Rerun earlier this week with respect to the latest PHP bug. Our operations had marked it FP before I got there. That's a team that's always looking to improve. 😍
Remote profile

Tim (Wadhwa-)Brown :donor:
push(@fediverse, "Adversarial Engineer"); # i hack in Perl
Open remote profile ↗Pondering on security assurance nomenclature.
Is an audit a pen test, does an audit include testing, what is a pen test and what the hell is a build review?
All these words have somewhat different meanings depending on where you reside...
Which is fun when you work for a multi-national.
$stollen = 1; # The yearly counter is reset...
Interesting watching a journalist who is honest about a knowledge gap getting kicked for it.
Somewhat telling that we had some folks for us to talk to them about boxes and whilst there was lot of excitement in said boxes, there less interest in the architecture and engineering necessary to ensure they don't to fall over and none at all in ensuring that you understood and had planned for if they did.
meta Show content
Explaining why banks might be more worried about 4 than PHP.
I can see a new question for the various GRC frameworks:
"Do you operate or rely upon any legacy 8-bit CAs?"
s/first/fourth/g