Josh Sokol
@joshsokol
Followers
1K
Following
571
Statuses
1K
Founder and CEO of SimpleRisk, Information Security professional, former rockstar, and family man. @[email protected]
Joined August 2009
RT @simpleriskfree: SimpleRisk is proud to successfully complete its #ISO27001 certification, validating its commitment to #datasecurity an…
0
1
0
@shehackspurple @marcusjcarey @matt_tesauro @wirefall @manopaul @MichaelGoughTX Not sure Jason Kent's handle here.
1
0
1
A huge thank you to the amazing @shehackspurple for conducting the @LASCONATX 2024 Intro to Secure Coding Community Training! We are very lucky to have her here in Austin.
1
2
7
I think I need to apologize to @joshuagates on behalf of all of Austin for the guy who tried to proposition him for a night with his wife in the Q&A part of the show last night. It was awkward for all of us, but he handled it like a champ. So much fun. Thank you.
0
0
0
@flipper_zero We are waiting on Flippers to be available to do a Study Group on them for @AustinOWASP. Selfishly, yes, please continue production!
0
0
1
@wimremes OWASP's vision and mission are fine. It is frequently kicking toxic people to the curb. IMHO, the most toxic at this point are the two Board members who started this nonsense. They were elected and have the power to change. This letter is just saber rattling.
0
0
0
@wimremes OWASP is, and always has been, more than the Projects. Sure, there have been some cool ideas that have come out of there, but OWASP's actual mission is outreach and education. The Chapters and Events are far more critical to the mission statement than these projects ever will be.
0
0
0
@wimremes Ome point of clarification here. OWASP has multiple full time staff, in addition to the ED. They also outsource CFO duties to a third party org.
0
0
0
@wimremes @agelastic 100%. An org with $2.1M in revenue is supposed to allocate $5-$10M in funds? On what planet does that make sense? My response is here:
0
1
4
@wimremes @crime_bears When I was on the Board, the concept of individual was thrown out and something like this would have been incredibly frowned upon. Both Glen and Mark have the power to propose changes and vote in favor of them. Instead, they've made a mockery of an org they were voted to protect.
0
0
0
@tedcruz But it's cool for a bakery to deny service to a gay person? Both are private businesses. Rights for me, but not for thee?
0
0
0
RT @simpleriskfree: Curious about how to use the CIS Critical Security Controls in SimpleRisk? Check out our newest blog to learn about the…
0
1
0
100% spot on. GRC helps us to understand our risks and prioritize their mitigations. Red teaming or pen tests are just another way to assess your risks.
I’ll keep saying this until folks start believing me. Most orgs are defending against auditors, regulators, and insurance underwriters. Red teaming doesn’t improve those things. Know what does? GRC. Look at the GRC budget/project log at most orgs. Don’t hate me, it’s true.
1
0
1
RT @securitybrew: I enjoyed #lasconatx so much this year. The pandemic made me more appreciative of @LASCONATX - it’s such a laid-back eve…
0
1
0
Truly grateful for all of the support you've given us over the years. And thanks to all of the Speakers, Sponsors, Volunteers and Attendees who make #LASCON possible.
Many thanks to everyone from #LASCON2022 @LASCONATX for running yet another great event. Had a great time training, speaking, and hanging out with everyone there. Got to see some folks I hadn't seen in far too long. Can't wait for next year!
0
0
0
RT @securitybrew: At #lasconatx @joshsokol and @danielcornell presented #OWASP Top 10 training before conference. Deck here: https://t.…
0
2
0
If you are at #LASCON, I hope you were listening carefully to the talk by @marcusjcarey. He's basically given tips on how to complete like 50% of the badge game. @LASCONATX
2
2
7