Infosec Reactions

99% of software testing is like "Is it delivering gas to the vehicle? Then unit tests passed!" and security is on the periphery like, "umm, no..."

Running EDR on top of antivirus software...

When you tell Windows 10 to “reboot later” too many times vine.co/v/iHWJli5lzuh

Whenever I hear any vendor talk about how they use Machine Learning.

The things I do for memes.

When that incident response ends up being a false positive...

When that "analyst turned management" type wants to show off their skills to say "I'm still in the game"...

Privilege escalation leads to data theft

Users racing to click on the "first five responses win a free iPad" link in my phishing email...

Management trying to help during an incident response...

"we're cancelling daily standup"

"No, we don't need a full assessment. We know where our vulnerabilities are."

Privilege escalation...

Can't decide if this works better as "lateral movement" or "privilege escalation"

Next time someone asks me what it's like to work in infosec, I'm showing them this...

When the “secure wipe” ends up being rm -rf