Brian in Pittsburgh
@arekfurt
Followers
6K
Following
65K
Statuses
47K
Former attorney, current IT & infosec consultant in the 'Burgh. Happy to talk about password spraying one minute and constitutional law the next. Son of #wvu.
Pittsburgh, PA
Joined June 2015
IMHO, a vital yet underappreciated thing about risk: Almost every serious security, safety, or reliability incident involves a major mismatch between the amounts of unmitigated risk an org: -thought it was accepting -represented to others it was accepting -was actually accepting
3
7
25
RT @SwiftOnSecurity: I'm looking for resources on Windows Firewall that follow-up on Jessica Payne's presentation on it in 2016.
0
3
0
That shouldn't always be your *only* goal, by any means. But it must be your first.
0
0
6
Oof.
0
0
0
The truth is that most judges in the United States (especially at the federal level) most of the time will try to faithfully apply reasonably well-established law even where that results in outcomes that diverge from what they wish those outcomes could be.
0
0
2
You may find this development alarming. But given what UK authorities have been saying in public for a while you should not find it that surprising:
0
0
0
Same. One of the best Windows security talks ever.
We're coming up on 10 years since Jessica Payne gave this talk, and it's still my absolute favorite Windows Firewall presentation I've ever seen If you help others with Windows Firewall, this is probably the best use of someone's time to learn about it
1
1
8
RT @orinthomas: A reminder about the free Active Directory Applied Skill credential from Microsoft that you earn by passing a hands on asse…
0
23
0
@CAShadow33 @martinmatishak It literally explains why legal scholars who were asked think the move violates the Antideficiency Act and links to the provisions of said act.
1
0
0
@CAShadow33 @martinmatishak Among other concerns, there are questions under the Anti-Defincency Act:
1
0
0
RT @MAstronomers: Take thirty seconds and watch Europa and Io serenely sail by, massive Jupiter their background.
0
6K
0
What does that mean for you, if you take the offer and the administration later decides not to honor the promises therein? Again, I can't give you legal advice, but... Well, perhaps you may want to think very, very carefully about that question before considering a "yes."
0
0
4
I (unironically) love the fact that there is a release here for executives/decision-makers/etc. plus two more in-depth documents for those who actually need to be involved in the details of procuring and operating these devices securely. On an absolutely crucial subject.
Failing to secure edge devices is like leaving a door open for malicious actors. Prevent exploitation of critical network components by following the mitigation strategies for edge devices in the reports published today by NSA and others.
0
2
8