I'm seeing a lot of chat re phishing tests on #infosec twitter I promise you I am one of the people to chat to to feel support for no phishing sims (hit me up I LOVE talking) Security Awareness & Culture is my job A 🧵

got laid off in the big @dropbox layoffs today. if anybody is looking for a staff-level engineer who loves mentoring and who is an expert in web security, email security, TLS/PKI, keys and secrets management, and general defense security stuff, please feel free to hit me up.

let's about talk about my favorite part of the Olympics, one of the things that that originally got me into art and graphic design as a child: pictograms. the first I can remember are from Seoul 88. you might recall these.

Some unhelpful wotsit was digging up the road and cut through our fibre. Struggling on crammed into a corner of the house that has H and sometimes 4G

At this rate, I am like 95% sure that the only talks at Blackhat 2024 are gonna be purely AI written and delivered by Boston Dynamic robots. Can't wait.

Go listen to why all your phishing programs suck. Yes yours. The ones where you trick your staff into clicking things and then yell at them. The ones where you send phishes to your staff. Those ones. They suck #phishing #infosec

Yes you are doing it badly. I promise

After doing some testing with a customer, I've created this handy flowchart for determining whether you should adopt Security Copilot...

Had such fun on this one! Got asked some great questions too so be sure to check it out!

Does your phishing program suck? Maybe it does. On tomorrow’s new Layer 8 podcast episode, @BexMarkwick will explain how we get them wrong and how to do them better.

[private message on work slack] friend: hey buddy how do i <do thing>, i can't find it in your team's docs and i feel super dumb me: hey buddy! it doesn't exist. please re-ask this question in our public help channel so whoever is on-call can answer you. [public help channel] friend: hi team, our service needs to <do thing> because of <legit reasons>. we're wondering what the right way to do it is. thanks! me (also the on-call): hello, this is not possible at the moment, but we'll add a ticket for it and prioritize it in our upcoming sprint.

This week, the #Layer8Podcast episode is with @Human_Decoded and talking about @TraceLabs and their search parties. Next week, we have @BexMarkwick to explain why your phishing program probably sucks. podcasters.spotify.com/pod/s…

Getting into Security because you think it grants you authority is a solution for idiots. It doesn’t. You only have authority a human mind isn’t incentivized to subvert. If you want to make change you have to compel a better solution. There’s no debating. There’s just results.

Thrilled to have had my talk accepted for @PancakesCon! Come along to hear all about semiotics and judging books by their covers Full schedule of amazing talks here: pancakescon.com/2024-confere…

This is ridiculous. His teacher is misguided — banning words in an attempt to get them to write better? We don’t take tools away from learners, we give them more tools

New website is live. It collects the videos of my talks, contact page, my varied thoughts in mini article format, and links to socials. Check it out! Infobex.co.uk

This was the last straw. Yet another shitty phishing sim. Be better people. I'm officially now on IG and Tiktok to call out shitty ethics and training in security @info_bex vm.tiktok.com/ZGeST4Vf7/

Had an incredible start to the new Layer 8 Podcast season! One episode is out with more to come, every two weeks on Mondays! You'll soon hear from @OSINTtechniques, @31337Magician, @Wondersmith_Rae, @Ghostie_, @Human_Decoded, @BexMarkwick and more! layer8podcast.org

1/11 My good deed for the week. A 🧵 Halfway through my endo list yesterday the DSU nurse came in. “The last patient's arrived with his mother. He’s autistic and says he gets seizures when he is overstimulated.” She handed me his file. “There’s a letter from the neurologist”.

If anyone missed it, my panel at #defcon31 @sec_defcon with @drjessicabarker on Security Culture! Had such a great time & now you can watch it too! #infosec #securityawareness #security #infosec #culture m.youtube.com/watch?v=V5S8MI…

Darth Gator knows great entrance music when he hears it. #AnotherRoyaltyForJohnWilliams