Matt Franz

@jessitron@hachyderm.io yes! It is like a puzzle being completed! Or removing pieces when interpretations are too simplistic or out of date with other works you just read.

@cwebber @darkuncle The vulnerability research and disclosure industrial complex won't fund itself. We've got to sustain the over-satuation of products and services (all now AI-enabled of course) that few can afford and even fewer can implement effectively.

@cwebber Unfortunately, I was mostly NOT jesting although I was in an especially cynical mood when I replied. More and more I think that most organizations and only afford (both budget and operationally) built in tools in their platform (MSFT, AWS) -- also these tools allow you to bypass procurement and sneak them into your existing security spend or better yet into SRE spend. And yeah CSPM are the worst, having been locked into a 3 year Lacework contract picked by a predecessor 💩