Brad Arkin

Sign up for Cape here: cape.co/get-cape?refer…

*New* militarycryptography.xyz : a cleaned up ebook version of Kerckhoffs' "La Cryptographie Militaire" A while back @againsthimself and I read the often-cited seldom-read paper and wanted to share with all! Apropos to classic cryptography, DNSSEC is enabled on the domain. 😂

Prof Ross Anderson, RIP alecmuffett.com/article/109513 #RossAnderson

A reactionary take on memory safety: lcamtuf.substack.com/p/a-reactionar…

🚨Important NCSC news 🚨 We're delighted to welcome our new Chief Technology Officer, @ollieatnowhere, to the NCSC. Ollie will play an instrumental role in shaping and delivering the UK’s national approach to cyber security. ncsc.gov.uk/news/ollie-whi…

@chriseng We started using ‘security champions’ term at adobe ~2009.

We started using the term "Security Champions" with our internal SDLC program around 2013, and I first described the concept in conference talks during late 2014 (SecTor) and early 2015 (AppSec California). I'm trying to locate prior industry usage of the term. Any pointers?

@dguido IIRC I got a 5 digit check in the mail as a result of that case.

TIL there was a class action lawsuit by 64,000 affected employees too. Bonus points if anyone can find it on CourtListener! money.cnn.com/2014/04/21/tec…

If you're going to run an illegal and anti-competitive non-solicitation cartel with your competitors, maybe don't document it in email. 🙄 justice.gov/opa/pr/justice…

This article is wild. “The driver also reportedly knocked over the casket, but Stonebraker said the body didn't fall out.” sfgate.com/bayarea/articl…

@WeldPond Hmmm. That’s interesting. The proxy was running in one of the eu cloud providers. Wouldn’t have expected it to be blocked.

@bradarkin I think it was your VPN endpoint that was blocked. On cellular here in Amsterdam I can load the link just fine.

I wanted to read the new Council for Foreign Relations report about the fragmented Internet (cfr.org/report/confron…). For reasons that are too annoying to get into, I was using a proxy in Amsterdam. This is what got served up. A bit on the nose, eh?

I enjoyed meeting @jadefh and @ke4qqq at the event and was glad to share Cisco’s experience responding to the log4j event with the Committee. A big THANK YOU to all involved for helping pull the info together to make the session such a good use of time. <end>

About my mask. @EricWenger freaked out when I showed up wearing a blue mask with 🍍 on it. He thought it was some subversive reference to the whole @C_C_Krebs #WarOnPineapple twitter.com/c_c_krebs/stat… For the record, I didn’t know anything about that.

I had the opportunity to testify yesterday to the Senate Committee on Homeland Security & Governmental Affairs about log4j. A 🧵 on the experience. My prepared statement: hsgac.senate.gov/download/testi… Video of session: hsgac.senate.gov/hearings/respo…