Allan Friedman / is on Nostr

#SBOM Champion. Full service technocrat. Now at @Cisagov, formerly NTIA. Lapsed{engineer, academic, author}. Personal Account.

Last Notes

2024-11-13 14:06:26

Very exciting news - Microsoft is now publishing automation-friendly security advisories in CSAF format. CSAF allows for more detail and different groupings that just CVEs, and allows orgs to share advisories on security issues that do not have CVEs.
https://msrc.microsoft.com/blog/2024/11/toward-greater-transparency-publishing-machine-readable-csaf-files/

2024-11-13 14:06:26

2024-07-07 17:33:19

Living the “champagne lounge, steerage seats” lifestyle. Looking forward to a great week in Seoul, talking about supply chain security, OSS, and—of course—#SBOM
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/746/397/656/657/766/original/0e417f352292572e.png

2024-07-07 17:33:19

2024-05-18 01:07:27

The Armenian Food festival at St Mary’s. A good rule of thumb: if you have the opportunity to eat in a church basement, and old ladies are involved, it’s usually worth your time.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/459/410/303/804/827/original/9dc93efb1b40375f.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/459/411/092/346/320/original/22797240f469ef9c.png

2024-05-18 01:07:27

2024-05-01 19:56:29

I will never get tired “they tried rolling their own crypto, and the predictable bad things happened” stories. Right up there with videos of dogs skidding on hardwood floors.

2024-05-01 19:56:29

I will never get tired “they tried rolling their own crypto, and the predictable bad things happened” stories. Right up there with videos of dogs skidding on hardwood floors.