16 Followers
86 Following
85 Posts
AppSec CISO
Personal Bloghttps://mattkonda.com

I was thinking about a poem or song I wanted to write and I even got a few verses in. Then I realized it was conceptually nearly identical to a U2 song.

I don't believe in ... x y z
I believe in love.

I'm curious, what % of security leaders come out of AppSec and software engineering backgrounds?
This was an interesting blog post to write about software in IndyCar racing. https://www.jemurai.com/blog/news/learning-from-indycar-racing/
Learning from IndyCar Racing - Jemurai

Several drivers were disqualified from a car race because of illegal software modifications that gave them an unfair advantage. What can we learn?

Jemurai
My thinking about the TikTok ban changed the more I thought about it and the more people I talked to. Highlights here: https://www.jemurai.com/blog/matts-take/is-tiktok-a-national-security-threat/
I was thinking about sharing a post on Fast Company but look at this shit. 2 popups over content and 60% or more is ads.
I find these paid placements to be so sketchy that I put them on paytoplay.biz. I have to ask myself, doesn't anyone actually do these? They must! I guess this is just a segment of the market though .. (gartner!?) https://paytoplay.biz/paid-award/2024/04/08/most-influential-security-leaders-2024.html
Most Influential Security Leaders 2024

I definitely want to be the most influential security leaders in 2024!

Pay To Play
Everything I know about the XZ backdoor

Please note: This is being updated in real-time. The intent is to make sense of lots of simultaneous discoveries

What happens to security in a world where AI generates questionnaires, AI answers questionnaires and AI responds to questionnaires ...

The joys of running a small business. Everyone wants to deliver your 1099 and they all have different ways of doing it with different problems that basically ensure I'm not going to be able to get them all.

- QuickBooks really messed this up
- Airbase
- Tax1099

Between this and HIPAA, we can talk all we want about our amazing AI future but without basic data portability, who cares? Sigh.

I've been thinking a lot about flow and scaling and security and I wrote a post about it. (https://www.jemurai.com/blog/matts-take/scale-flow-and-security?utm_source=infosec.exchange&utm_medium=organic_social&utm_campaign=3300&utm_content=5300)

I would love to hear people's feedback and what is working / not working in distributed heterogeneous teams.

#security #developers #flow

Scale, Flow and Security - Jemurai

How does flow, scale and micro-service architecture apply to implementing security in high functioning organizations?

Jemurai