Just finished reading The Ride of a Lifetime by @RobertIger.

Incredible life and work advice from his perspective on @Disney distilled into 250+ pages.

Here's a thread of my top 10 takeaways:

Compliance is fundamentally at odds with innovation and continuous improvement

Compliance tends to constrain operations to narrow sets of approved sequences of tasks as the means to assure the secure attainment of certain business outcomes. But at what cost ?

🧵

Operational practices have an emergent nature to them. They’re affected by people, their expertise, their relationships, their team goals, role perceptions and also member needs as humans and professionals.
In this entangled mess of variables, aspects practice-as-done are

Constantly morphed as a response to economic pressures (deadlines, business demands), workload demands (as people tend to automate or agree patterns to reduce cognitive load of tasks and become more efficient) and understanding of safety and security related barriers.

All of these tend to be fluid and non fixed. In this continuous interaction with the environment and different pressures acting on it, there are numerous opportunities for improvements which have local relevance and emerge out of local needs and interactions of elements. However

In order to do so, and to support innovation and continuous improvement the practices need to have a requisite level of variability so practitioners exercise their Fingerspitzengefühl (fingertip feel) for what works and what doesn’t, within their constraints and pressures

Parler is gone, but the evidence is not. Current @Microsoft employee & fmr Snoqualmie city council candidate Kevin Ostrem (1/26) @parlertakes

Parler is gone, but the evidence is not. Current @Microsoft
employee & fmr Snoqualmie city council candidate Kevin Ostrem @parlertakes (2/26)

Parler is gone, but the evidence is not. Current @Microsoft employee & fmr Snoqualmie city council candidate Kevin Ostrem @parlertakes (3/26)

Parler is gone, but the evidence is not. Current @Microsoft employee & fmr Snoqualmie city council candidate Kevin Ostrem @parlertakes (4/26)

Parler is gone, but the evidence is not. Current @Microsoft employee & fmr Snoqualmie city council candidate Kevin Ostrem @parlertakes (5/26)

As part of our commitment to keeping our customers/community protected & informed, we are releasing a blog that shines light on transition between Stage 1 and 2 of #Solorigate/#SUNBURST campaign, custom Cobalt Strike loaders, post-exploit. artifacts, IOCs: https://t.co/b0ReHMa63u

Here are some highlights:
The missing link between the Solorigate backdoor and the custom #CobaltStrike loaders observed during the #Solorigate is an Image File Execution Options (IFEO) Debugger registry value created for the legitimate process dllhost.exe (ATT&CK ID: T1546.012).

Once the registry value is created, the attackers wait for the occasional execution of dllhost.exe, which might happen naturally on a system. This execution triggers a process launch of wscript.exe configured to run the VBScript file dropped by the SolarWinds backdoor (Stage 1).

The VBScript in turn runs rundll32.exe, activating the Cobalt Strike loader DLL using a clean parent/child process tree completely disconnected from the SolarWinds process. Finally, the VBScript removes the previously created IFEO value to clean up any traces of execution.

On the custom Cobalt Strike Loaders: we identified several second-stage malware, including TEARDROP, Raindrop, and other custom loaders for the Cobalt Strike beacon. During the lateral movement phase, the custom loader DLLs are dropped mostly in existing Windows sub-directories.

Went to make coffee. Opened fridge to get milk. Now...I was a refrigeration engineer, I had my own domestic appliance business, and I've seen things that would make your hair curl, but...the scene I was greeted by was frankly fucking horrific... 1/?

Everything in the fridge, butter, milk, eggs, some bacon, jars of stuff (except the mustard) had been torn to shreds...and was wet, from the milk presumably, and had turned black...2/?

I just stood and stared. The egg shells were there but broken, empty, and dry. The egg box in shreds. The butter had all gone and the lid had tell-tale holes. The unopened bacon all gone. The tray in tatters...3/?

I'd have taken a picture but it was disgusting...because...there were things in there that weren't in there on Friday. Turds. 6mm long, ovoid turds. I knew what they were obviously, but their presence INSIDE THE FUCKING FRIDGE was, is, troubling...How?4/?

A closer look, and this wasn't pleasant, what with all the black rancid milk and turds, revealed what looked like a hole at the corner of the interior, just under the evaporator..WTF! 5/?