Rebecca Markwick

I'm seeing a lot of chat re phishing tests on #infosec twitter I promise you I am one of the people to chat to to feel support for no phishing sims (hit me up I LOVE talking) Security Awareness & Culture is my job A 🧵

got laid off in the big @dropbox layoffs today. if anybody is looking for a staff-level engineer who loves mentoring and who is an expert in web security, email security, TLS/PKI, keys and secrets management, and general defense security stuff, please feel free to hit me up.

let's about talk about my favorite part of the Olympics, one of the things that that originally got me into art and graphic design as a child: pictograms. the first I can remember are from Seoul 88. you might recall these.

Some unhelpful wotsit was digging up the road and cut through our fibre. Struggling on crammed into a corner of the house that has H+ and sometimes 4G

At this rate, I am like 95% sure that the only talks at Blackhat 2024 are gonna be purely AI written and delivered by Boston Dynamic robots. Can't wait.

@19Lv85 @Layer8Con Pretty much anything in the behavioural science sphere will help, BJ Fogg is an accessible starting place. Then education/coaching theory - focus on positive reinforcement based training. There's a lot!

@BexMarkwick Hi! I listened to your interview on @Layer8Con . Can you suggest any additional resources on how to do better training or just on human behaviour?

Go listen to why all your phishing programs suck. Yes yours. The ones where you trick your staff into clicking things and then yell at them. The ones where you send phishes to your staff. Those ones. They suck #phishing #infosec

Yes you are doing it badly. I promise

After doing some testing with a customer, I've created this handy flowchart for determining whether you should adopt Security Copilot...

Had such fun on this one! Got asked some great questions too so be sure to check it out!

Does your phishing program suck? Maybe it does. On tomorrow’s new Layer 8 podcast episode, @BexMarkwick will explain how we get them wrong and how to do them better.

[private message on work slack] friend: hey buddy how do i , i can't find it in your team's docs and i feel super dumb me: hey buddy! it doesn't exist. please re-ask this question in our public help channel so whoever is on-call can answer you. [public help channel] friend: hi team, our service needs to because of . we're wondering what the right way to do it is. thanks! me (also the on-call): hello, this is not possible at the moment, but we'll add a ticket for it and prioritize it in our upcoming sprint.

This week, the #Layer8Podcast episode is with @Human_Decoded and talking about @TraceLabs and their search parties. Next week, we have @BexMarkwick to explain why your phishing program probably sucks. podcasters.spotify.com/pod/show/layer…

@Infosec_Taylor How America has people do taxes is always mad to me. Glad they are slowly moving to more accessible methods (even if it does seem weird!)

I know everyone complains everything has an app these days, but I just did my taxes while lying in bed and didn't have to enter a thing because I could take a picture have it auto enter the information. Not as good as the IRS just sending a bill, but pretty close.

Getting into Security because you think it grants you authority is a solution for idiots. It doesn’t. You only have authority a human mind isn’t incentivized to subvert. If you want to make change you have to compel a better solution. There’s no debating. There’s just results.

Thrilled to have had my talk accepted for @PancakesCon! Come along to hear all about semiotics and judging books by their covers Full schedule of amazing talks here: pancakescon.com/2024-conferenc…

@pamelacolloff This is ridiculous. His teacher is misguided — banning words in an attempt to get them to write better? We don’t take tools away from learners, we give them more tools

@samatlounge As of this last weekend yes. As I rage against the world 😂 plus cats

@AlyssaM_InfoSec More pictures on slides please. Less words. More engaging speaking please. Less monotony.

New website is live. It collects the videos of my talks, contact page, my varied thoughts in mini article format, and links to socials. Check it out! Infobex.co.uk