| https://twitter.com/SteveD3 | |
| GitHub | https://github.com/steved3 |
| Keybase | https://keybase.io/steved3 |
| Website | https://steved3.io/about/ |
| Fedified | https://fedified.com/@SteveD3 |
Things are spinning up. First All Hands call happening tonight. Expect additional details soon, including room blocks, CFP, and more.
Save the dates: August 3rd, 4th, and 5th, 2026
RE: https://infosec.exchange/@SteveD3/114660976520491326
FTR, it was a great show. The whole cast was awesome. The lounge was really cool too. It was themed to look like the Slytherin common room. I wish all shows on Broadway had something like this.
Gregg Kellogg passed away this week. Most of you won’t know him but he was a good guy, very likable, and he worked tirelessly, as do many people, to develop internet/web standards so all of this just works.
These people don’t get a lot of recognition so, I just thought you should know.
RIP Gregg.
I wrote some mid-week words for my newsletter (and now blog!) ~ this week in security ~ on Google today sounding the alarm over a new "widespread" wave of Salesforce data thefts targeting customers of Salesloft Drift.
Excited to share this with premium tier subscribers. ❤️
https://this.weekinsecurity.com/a-new-wave-of-data-thefts-are-targeting-salesforce-instances/
I'm amused. Just finished moving 11k archives (~20GB). Went to do another backup.
rsync -avzP --delete
The script did what it was asked to do... now I get to move all 11k archives a second time b/c of --delete. Lesson? You can't copy and paste your way out of everything.
Got tickets to go see Tom Felton in Harry Potter and the Cursed Child at the Lyric Theatre in November.
Should be a fun little pre-holiday trip.
I've had a bunch of people ask me why I wasn't at #VulnCon, so I wrote a blog post about it
TL;DR - I don't think VulnCon should exist
Follow me for more security hot takes
https://opensourcesecurity.io/2025/04-why-i-didnt-go-to-vulncon/
VulnCon 2025 is over. I didn’t go. A bunch of people have asked me why, and rather than keep my answer to a small group, I thought it would make sense to write something public about it all. The TL;DR is I went to a different conference that I thought was a better use of my time. The conference I went to was Cyphercon and BSides Milwaukee. They are regional conferences in Wisconsin. Good people, great shows, a lot of fun and learning. Yeah, it was technically the week before VulnCon, but I lack the fortitude to do two conferences back to back. Some people can, I tip my hat to those folks. I’m not one of them. I should be clear though, this isn’t the only reason. I also don’t think VulnCon should exist (more on that at the end).
BSides Las Vegas
Brian Sletten
Zack Whittaker
Josh Bressers