The 1, 10, 100 Community framework and what European football clubs can teach us about power law distributed communities To serve the whole community, bias your focus on the few.
How to get the most out of attending a conference I am currently cruising at 32,000 feet within the comfortable cabin of my Canadair CRG-200 jet, en route to San Francisco for BSides SF, RSA, and Purple Cloud Summi [https://www.purplecloudsummit.com/]t. It’s been nearly 2.5 years since these events have happened in person. Needless
HACK Issue 16: The Threats and Security Matrix, Cloudflare shows us bug bounty do's and dont's, and Shoot your shot As I write this, the Kentucky Derby is on TV and the announcer just said they have 150,000 people in attendance, first time since the pandemic that it's been a capacity crowd. So great to see! And tis the season, I just announced yesterday I'll
HACK Issue 15: K8s is hard to value, Twitter will never hire a CISO, and The key to community Happy Easter and Passover weekend! It's a busy week in the Tucker household as we recognize Good Friday, enjoy easter festivities with the kids (egg hunts and candy!) and dinner with the family. Whether you celebrate or not, I pray you have a refreshing weekend! Security links and
HACK Issue 12: Okta breach recap, Ryan Reynolds loves 1Password, and Zelenskyy's leadership Hello dear readers, great to be back in your inbox after a 2-week break. I was able to travel to Tel Aviv for work [https://twitter.com/luketucker/status/1501907034383466503?s=20&t=FxWEeMs69bOzgrTCCYRdZQ] and California for a wedding [https://twitter.com/luketucker/status/1506055697615650820?s=20&t=
HACK Issue 10: QR Codes and Super Bowl Ads, Travel vibes, and Life lessons from STÖK I'm wearing my retro THOTCON t-shirt today, feeling all nostalgic about conferences. On the upside, I am planning the Lightspin event and conference outlook for the year (we'll be at Black Hat and RSA and more!), and planning some international travel for both business and pleasure.
HACK Issue 009: 3,000 day old AWS IAM keys, Moving workloads out of Exadata, and Jonathan Scott's end game Quick digest this week. Had some work travel this week for the first time in a while, which was awesome! Heading to out on vacation tomorrow so no HACK digest next Friday. From the blog Jonathan Scott's end game and my advice for infosec twitter and jonathandata1 [https:
HACK Issue 008: Open season on OpenSea, How not to treat developers, and Axonius' 2021 marketing flops and wins Greetings from cold Boise, Idaho. I have a confession to make: January is one of my least favorite months of the year. The holidays are over, the density of the cold is... deeper. It's like the chill is implanted in my bones on January 2nd and I can&
HACK ISSUE 007: Top 10 web vulns of 2021 voting, gnarliest pentest stories, and Leadership according to Marcus Aurelius Happy weekend everyone! One day late this week, the universe didn't want me sending a newsletter yesterday. Got blocked on computer issues and feeling the effects of my COVID booster shot from Thursday afternoon. But Onward... Security tweets and links There's still time to vote for