Scott Behrens

Excited to share a blogpost Melodie and I have been working on for a while on the benefit of building Neurodiverse Information Security teams. netflixtechblog.medium.com/embracing-neur…

@Jacfial @investvoyager @Ehrls15 still having the issue, just DM'd you

@investvoyager Can you please let me withdraw my coins to a hardware wallet? I keep getting limits and "withdraw errors", even though I have already paid for the coins several weeks ago. Also, your support ticket system is auto-closing all help tickets submitted :-( CC: @Ehrls15

@AP @yurikageyama Filipinos speak Tagalog, consider updating your article.

Tokyo and surrounding areas brace for a powerful typhoon forecast as the worst in six decades, with streets and trains stations unusually quiet as rain poured over the city. By @yurikageyama. apne.ws/jWlNKmf

I wrote some strategies for how to be an ally for people managing ADHD in the workplace: link.medium.com/Bibs9k8tbY. Please give it a read and let me know your thoughts!

@rmhrisk @Scott_Helme @sleevi_ @manicode @BSidesSF @ianhaken @Burton I encourage you to check out the tool and talk, we believe there was a fair bit of novelty of the value of our demo thanks to CT unique properties which make it less of a 'party trick', but, thank you for starting this discussion!

@HelloArbit @Scott_Helme @sleevi_ @manicode @BSidesSF @ianhaken @Burton I don't deny that if you control a hostname that you can get a publicly trusted cert for that domain and that cert will likely end up in CT, or that you can put binary data in a hostname. Just think that the CT part of this is largely a party trick.

Love me some certificate transparency! So does @BSidesSF

@rmhrisk @Scott_Helme @sleevi_ @manicode @BSidesSF @ianhaken @Burton Using the logs is pretty reliably, give the tool a shot! we have pushed up a number of videos and images and can pull them down (albeit a bit slow) We demo cat storage but nefarious purposes come to mind similar to what we've seen in blockchain graffiti.

@HelloArbit @Scott_Helme @sleevi_ @manicode @BSidesSF @ianhaken @Burton But I think it begs the question of what is the value to the "attacker". The lack of reliability this mechanism would have would make it a poor storage layer and if you created the hostnames you could have a scheme of encoding where there was a start address (hostname).

@rmhrisk @Scott_Helme @sleevi_ @manicode @BSidesSF @ianhaken @Burton Good points, The properties that CT logs give such as append only and non redactable really aid in the useful properties of this storage mechanism.

@HelloArbit @Scott_Helme @sleevi_ @manicode @BSidesSF @ianhaken @burton has done the same thing; I would argue your really using DNS as storage/exfiltration and X.509 and CT is doing what it was designed for :)

@rmhrisk @Scott_Helme @sleevi_ @manicode @BSidesSF @ianhaken Right, leverage SANs as our storage mechanism ~13k a cert, sharding across multiple certs possible, so far some video files and our slides from the talk you can pull with $> catlog clone slides.catlog.pw

@HelloArbit @Scott_Helme @sleevi_ @manicode @BSidesSF @ianhaken Do I understand correctly the scenario here was storing files in dns hostnames then getting certificates for those hosts?

@rmhrisk @sleevi_ @Scott_Helme @manicode @BSidesSF @ianhaken Any indication on when Icarus will be EOL'd?

@HelloArbit @sleevi_ @Scott_Helme @manicode @BSidesSF @ianhaken Can't really shard an existing log; new logs will all be sharded.

@sleevi_ @Scott_Helme @rmhrisk @manicode @BSidesSF @ianhaken Cool, we demo data chunking and some mechanisms for large file storage, tool here in the even you missed the link: github.com/JackOfMostTrad… (nix only since requires base32 cli)

@Scott_Helme @sleevi_ @rmhrisk @manicode @BSidesSF @ianhaken The talk was recorded and will be posted!

@HelloArbit @sleevi_ @rmhrisk @manicode @BSidesSF @ianhaken I figured there would be context missing when looking at pics of slides, do you know if the talks are recorded?

@anthonykasza @BSidesSF next time full cat costume!

@Scott_Helme @sleevi_ @rmhrisk @manicode @BSidesSF @ianhaken if you want to try it out, grab our data storage for CT log tool here: github.com/JackOfMostTrad… supports data chunking and other features making CT logs your new favorite way to store data on the internet forever!

@sleevi_ @rmhrisk @manicode @BSidesSF @HelloArbit @ianhaken * my guess based on the agenda: bsidessf2019.sched.com/event/Jddr/cat…

I can't believe I'm an hour into trying to get a very permissive CSP policy setup and I am still stuck in violation hell. I empathize with all the developers I've ever asked to set this up. Totally different errors and useful debug information in FF/Chrome debugging this as well.

Stoked to moderate a #DevSecOps panel at @AppSecCali- @frgx Director of Security Engr @Dropbox, @astha_singhal AppSec Engr Manager @netflix, @dugdep Director of ProdSec @datadoghq, John Heasman Deputy CISO @DocuSign, @Divya_Dw Security Engr Manager @Snap appseccalifornia2019.sched.com/event/GS4Z/les…

What’s good tonight near @AppSecCali?