INTERTEXTrEVOLUTION

Make.Hack.Play.Learn

Greg McVerry / Writing & conversations

Post archive

Browse the things I’ve written, shared and replied to.

Subscribe via RSS ↗

Browse by date

All dates
August 2025
MonTueWedThuFriSatSun
1102266377
4615102610479487991161027
113512124132221425015741619617153
1810319168201092159221882311424116
25114261882711428174291093014531149

6 posts have no recorded date and appear under “All dates.”

August 26, 2025

188 posts

Greg McVerry

@minkeymagik @IceSolst EDR is the new VPN. Automagically fixes everything Here in US, FISMA needs a reauthorization, I have said that for years, but C

In reply to twitter.com ↗

@minkeymagik @IceSolst EDR is the new VPN. Automagically fixes everything Here in US, FISMA needs a reauthorization, I have said that for years, but Congress is broken Portman and Peters almost passed an update that nibbled at the edges. Bill failed, they retired. and compliance roles make great…

Greg McVerry

@anton_chuvakin Once upon a time there was a GRC engineer Drove an LLM model both far and near Accompanied by a monkey who would sit on a stool Watchi

In reply to twitter.com ↗

@anton_chuvakin Once upon a time there was a GRC engineer Drove an LLM model both far and near Accompanied by a monkey who would sit on a stool Watching every permission engineer would move One day the engineer wanted a bite to eat He left the monkey sitting on the gamer seat The monkey pulled…

Greg McVerry

@minkeymagik @IceSolst Until then join my mutual fund: Buy on the Breach, LLC Schrödinger's risk assessment. Can you be liable for not patching a risk

In reply to twitter.com ↗

@minkeymagik @IceSolst Until then join my mutual fund: Buy on the Breach, LLC Schrödinger's risk assessment. Can you be liable for not patching a risk you didn't know existed? Better to be secure and not secure at the same time There is an affirmative defense bill being astroturfed by Insurance and…

Greg McVerry

@minkeymagik @IceSolst I agree, which is why I would write the type of red teaming activity into the System Security Plan. If you could get management

In reply to twitter.com ↗

@minkeymagik @IceSolst I agree, which is why I would write the type of red teaming activity into the System Security Plan. If you could get management to approve the budget as part of the training or security plan. Could mandate such a scenario, depending on the risk, regulations, and constraints

Greg McVerry

@minkeymagik @IceSolst Without lawyers with defensible laws and compliance regulations you could never mandate red team activities. I guess you proved

In reply to twitter.com ↗

@minkeymagik @IceSolst Without lawyers with defensible laws and compliance regulations you could never mandate red team activities. I guess you proved me wrong, and are saying regulate me harder. I'd say you could argue red teaming, based on risk analysis required for some privileged assets.

Greg McVerry