ross-sec-audio

4 ms·

1.
LMMs should alert you when they begin to suffer from Context-Rot
2 points by ross-sec-audio 4mo ago|0 comments
2.
Concerns with the UK's Digital Identity, VPN Restrictions, & Child Online Safety(ross-sec-audio.github.io)
2 points by ross-sec-audio 8mo ago|1 comments
3.
by ross-sec-audio 8mo ago
Digital identity schemes rely on access to devices, stable documentation, and digital literacy, resources that many vulnerable or low‑income people do not consistently have. Digital ID systems create the infrastructure for mass data collect
4.
Rant about DevSecOPs(ross-sec-audio.github.io)
1 points by ross-sec-audio 4y ago|1 comments
5.
by ross-sec-audio 4y ago
We as an industry, InfoSec have been pushing a tools based approach to DevSecOps, while missing some very important parts of the story.
6.
by ross-sec-audio 4y ago
--- CIS Top 18: --- CIS have a top 18 critical security control checklist, which is pretty incredible. https://www.cisecurity.org/controls/cis-controls-list CIS Top 18 Version 8 works sequentially too, so you implement
7.
by ross-sec-audio 4y ago
This was written by a venture capitalist who makes a tonne of assumptions about the future: "The internet is still early in its evolution: the core internet services will likely be almost entirely rearchitected in the coming decades. T
8.
Vulnerability Management in 4 Stages(ross-sec-audio.github.io)
1 points by ross-sec-audio 4y ago|1 comments
9.
by ross-sec-audio 4y ago
"We've the same issue here that helped to spawn the DevOps movement: Just as development and operations teams previously didn't work well together, InfoSec teams often continue to lack empathy and don’t collaborate well with
10.
by ross-sec-audio 5y ago
InfoSec Risk Management isn't rocket science but unless embedded throughout an organisations governance structure and then used to inform strategic decision making, it's basically shelfware. This blog post is here to help folks av