Tom Pace

@GergelyOrosz NetRise provenance - netrise.io/products/prove…

What are vendors that offer scanning of PRs or repos to protect against malicious dependencies? I know of Sonar (Advanced Security), Socket .dev, JFrog. What else do you know of or use and what does it do? (At some point, you want more than just pinning an old package version)

@elonmusk Me and Chuck Norris thank you!

Happy birthday!

@allanfriedman Enjoy it brother!

If I am very good in this life, I will return as a large, friendly dog in a southern Italian winery.

@snlyngaas Nice

@Steph3nSims Firmware!

I’ll be in Japan this Friday, and so no Off By One Security stream this week; however, I have some good ones lined up for August. Question, for my next solo stream, what do you want to see me cover? Linux heap exploitation? Windows Internals? New diffs? Firmware? Mitigations?

@allanfriedman That food looks S-Bomb 🙂

Some fun Japanese-inspired tastiness. Broiled fish collars with good soy sauce and lemon; miso-roasted cauliflower and cabbage. Old school dessert of lava cake.

@allanfriedman Even good vendors won’t say it will solve all of our supply chain problems 🙂

Dear cybersecurity journalists: can I suggest a new norm that you only quote someone saying "X isn't a silver bullet" if you can find someone framing X as a panacea solution? For example, no non-vendor has ever argued that #SBOM will solve all our supply chain problems...

@allanfriedman @CISAgov Great seeing you sir!

LAS—>DCA. Feel like I managed to have a productive, fun week without overdoing it (too much). Great to talk about all our @CISAgov work on #SBOM, KEV, and OSS security, and hear a lot of fun ideas. Most importantly: spectacular to see so many wonderful people & make new friends!

@ThePoniExpress No bare bumbler!!?? I’m not mad, I’m disappointed. Both in you and @ChrisMuellerPGH , after all I did for that stadium as the first streaker. Wow.

Poni and Mueller's Top 5 Heinz Field (2001-2021) games/events: -2002 Steelers-Browns playoff game -2008 Steelers-Ravens AFC title game -2021 Big Ben's last game -2016 Pitt-Penn St -2006 Rib Fest (headlined by Grand Funk Railroad) What did we leave off?

@allanfriedman I live in Austin Allan, let me know if there is a meetup or if you’d just like to grab a drink or some bbq!

A gorgeous Sunday morning in DC, and I’m up way too early to head to Austin for the #ossummit . Looking forward to talking strategy and action for securing the open source ecosystem and, of course, #SBOM. See you there?

@PatrickCMiller 🙋‍♂️

Who is going to #RSAC and wants to do a #BEERISAC meeting?

@allanfriedman Lol

An old friend of mine made me a pretty spectacular present… #SBOM

@allanfriedman When is the Allan Friedman cooking YouTube channel starting? Take that “we need an ingredients list” metaphor to the next level!!

Celebrating the return of chametz and the end of Passover with some homemade pasta. Trying the fancy flour.

@mubix @TrackerPayton @MalwareJake @LastWeekTonight Thanks for the shout out! Truly evidence that at least I am living in a simulation.

Seeing @TrackerPayton @MalwareJake and @TommyPastry all on the @LastWeekTonight’s focus on #Ransomware yesterday was surreal … “Hey I know that person on TV!”. I wonder if the YouTube generations will still feel that… youtube.com/watch?v=WqD-AT…

@allanfriedman I’ve got someone who will be reaching out to you

Ok infosec conlife people - how do you make standards & protocol talks fun and interesting? Anyone have some good examples that walk through a spec, but keep it lively?

.@cylanceinc's Tom Pace talks threat hunting and prevention-first security at #Prevent2018

Proud to say I know this handsome devil! Well done on 60minutes tonight @tommypastry! #cybersecurity #ransomware #itsecurity #60minutes #cylance instagram.com/p/BxGhsvJhgdK/…

@oscaron @georgiaweidman Its the SFS scholarship sponsored by NSA COE and CNSS

@georgiaweidman np

Random question, does anyone know the name of the scholarship program I think it is through the DoD where they pay for your degree in cybersecurity and then you go work there after graduation? It may not even still exist as it existed when I was in school.

@HuntOperator @IronNetCyber @SpecterOps @cylanceinc @Cyb3rWard0g @jaredcatkinson A lot of good looking people in this picture

@_et0x @FedEx Whats physics?

Dear @FedEx , Please stop placing my packages directly in front of my outwardly opening screen door, making it difficult to open my door without pushing a heavy package out of the way. Because physics.