collin @libber

libber.org Joined September 2007

Tweets

348
Followers

2K
Following

536
Likes

8K

collin @libber

a week ago

@haroonmeer @caseyjohnellis We need the “security - eternal truths” post/talk. All of us repeating what Dan Geer and Bruce Schneier said

1 0 2 33 0

View Details

collin @libber

3 weeks ago

The wins of infosec as a field are under discussed, what else goes on this list? libber.org/society_level_…

0 0 1 34 0

View Details

collin @libber

2 months ago

@frgx Totally agree. Have you ever done a big program scale “go delete surface area” stuff? I’ve only done it adhoc typically as the result of a point audit or cluster of vulns

1 0 0 64 0

View Details

collin @libber

2 months ago

Golden opportunity to convert this vulnpocalypse hype into properly funding vuln mgmt (the least exciting, often most lacking part of a security program) This is our chance as an industry!

3 1 7 971 0

View Details

@frgx A flight with no internet + this pleasant nerdsnipe = this long answer: collingreene.com/vuln_mgmt.html I'm organizationally sheltered but in a big company the above is what I think ideal looks like

1 0 3 53 0

View Details

collin @libber

2 months ago

@mhlakhani True. This organization wall is just begging to have vulns chucked over it

0 0 0 102 0

View Details

collin @libber

8 months ago

@tqbf + pass them on to your children

0 0 0 44 0

View Details

collin @libber

9 months ago

@ZackKorman @IceSolst Enjoyable writeup. I feel the same way about the paperwork theater of compliance stuff. I felt slightly better when I accepted that security != compliance and just think of it as a different thing collingreene.com/compliance.html

0 0 2 60 2

View Details

collin @libber

a year ago

An excellent writeup of what makes data "sensitive" and what that means for security and privacy strategicsec.substack.com/p/the-factors-…

0 0 0 141 0

View Details

collin @libber

a year ago

@intoverflow Extremely cool. I've long harbored a dream of a coffee table hacking tales book with the benefit of full knowledge + hindsight of 10 interesting breaches or events or something. If this project is that, I want to read it even more!

0 0 3 49 0

View Details

collin @libber

a year ago

The differences between performing privacy and security work in a big company for my fellow computer security people. collingreene.com/security_and_p… I'm still newer to privacy work so this is my "most likely to be wrong" writeup, feedback welcome

0 0 5 314 2

View Details

collin @libber

2 years ago

Compliance is different from security: collingreene.com/compliance.html

1 1 12 1K 4

View Details

collin @libber

2 years ago

@philvenables Agree with you. A thing I haven't sorted yet, what is the optimal amount of compliance effort to spend, your post made me finish a post about that: collingreene.com/compliance.html

0 0 1 64 0

View Details

collin @libber

2 years ago

@jeffvanderstoep Good writeup. Agree that vuln prevention > discovery > response. Curious about 1. How is "old" vs "new" code designated? 2. How is a specific vuln connected to only old or new code? Or am I misunderstanding 3. No counterfactual here right? ex to find/fix vulns in the old code

0 0 0 101 1

View Details

collin @libber

2 years ago

@_noid_ I’ve perfected coffee for myself. Foamed fairlife milk + coconut milk + maple syrup x 3 shots expresso

1 0 1 135 1

View Details

collin @libber

2 years ago

@dinodaizovi I like this so much. This fundamental uncomfortable truth then has weird side effects 1. Buy more snake oil products, because it can't hurt! 2. Use this compliance framework, to at least CYA 3. Build cool stuff, because its fun and pseudo-justifiable.