← Feed

Posts

• View post

  Friends, if you have a few minutes, think about having some juice and cookies after you donate blood. https://gizmodo.com/theres-a-national-blood-supply-crisis-happening-right-now-2000791289

• View post

  What's that? You want some more in depth analysis of the brand new 2026 International #SBOM Minimum Elements? And you don't mind people who just use LinkedIn for blogging? Well, have I got some quality markdown for you! https://www.linkedin.com/pulse/sbom-minimum-gets-biggerbut-does-get-better-allan-friedman-phd-vyuse

• View post

  And so it begins. See yinz in the heat.

• View post

  So long, Black Hat. Hello, DEF CON! Time for my annual wardrobe change. Some people code-switch. I coat-switch. Hope to see you there!

• View post

  “I'm only making fun of you because it’s something you care about deeply.” — my wife (In case anyone was wondering about the secret to a long and happy marriage)

• View post

  Interesting inclusions on the list of banned items for the DC “grand prix“ event this weekend.

• View post

  Having some fun with late summer flavors: aquavit croutons. (For a course with heirloom tomatoes and homemade smoked trout)

• View post

  This will be fun.

• View post

  I love Americana and country music, including songs that celebrate the simple pleasures of country live: Avett Bros, Delta Rae, etc. But are there any songs that celebrate the joys of city living? The neighborhoods, the local coffee shops, street festivals, great restaurants, cocktails? I don’t mean just NYC: I want celebrations of real history, depth and complex joy of communities, the familiarity of public places, cafes, people making art, etc. I don’t mind the gravel road in the middle of...

• View post

  I never actually learned how to take a picture. That is. I am pretty sure there’s a little more nuance than “point my phone at the pretty scenery or delicious plate.” I’m not about to study photography formally, but I am about to go on vacation, and figure I should try a bit better. Anyone have a few good YouTube videos or a helpful beginner website or book?

• View post

  Gonna be a good night…

• View post

  The SBOM minimum just got bigger. CISA and its international partners have released a substantially expanded Minimum Elements. It adds and clarifies most of the new fields from the 2025 CISA draft, and sets a far stronger expectation for how much of the software an hashtag#SBOM should actually cover. https://www.linkedin.com/pulse/minimum-just-got-bigger-cisa-friends-new-sbom-allan-friedman-phd-6jhle

• View post

  A fun familiar name in today’s Catfishing game. What’s that? You don’t play Catfishing, the daily trivia game where you try to guess the Wikipedia article based on a curated list of the categories? If you are a trivia person, you should probably add this to your daily fun. https://catfishing.net Name blurred to avoid spoilers, although if you follow me you probably know it.

• View post

  An “omniBOM”? I had a blast recently chatting with my old friend @joshbressers@infosec.exchange about the proliferation of BOMs over the past few years, and how we need to think about them. I believe that they will eventually merge into one holistic “omniBOM.” However, we need to learn the lessons from the SBOM movement. Before we get to a completist solution, we’ll need to consider each independently to understand the technical- and business-specific use cases to build core data models that r...

• View post

  Does it even count as properly doing Maryland crabs by the Bay if you don’t feel like you need a shower after?

• View post

  Friends: in light of recent news, may I encourage you to get the Shingles Vaccine if you are eligible (over 50 or have immune system issues) and encourage others in your life to get it. Shingles took me out for two whole months last year and was incredibly painful. I still have intermittent nerve pain in my face that wakes me up in the middle of the night.

• View post

  I'm embarrassed that we still need to say this, but: Trans rights are human rights. I have trans friends, and they are every bit as annoying and wonderful as all my other friends. Many of them are way better hackers. And we should all be annoyed that, in the US, even just flying through a major transit airport could be a real threat to their lives and wellbeing.

• View post

  A very happy birthday to everyone who spent time to pick something other than Jan 1 for their fake birthday! Many happy returns, and I hope you get a free ice cream cone somewhere. (Do they still do that?)

• View post

  Hi Friends! You have one week to submit to The Diana Initiative, an amazing infosec conference aimed at fostering more inclusive information security industry. I understand that they are particularly interested in Red Team talks, so please circulate to those who would be interested. https://sessionize.com/tdi-online-2026/ @DianaInitiative

• View post

  If anyone is making the hard choice not to attend #DistrictCon because of the weather, I will happily buy your badge.

• View post

  @risottobias ha! Glad I wasn’t the only one.

• View post

  A gorgeous 2 mile walk across DC and the National Mall to make it to Day 2 of @DistrictCon and the entertaining keynote by Daniel Ridge. Feels pretty special… “hackers now a-bed Shall think themselves accursed they were not here,”

• View post

  Table next to me at the coffee shop are senior firefighter policy folks talking about CERTs (community emergency response teams) and the language is similar enough to infosec that my ears won't stop firing cyber interrupts into my conscious brain.

• View post

  Impressed by the new ZeroDayClock effort/collective/call highlighting that the window between vuln and exploit now must be assumed as t=0. The call to action is solid, though sadly nothing terribly new. Secure by design, adapt policies and practices. Liability, eridacate classes of vulns. https://zerodayclock.com

• View post

  Tired: the meeting could have been an email. Wired: This email could have been both written and read by an LLM.

• View post

  A nice moment in the McRary Institute Cyber Summit. Army Cyber Advisor Brett Pugh acknowledges that CISA and its hardworking expert staff are carrying on with their critical mission without getting paid. My former teammates are doing damn good work in a very rough time.

• View post

  Heading off to @bsidessf ! (And the other conf) Hope to see you there.

• View post

  “Shadow AI is like regular AI, but with cooler hair and music.”

• View post

  Anyone know of research on how people “discover” new open source that they want to use? Does one search GitHub for strings relevant to what they are looking for? See code used in other projects? Are there other registries?

• View post

  Last day of RSAC conference. Once more into the breach [response and recovery AI tooling sales talks]!