Pretty great to see #SBOM as a feature in projects like this. Nice work from the Homebrew team!

Welp… it’s officially I’ll-get-to-that-after-RSA-o’clock!

Had a great first day at the IAITAM International Assn of IT Asset Managers. Tons for the security community to learn, esp some of the u settling ground truths. Tomorrow, we talk about…. #SBOM

Glorious quote: “SB in SBOM does not stand for silver bullet” Allan is @allanfriedman on bsky & infosec.exchange while presenting here at RSA Conference.
He’s awesome! Great to see Cybersecurity and Infrastructure Security Agency initiatives helping move industry forward.

Heading to the Cybersecurity and Infrastructure Security Agency booth 1235 south. I’ll be there 10:30-12ish. Come say hi, yell at me and/or grab and #SBOM sticker!

Been great to see so many friends and collaborators already at #RSAC ! If you can’t make the SBOM meetup tonight, and still want to chat #SBOM , I’ll be at the CISA Cyber Booth (South Expo 1235) from 10:30-11:30 and would love to say hi. I may even have SBOM stickers!

Not too late to join some crazy smart people trying to tackle a crazy hard problem like IoT Abandonware. Eat breakfast! Share ideas!

If you're at RSA next week, come check out the IoT Abandonware panel featuring industry luminaries like Weld Pond | Chris Wysopal, Allan is @allanfriedman on bsky & infosec.exchange, and Tarah M. Wheeler. There are VERY serious security issues here.

No conference badge needed.
eventbrite.com/e/bricked-and-…

Come for the out of date headshot, stay for some great conversation between me and Joseph Carson - Hacking Things and Research about SW supply chain.

This is why we SBOM.

How many security teams had no idea their Siemens assets contained Palo Alto components?

US Government and OpenSSF Partner on New SBOM Management Tool buff.ly/3xI86H5

I was hoping this would get clipped...

'Lots of great tooling around generating SBOMs SPDX SBOM & CycloneDX SBOM Spec (OWASP)... It's now easier than ever, so Allan is @allanfriedman on bsky & infosec.exchange can finally sleep at night'

Is this the best cyber pun yet? Surely only Troy Hunt himself could do better? Found in a rather cool Lufthansa awareness cookbook 😀

Every conference has the road not taken. I may have decided against a power ballad-themed proposal for an EOL-EOS presentation. Dan Lorenc - this idea is yours if you want it :)

Spring! Very happy to see local produce at the DC farmers markets.

A fantastic tool to use and *translate* SBOM data formats. Very excited to see how this project evolves.

🔍 Calling all security enthusiasts! The OpenSSF Scorecard survey is live! Share your thoughts and help us enhance software security standards. Take the survey now: hubs.la/Q02sBYz10
#opensourcesoftware