Matt Franz 🥥🌴 / is on Nostr

Dad, Husband, and recovering SecOps Director. Formerly of many Cyber companies you’ve heard of. A decade in SaaS. Zero delusions of ever becoming a CISO. USAR Military Intelligence Analyst & Middle School teacher before I got into Tech & InfoSec in the late 90s.

Blog: https://blog.mdfranz.com
Github: https://github.com/mdfranz
BlueSky: https://bsky.app/profile/mdfranz.bsky.social
AWS Social: https://awscommunity.social/@mdfranz

Last Notes

2024-06-15 17:32:23

- reply

And I thought it was Docker. 😏 🐳

2024-06-15 17:27:06

NARRATOR
The OS doesn't matter as much as it did and the OS vendors have to justify their existence.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/621/807/435/883/158/original/f8f9568b23529ed5.png

2024-05-17 20:58:28

And they say Crypto doesn’t pay
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/458/432/819/319/356/original/278557433926a4ed.jpeg

2024-05-09 03:22:52

I guess I was deluding myself into thinking I was some sort of extrovert. I can be when I need but only in short bursts.
I'm totally exhausted this week after being around (and interacting with) so many true extroverts (sales folk, cough cough)
Hope to be heads down in Infra the rest of the week and look at JSON instead of hearing people talk and talking to them to regain some energy.

2024-04-20 17:53:11

I thought I saw "Complainer Security" instead of "Container Security" on some stupid LinkedIn infographic.

2024-04-20 17:51:00

When will this stupid phase of tech stop? Maybe AI can help here?
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/304/813/387/618/423/original/0fd9739f4704f459.png

2024-04-17 17:08:44

- reply

definitely. I find the term engineer highly contested and contextual to specific-sized companies, industries, and maybe even regions.
Sometimes it means AppSec. Sometimes it means non SOC/GRC and someone that can kinda code. Others are true software engineers that have specific domain experience in IAM, Encyption, etc. Sometimes it means security tools developer and sometimes it means someone that can select and integrate commercial or open source security tools to hand over to a SOC. 😅

2024-04-17 11:47:09

- reply

if it provided value that is great. Learning is learning, but I find it amusing that the definitions of security engineer are all over the map, especially from the software thought lords but also stuff like this https://kickstartseceng.com/

2024-04-17 00:58:46

- reply

I thought it was weak, TBH, but what do I know.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/283/845/985/486/733/original/317791ae47bc97c4.jpg

2024-04-16 16:33:03

Who knows what Security Engineering means these days 🤷
(but I find it bizarre that security through obscurity was so prominent in this blog)
https://newsletter.pragmaticengineer.com/p/security-engineering

2024-04-12 00:13:54

Fallout is kinda watchable.