tinker** @tinker · May 03, 2018, 22:20

@rainmaker - Companies that hoard data. Those that focus on backups instead of data TTLs.

**Andy Thompson** · May 03, 2018, 21:59

Andy Thompson boosted

**K-y** @iamtheky · May 03, 2018, 21:59

@rainmaker Vendors, and not just the ones that make little bullshit noise machines. Entire markets like Cyber Insurance have the enterprise shifting resources away from monitoring and remediation processes in favor of fallout shelters.

**Andy Thompson** · May 03, 2018, 21:54

Andy Thompson boosted

**Jerry Bell** @jerry · May 03, 2018, 21:54

@rainmaker 1) worms and chained, automated exploits (ala nonpetya), 2) hardware vulnerabilities, 3) software supply chain

Older