mastodon 4.8.0-alpha.3+glitchSlightly more professional alt of @Hex@kolektiva.social
I think that most people who work in computer security do not actually understand what #security should do.
Continuing my deep dive into a #cybernetic #ComputerSecurity program, I finally begin to talk about environments, adaptation, the feedback loop between the two, and complexity management.
I also mention Elinor Ostrom. If you work in security and don't know why I'd mention Ostrom, then you may well radically adjust your perspective about what you do after reading this.
Alright security program wonks. I've been crossing Operational Art (Counterinsurgency theory) with #cybernetics (Beer's VSM) and I've created an ungodly abomination that I'm starting to write about: a vision for a VSM informed security program, putting the "cyber" back in #cybersecurity to manage the spiraling complexity that we all recognize.
I'm starting by sharing it here because I think Mastodon tends to give better and more helpful feedback than other platforms. Feedback is welcome and appreciated.
Do any folks here use table top exercises to refine their incident response runbooks? Why, or why not? Is this idea new to you, or something you're familiar with?
I'm trying to get back in to technical writing, so I've written a bit about my experiences with table top exercises, and ideas that I think are worth sharing.
https://infosec.press/security-through-the-looking-glass/table-top-security-exercises
Feedback is welcome, especially editing. I'm still working on refining my process.
Via some rabbit hole I fell into, I ran across @cure53@infosec.exchange. Tons of good stuff in their github. Coming from working at a couple of small consultancies, it's cool to see how much is public.
This is just gold for anyone thinking about starting their own:
https://github.com/cure53/Contracts
Every place I've worked has bootstrapped some documentation system or other. I worked at two companies that built their own complex document
generation systems (meanwhile, I used org-mode). It would be nice to see more groups working like this.
I want a hex editor that uses this: https://en.wikipedia.org/wiki/Bibi-binary