Viewing profile — thomasdub

Does anyone know of a list/can name companies that don't charge for SSO, Audit Logs[0], that have a free edition where you don't have to talk to a salesperson to evaluate etc.? [0]…

"An appraised value" could work for companies too! Though, in fairness, for many billionaires the gains are pretty explicit i.e. we know the public stock price or the 409a valuatio…

Co-founder of Tines here. This is exactly why we built Tines - I spent years working in security, and tried nearly a dozen different SOAR/SOAR-like solutions and felt the all were …

Thanks for the feedback! We've implemented a ton of features since then, most notably story history & versioning, annotations for documenntation, better alerting on changes (e.g. n…

Co-Founder of tines here, thanks for all of very valid feedback, there’s loads to think about! I’ll respond to a bunch of the comments individually but the one thing I’d say is try…

It's usually really hard to negotiate a longer post termination exercise window as an individual, as that will have to be written into the options plan (which requires board/invest…

This is quite dangerous unless you know what you’re doing, if you execute the malware then plan to throw away all equipment you’re using to analyze it. For a next-best experience, …

MalwareBazaar allows users to share live samples of indicators and not just hashes/metadata associated with them which threat Intel platforms like AlienVault do. There are several …

I love the lure, and I respect the GitLab team for making it public, but this is a tough read - it’s putting way too much responsibility on the end-user. For example I’m a huge fan…

Most companies will have a firewall on their corp network so new domains, or malicious-categorized websites will usually be blocked which offers additional protection above working…

What’s your use case for this? I scrape a ton of pastebin links and other sources of hashes posted by folks on Twitter about Emotet, trickbot etc. and I’d be happy to point them to…

"Now before you try to tell me "well you should've forwarded the email and been done with it" those guys are going to be pissed as fuck if I pass along every spam link trying to se…

There isn't much evidence that Tether Limited is indeed keeping a reserve of USD for each Tether printed [0]. They are minting hundreds of millions of Tethers and there are a lot o…

Do you think the current security risks are an impediment to it being a perfect solution? I don't want my house deed transferred to someone else just because the provider that mana…

It's still showing for me [0]. I just cancelled my account. [0] http://imgur.com/v150a7w

The report shows far more than signs of intrusion - modules for credential theft, data transmission, persistence mechanisms, keylogging etc. were all discovered. I'd call that host…

What sort of proof are you looking for? If you're looking for firewall logs or hard drives with definitive proof that malware on certain machines was linking back to particular ser…

I appreciate the sentiment that anyone can phish or password guess, but even a cursory glance at infosec reports shows there was an operation targeting the DNC that was far more so…

This sounds very like Redmine [0]. It's ostensibly for project "issues" however it's extremely customizable and all of the above are included in the default config and not much mor…

Curious - what's a disaster about Stripe Atlas? I would have considered going down that route if I was to start a company

Don't get me wrong, I'm not a huge fan, JS is not exactly a model CEO, and they do sell hard. A tough sell, however, isn't illegal or fraudulent. a shakedown is something else thou…

I'd love someone to point to evidence of this beyond pure anecdotes. Yelp clearly allows negative reviews on accounts which advertise with them which can be seen with this Google s…

There is a fantastic Lexicon Valley podcast episode about this [0] which draws on most of the same evidence. It also dicusses whether the word "Dude" my have been popularised from …