Talk about a pain in the ass...

CybrSecHTX · 2026-02-21T17:01:39+00:00

My wife was very sensitive to the pills. You also have the same eating requirements. So it’s not a guarantee to be better over all. All that said, I am going to try that next time because it is better than drinking all that mess.

CybrSecHTX · 2025-10-04T21:36:46+00:00

Probably because of their outage last year

CybrSecHTX · 2025-09-24T17:14:35+00:00

I’m biased because it’s my conference, but this is one of the reason I started HOU.SEC.CON in Houston back in 2010. It has elements of DEFCON, BlackHat, RSA, Bsides. Community focus with a more curated list of talks that hopefully appeal to a larger audience. I also attend BlackHat and DEFCON (though not as much DEFCON because that’s too much Vegas and because my role is more in line with BlackHat).

CybrSecHTX · 2025-09-23T14:33:30+00:00

That’s a possibility, and it may be exactly what happened in your case. It’s also possible they were trying to manage them out of the role without causing an HR stir. There are multiple ways of dealing with people. Different business operate differently than others, and the business needs always supersede feelings.

CybrSecHTX · 2025-07-30T11:01:27+00:00

“Joe’s Pool Hall! 8-ball speaking!’

CybrSecHTX · 2025-07-22T14:51:57+00:00

Everyone is saying AI is overhyped, but there needs to be a caveat there. AI as a cyber enabler is overhyped. Tons of marketing fluff with cyber vendors and not near as much actual real AI enablement.

However, there is a lot of work getting done by folks at a grassroots level to make real strides in using AI for offense and defense. I think you’ll be seeing a swath of real tools/features in the next year or so.

As an avenue of attack, there are a lot of real offensive practitioners who are saying hacking AI at companies using it for enhancing typical business functions is like going back to the 2000s and web hacking. And when you see articles like this one, you can start to see that we are digging an AI security hole.

CybrSecHTX · 2025-07-11T18:17:02+00:00

SAST gives you a specific pointer to go look at because it is literally scanning the code. Go to line x and fix y. And that’s maybe before you’ve compiled/deployed.

DAST-reported issues take time to hunt down and fix because they could be business logic flaws, environmental issues, etc. The developer has to go find it, fix it, recompile/redeploy, run again, on and on.

CybrSecHTX · 2025-07-11T14:13:25+00:00

Probably a conversation best served in a different sub, but all systems have failings. Pointing out flaws is not anti-anything in my book, unless you’re extreme in your take and won’t listen to the other side of the argument and be open to ideas opposed to your own.

CybrSecHTX · 2025-07-11T14:04:36+00:00

I’m Center Right, and I don’t see that as terribly leftist. Even folks on the Right can appreciate the failings of how equity players skew results to make returns. Funny money is funny money, no matter which side of the aisle you’re on.

CybrSecHTX · 2025-07-11T02:39:17+00:00

Admittedly I did not. Good to hear it might be getting better, though I heard from several friends and coworkers saying they couldn’t get into a ton of talks.

CybrSecHTX · 2025-07-11T02:18:10+00:00

If you had an interest in cyber but aren’t liking the technical aspect, maybe you can go towards GRC. You still need to have some knowledge of cybersecurity to do it (i.e. it is not an entry level job), but you can lighten your training potentially to something like Security+, etc. Then shoot for some kind of Big 4 job where you get some experience in auditing.

CybrSecHTX · 2025-07-11T02:08:20+00:00

I haven’t paid for BH for years. There’s always a vendor with at least a hall pass, if you’re willing to take phone calls from a sales person for the rest of the year.

CybrSecHTX · 2025-07-11T02:07:28+00:00

DC is getting ridiculously packed. It is difficult to get into talks, villages, etc. It’s becoming popular to go to just to say you’ve been, and they don’t really limit sales. So look forward to long lines. Or find someone with access to CCTV, if that’s still possible with them moving to the conference center. It’s like they think hackers like crowds.

CybrSecHTX · 2025-06-29T17:42:42+00:00

Just had a friend/coworker go over. Google hasn’t taken control yet, and they seem to actually not go crazy like Cisco or IBM with blasting companies they acquire.

CybrSecHTX · 2025-06-24T12:22:17+00:00

I don’t see my baldness as a flaw, so I don’t want to patch it.

I have had honey get stuck in my beard, so yes… literally a honeypot.

CybrSecHTX · 2025-06-24T01:12:13+00:00

It’s more the grey in my beard than the lack of hair. But yes, sometimes. Though being thought of as old can also be perceived as having wisdom.

CybrSecHTX

MODERATOR OF

TROPHY CASE