archen

.@rmogull and I are back at @BlackHatEvents this year teaching Live Fire Cloud Incident Response! Can’t wait to lead everyone through some hands on real life scenarios! Hope to see you there! #live-fire-cloud-incident-response-25819" target="_blank" rel="nofollow noopener">blackhat.com/us-22/training…

I wrote a smart card token driver for MacOS to interface with identities backed by Secure Enclave github.com/mwielgoszewski…

🛑 STOP 🛑 you've reached the doomscrolling checkpoint. this is your reminder to take a break from doomscrolling

@xek Smartwool is my go-to. They last forever, are warm, and comfy. I'm giving Darn Tough a try as well. I'll attest to their comfiness and warmth, but have only owned them for a year and can't attest to their durability/longevity compared to the Smartwool pairs that I've had for 5+

@CryptoGangsta Flask

Any suggestions for minimal Python frameworks to have a local server for testing purposes? It's not just serving files so the vanilla HTTP server does not work. I need to specify paths, responses and content-types. There are so many and I have no idea which one is better

@mark_vieira That's totally it, and I would definitely be responding if they were sent.

Googles messaging ecosystem is an absolute disaster. Google Voice, Hangouts, Meet, Duo, Messages. Plus add in Fi integration and there's no knowing where your messages go. For all I know my text messages are just being piped to /dev/null.

Prepare yourself for @CryptoGangsta's @defcon talk, "localghost: Escaping the Browser Sandbox with #0days." You can find his 1pm PDT #appsec talk here youtu.be/Cgl51ZcACLg. #ASV #DefConSafeMode

2020 is a good year to cover your face. Are you in a position to help distribute masks to people who are self-organizing for change in the streets? Signal will send you versatile face coverings, free of charge: signal.org/blog/encrypt-y…

in an attempt to disperse crowds, #DavidMcAtee, a louisville bbq chef known for serving cops free meals, was shot and killed by the police last night. he was unarmed. not only were the officers’ bodycams off, but they also left his body on the street for 12 hours. say his name.

At the risk of expressing an unpopular opinion, phishing exercises will you you what you already know: some employees will fall for it. It's more useful to use these exercises to learn about new vectors (e.g. OAuth phishing) than shame employees. theregister.co.uk/2020/05/21/git…

And on the third day, the curve rose again...

Can't wait to join @rmogull @BlackHatEvents this year! Humbled to be included. Looking forward to meeting everyone and doing some really fun things in this training!

Don't forget to submit to the fwd:cloudsec CFP! fwdcloudsec.org You can also join #fwdcloudsec2020 in the Cloud Security Forum slack for questions, or DM here or email.

One of our eng managers at HashiCorp @ptyng wrote a Unifi Terraform provider on his own free time over the holidays and published an amazing blog post on managing his home networking gear as code. As a @ubnt customer myself, this is very compelling. thenewstack.io/how-to-manage-…

I’m hiring! If you or someone you know is interested in joining an extremely talented group of passionate individuals, please let me know! hashicorp.com/jobs/2065925

Now it’s easy to self-host “Attacking and Defending Kubernetes Clusters” on GKE! Check it out: securekubernetes.com

Had a great time presenting at #aws #reInvent2019 about an approach to anomaly detection that we have been using at #Netflix with my friend (an ex-colleague) @__muscles. The talk is now available on YouTube: youtube.com/watch?v=kWJoiZ…

1/ Seeing academics and practitioners I know fighting on Twitter, and all I can say is this: there are plenty of academics with practical experience, and plenty of practitioners who understand research. And still we have a lot to teach each other.