Dale Peterson

POC Pavilion OT System Reveal x.com/i/broadcasts/1…

The S4x26 Call For Presentations is open. See s4xevents.com/cfp

@ICS_SCADA on the #S4x24 Main Stage introducing the Normalization of Deviance concept with the powerful example of the evolution of safety systems. youtu.be/u1xmyJmGsS0

Q1 ICS Security In Review twitter.com/i/broadcasts/1…

Kence’s Keynote was great. Video will be available this month. Buy the book.

We are at the last open ticket block for #S4x24, 751-1000. Tickets 1001 - 1100 will be limited to asset owners. S4x24 is March 4 - 7 in Miami South Beach. s4xevents.com/ticket-block-7…

@ID_AA_Carmack @daveaitel I'd add dryer and hot water heater. (We don't use heat or AC in upcountry Maui so that plus the sauna are the big draws)

Our off grid project has really driven home how much electricity usage is dominated by heating/cooling/EV charging — everything else, all the TVs, computers, internet, refrigerators, microwaves, power tools, and the well pump just don’t amount to much.

@DarkReading @roblemos Should I focus on getting my Shields Up? Shields Ready? The Cyber Security Performance Goals? The ...

'Shields Ready' Critical Infrastructure Initiative Addresses Inevitable Cyberattack: informatech.co/3uewZso by @roblemos

@CISAgov @CISAJen I had to doublecheck this wasn't from the Onion

#ShieldsReady is a new campaign that highlights how critical infrastructure and organizations can Resolve to be Resilient by knowing their infrastructure and dependencies, assessing their risks, making actionable plans and measuring progress to improve! cisa.gov/shields-ready

The September 13 meeting summary for @CISAgov’s cybersecurity advisory committee includes a blurb about the recommendations from the technical advisory council re: the agency’s work to protect high-risk communities. cisa.gov/sites/default/…

Now that AI can do captchas better than humans, how long will they continue to be around. Years based on the continued practice of forced periodic password changes. Just this week I went through an onerous every 90-day password change procedure for a Fortune 500 client. Even though USG, UKG and others have said this is not a good practice and removed it from standards.

Death to captchas buff.ly/3s4hsKM

@CISAJen Love the custom Uno cards ... until my daughter created a Daddy Draws 10 card.

🃏Me IRL

S4x24 tickets on sale now at universe.com/events/s4x24-t… 1st 100 tickets sold in the first two hours, but we keep the ticket #1 - #100 price until noon EDT on Tuesday, Oct 3 to be fair to all time zones. Ticket also gets you coveted hotel block info.

I think the term "cyber hygiene" is perfectly used here. 4 basic steps that everyone, every company should do. Like washing hands, seat belts. Maybe this will help the ICS security community and others stop using it as a replacement for a long list of security good practice controls.

Grateful to @jdickerson & @CBSNews for the chance to discuss @CISAgov’s cybersecurity PSA campaign, “Secure Our World.” Basic cyber hygiene prevents 98% of attacks—we’re on a mission to make keeping your data safe as simple & easy as brushing your teeth. cbsnews.com/video/how-to-s…

It’s clear that the MITRE Engenuity ATT&CK is a dead testing criteria / evaluation and more about gaming the scores. MITRE ATT&CK however is still an amazing framework for evaluating coverage and effectiveness. Lots of great things there still even if Engenuity is a hot mess.

@ron_fab Are you trying to put CISA out of business?

Just listening to youtube.com/watch?v=-PkdLM… Enumerating every water utility in the US and determining if they have public facing IP addresses...How's your Thursday night going?

@robertgraham Surprised by your “I hate biographies”.

The sorts of reviews about Isaacson's Elon Musk biography seem more about hating musk than reviewing the book, so I thought I'd write my own review. hellscape.substack.com/p/review-of-is…

most of my career has been weathering this reaction tbh. I’ve long agreed with @argvee’s answer that the cybersecurity industry shouldn’t exist, because it needs to be solved in design/arch. I also think the industry will resist Secure by Design/Default for this very reason…

RT @nntaleb: If a chatbot writes a complete essay from a short prompt, the entropy of the essay will be exactly that of the initial prompt,…