The Ashimmy Blog

Last Chance To RSVP For Security Bloggers Meet up

If you have received an invite to the Security Bloggers Meet up at RSA Conference this year and have not RSVP'd yet, what are you waiting for?  Time is running out, as our available space is running out!  We only have limited room at out location, so have to stop allowing RSVPs when we reach the limit.  At this point we are near capacity. If you don’t want to be shut out, go find that invite and RSVP right now!

This years meet up, our 6rh annual one promises to be our best ever.We of course have the 4th annual Social Security Blogger Awards (winners have already been voted and will be announced at the meet up), the first two Security Bloggers Hall of Fame members being announced, great entertainment and even more surprises in store. Of course the usual good food, drinks and camaraderie in a marketing free zone are still there.

Now we are working on another surprise for Security Blogger Meet up invitees.  Another invite to another exclusive event.  Can’t tell you more about that now, but will later.

So don’t wait a second longer. Go find your invite and RSVP now or don’t complain about not being able to attend. If you never received your invite and blog, write or podcast on security, write to Jennifer Leggio at mediaphyter@gmail.com to request yours. If you were silly enough to delete your invite without responding, shame you on you. You are SOL.  Well maybe if you write to Jennifer and tell the truth that you “accidently” deleted it, she may send you another one.

Anyway, don’t miss our best bloggers meet up yet.  Thanks to our great sponsors, this is one event you don’t want to miss!

Now It’s B-sides and RSA

When I last wrote about B-sides a few weeks ago there was the drama of “show me the money”, as some folks questioned where money from sponsors was going. As a result the B-sides group seems to have emerged stronger with a definitive board of directors, more transparency in their finances and the better for the experience. However, now there is more drama around B-sides, this time around whether RSA Conference is trying to stamp out B-sides San Francisco by refusing to grant waivers to companies that sponsor both RSA and B-sides.

When I first heard the story on Twitter and read the post they put up I have to say I was skeptical. Let me say right up front that RSA Conference sponsors the Security Bloggers Network and sponsors our Security Bloggers Meet up every year at RSA. On top of that I have found the conference team to be the most professional, on the ball group of folks to work with. They care about the security community and this just doesn’t sound like their style.

I reached out to a contact there to find out what the real story was behind this new B-Sides drama today. From what I can ascertain here are the facts:

RSA Conference has not denied a waiver to any sponsor that asked to sponsor B-sides also. In fact this is not the first year that RSA Conference has worked with B-Sides on this.

So I am not sure where this is all coming from. If the folks at B-sides have been told differently, I would like someone there to stand up and say so. Let’s have a great RSA Conference week. A week big enough for Security B-sides, Americas Growth Capital Conference, Cloud Security Alliance conference and all of the other great security stuff that takes place in San Fran that week!

In the bigger picture, B-sides is a great idea and I love watching it grow. But drama is not conducive to growing B-sides. I hope that this will not be a reoccurring pattern.

Only One Week Left To Vote For Blogger Awards

Wow, January is flying by! Today is the 20th of the month already. That means there is only one week left to vote for this years Social Security Bloggers Awards.  Of course winners will be announced at the Security Bloggers Meet up at the RSA Conference in San Francisco.

Here are the finalists as nominate by our judges, Kelly Jackson Higgins, Bill Brenner, Larry Walsh and Wendy Nather:

Best Corporate Security Blog:

Fortinet Security Blog http://blog.fortinet.com/

Denim Group http://blog.denimgroup.com/

Trend Micro Cloud Security Blog http://cloudsecurity.trendmicro.com/

Veracode Security Blog http://www.veracode.com/blog/

Kaspersky Lab Blog https://www.securelist.com/en/

Sophos Naked Security Blog http://nakedsecurity.sophos.com/

Best Security Podcast:

Threat Post http://threatpost.com/en_us/podcast

The Network Security Podcast http://netsecpodcast.com/

Eurotrash Security Podcast http://www.eurotrashsecurity.eu/index.php/Main_Page

Pauldotcom http://pauldotcom.com/

Exotic Liability http://www.exoticliability.com/

The Southern Fried Security Podcast http://www.southernfriedsecurity.com/

You can also write in your podcast vote.

The Most Educational Security Blog:

Cognitive Dissidents http://blog.cognitivedissidents.com/

Tao Security http://taosecurity.blogspot.com/

F-Secure blog http://www.f-secure.com/weblog/

The New School Security Blog http://newschoolsecurity.com/

AppSecInc Blog http://blog.appsecinc.com/

Evil Bytes/John Sawyer http://www.darkreading.com/blog/archives/evil-bytes/index.html

The Most Entertaining Security Blog:

Rational Survivability http://www.rationalsurvivability.com/blog/

Andrew Hay's Blog http://www.andrewhay.ca/

Uncommon Sense Security/Jack Daniel http://blog.uncommonsensesecurity.com/

New School Of Information Security/Adam Shostack http://newschoolsecurity.com/

Naked Security http://nakedsecurity.sophos.com/

Securosis Blog http://securosis.com/blog

The Blog That Best Represents The Security Industry:

Krebs On Security http://krebsonsecurity.com/

Uncommon Sense Security http://blog.uncommonsensesecurity.com/

SANS Internet Storm Center http://isc.sans.org/

Securosis blog https://securosis.com/blog

The Single Best Blog Post or Podcast Of The Year:

Martin McKeay, Curing the Credit Card Cancer http://www.mckeay.net/2011/11/28/curing-the-credit-card-cancer/

Veracode Blog http://www.veracode.com/blog/2011/08/musings-on-custers-last-stand/

Moxie Marlinspike's ThoughtCrime Labs http://blog.thoughtcrime.org/authenticity-is-broken-in-ssl-but-your-app-ha

Idoneous Security http://idoneous-security.blogspot.com/2011/12/what-your-analyst-wishes-you-knew.html

The First Two Members Of The Security Bloggers Hall Of Fame: (please pick 2)

Adam Shostack (Emergent Chaos, New School of Security)

Brian Krebs (Washington Post, Krebs on Security)

Rich Bejtlich, Tao Security

Chris Hoff, Rational Survivability

Graham Cluley, Naked Security

Bruce Schneier, Schneier On Security

You can vote if you like, right now by clicking here. There is only a week left and most of the categories are very, very close.

How Come My Blog/Podcast Wasn’t Nominated?

With last weeks announcement of the finalists for this years Social Security Bloggers Awards there has been the usual buzz about the awards, the Security Bloggers Network and the bloggers meet up.  I want to say from the outset that in total all of the blogs/podcasts nominated as finalists belong there.

Of course there are so many blogs and podcasts that inevitably some worthy ones don’t make the list. This year there has been some questioning of how we pick the finalists and questioning of why certain blog/podcasts were left out. I should say that it seems mostly centered in the podcast category.

As a result I have made a write in option available for qualified voters(more on that in a second) to write in their own selection for best podcast. So far I have a received a handful of write in votes.  That being said though, I wanted to go over how we pick the finalists and what the Social Security Bloggers Awards are all about.

First of all you should know that this year at RSA Conference we will be hosting the 6th annual Security Bloggers Meet up.  You can find out more about it at the RSA Conference blog for Bloggers Meet up, the Bloggers Meet up Facebook page and the Security Bloggers Network.

This is also the 4th year for the Social Security Bloggers Awards. Again you can read more about them on the links above. The idea behind the blogger awards was to recognize some of the leading bloggers in the security arena.  When I first came up with the idea I didn’t think people would get that excited about it.

In the first year of the awards we had judges nominate their choices for finalists (as we have every year since), then we let anyone who registered vote. Well it turned out like so many awards run by other organizations, nothing more than a popularity contest with some people trying to stuff the ballot box.  That was not the spirit that I envisioned with these awards.

The awards really grew out of the Security Bloggers Network which I started 6 or more years ago. While a blog or podcast does not have to be in the SBN to be considered or win an award, it was in that same sense of fostering a community among the security blogging space. 

So going forward I changed the voting for the awards. While our all star panel of judges still picked the finalists, voting was only open to security bloggers.  Each voter had to give their blog or podcast URL with their vote for us to verify. In this way it was an award “by the bloggers, for the bloggers”.  This of course drastically cut down the amount of votes cast, but made it a peer based award similar to the Screen Actor Guild SAG awards.  I thought that was pretty cool.

Each year I try to bring some fresh blood into the judges pool to get new views on what the best blogs and podcasts are.  I also refine and add new categories to hopefully better represent the market. But no matter what is done, there are always going to be some people who feel left out.

So for next year I am already thinking of how we can do this differently. I am open to suggestions. But I will reserve the right on behalf of myself and the bloggers meet up organizing committee to choose what we think is the best method. I want to keep the awards free from ballot box stuffing.

In the meantime I want you all to know that I and many others appreciate all of the great content that the security industry turns out in blogs and podcasts. Thanks to all of you for creating and consuming it. Being nominated or even winning an award is not the payback for why we do this, it is educating and joining in the conversation that keeps us doing it.  So please keep blogging and podcasting!

And The Nominees Are . . .

No I am not announcing the choices for the Oscars.  Something even better.  It is time to announce the nominees for the 2012 Social Security Bloggers Awards.  Voting will open today and remain open until January 30th.  Of course the winners will be announced live at the 6th annual Security Bloggers Meet up at RSA Conference!

So before we get to our nominees, a word from our sponsors:

Actually a few other things to mention first as well:

1. Our judges - The nominees for the Social Security Blogger Awards are made by our blue ribbon panel of judges.  We did not announce their names before hand this year to limit the "lobbying" that they have been subjected to in the past. But now that the nominations are public, they are open to be influenced by food, liquor, baubles or other means.  Seriously a huge thank you to our judges:

Kelly Jackson Higgins

Bill Brenner

Larry Walsh

and special guest judge:

Wendy Nather

2. Eligibility - In years past anyone associated with organizing the bloggers meet up was DQ'ed from being nominated. Frankly that was silly. The fact is that Rich, Martin, Jen and Jeanne (my organizing committee fellow members), don't have a lot to do with the awards.  So the only one not eligible for any awards is me. It isn't fair to keep good blogs and people down.  Also judges could not nominate their own work, but other judges could nominate someone who is judging.  So for instance, Wendy Nather was nominated by another judge unbeknownst to her.

3. New Category - This year we are adding a new category for Security Bloggers Hall of Fame. I will be adding this to the Security Bloggers Network Site after RSA. This category is sort of a lifetime achievement award for security bloggers.  But it doesn't mean they are on their last leg.  This first year we are going to add two bloggers to the Hall of Fame.  In future years we will add one new blogger a year.

4. Who can vote - Again, I did not want to go through the ballot box stuffing that we had a few years back. So only security bloggers and podcasters can vote. If you write on security and have a URL to prove it, you can vote. Me and my election commission members will be going through each vote by hand, so please don't even bother trying to game this. Don't ruin a fun event with bad form.

OK with that out of the way, here are the nominations for the 2012 Social Security Bloggers Awards:

Best Corporate Security Blog:

Fortinet Security Blog http://blog.fortinet.com/

Denim Group http://blog.denimgroup.com/

Trend Micro Cloud Security Blog http://cloudsecurity.trendmicro.com/

Veracode Security Blog http://www.veracode.com/blog/

Kaspersky Lab Blog https://www.securelist.com/en/

Sophos Naked Security Blog http://nakedsecurity.sophos.com/

Best Security Podcast:

Threat Post http://threatpost.com/en_us/podcast

The Network Security Podcast http://netsecpodcast.com/

Eurotrash Security Podcast http://www.eurotrashsecurity.eu/index.php/Main_Page

Pauldotcom http://pauldotcom.com/

Exotic Liability http://www.exoticliability.com/

The Southern Fried Security Podcast http://www.southernfriedsecurity.com/

The Most Educational Security Blog:

Cognitive Dissidents http://blog.cognitivedissidents.com/

Tao Security http://taosecurity.blogspot.com/

F-Secure blog http://www.f-secure.com/weblog/

The New School Security Blog http://newschoolsecurity.com/

AppSecInc Blog http://blog.appsecinc.com/

Evil Bytes/John Sawyer http://www.darkreading.com/blog/archives/evil-bytes/index.html

The Most Entertaining Security Blog:

Rational Survivability http://www.rationalsurvivability.com/blog/

Andrew Hay's Blog http://www.andrewhay.ca/

Uncommon Sense Security/Jack Daniel http://blog.uncommonsensesecurity.com/

New School Of Information Security/Adam Shostack http://newschoolsecurity.com/

Naked Security http://nakedsecurity.sophos.com/

Securosis Blog http://securosis.com/blog

The Blog That Best Represents The Security Industry:

Krebs On Security http://krebsonsecurity.com/

Uncommon Sense Security http://blog.uncommonsensesecurity.com/

SANS Internet Storm Center http://isc.sans.org/

Securosis blog https://securosis.com/blog

The Single Best Blog Post or Podcast Of The Year:

Martin McKeay, Curing the Credit Card Cancer http://www.mckeay.net/2011/11/28/curing-the-credit-card-cancer/

Veracode Blog http://www.veracode.com/blog/2011/08/musings-on-custers-last-stand/

Moxie Marlinspike's ThoughtCrime Labs http://blog.thoughtcrime.org/authenticity-is-broken-in-ssl-but-your-app-ha

Idoneous Security http://idoneous-security.blogspot.com/2011/12/what-your-analyst-wishes-you-knew.html

The First Two Members Of The Security Bloggers Hall Of Fame: (please pick 2)

Adam Shostack (Emergent Chaos, New School of Security)

Brian Krebs (Washington Post, Krebs on Security)

Rich Bejtlich, Tao Security

Chris Hoff, Rational Survivability

Graham Cluley, Naked Security

Bruce Schneier, Schneier On Security

OK, there you have it. Your 2012 Nominees for the Social Security Blogger Awards. You can vote if you like, right now by clicking here

The B-sides Affair

So the security twittersphere is a buzz this morning about a post by Brian Martin on SecurityErrata raising some serious questions about the Security B-sides “organization” and Mike Dahn in particular.

Let me say from the outset that I don’t consider myself a B-sides insider and have only even attended a few B-sides events. The early ones were a bit too edgy for me. However, I have followed the growth of b-sides closely. I have been very proud of the way Mike, Jack Daniels and others have really taken these events up a notch.

Also from running the Security Bloggers Network and Bloggers Meet up and Awards at RSA these past years, I have a little experience with some of this type of stuff.

Rather than be constrained to 140 characters, I wanted to get my thoughts down here in long form. Call me old fashioned.

1. It is not easy setting up an organization as a non-profit, especially if you have never done it before. The smart thing is to hire a lawyer and accountant and let them deal with it, but that costs money too. It is especially harder if this is not your full time gig.

2. Running any organization including delegating responsibility and authority is also something that if you have not done it before is not easy.

3. Most sponsors for b-sides don’t sponsor because it is a non-profit. They sponsor to be associated and reach the attendees. Non-profit or not, they write off the sponsorship as marketing expense. I don’t think they take a tax write off as a charitable donation. In fact I have checked this with at least one sponsor of a b-sides event and the non-profit status was not an issue to them at all.

4. I know Jack Daniels and tend to believe him that the dollar amounts mentioned in the blog post are erroneous. I am waiting to see Mike Dahn’s response today and fully expect the facts around this to come out.

5. Running the bloggers meet up and awards we take in 20k to 30k a year for the party from sponsors. We don’t say we are a non-profit and we are not. However, we spend every cent every year on the party and awards(and sometimes poor Rich Mogul winds up with a tax liability). We are not transparent with the funding, but no one has ever asked frankly, including the sponsors. I would assume it is probably similar with B-sides.

6. I understand the echo chamber of Twitter, but 140 characters doesn’t give enough room for depth. Instead it shrieks loudly. Multiply that by the amount of people tweeting and it takes on a mob feel. Lets give pause and let Mike respond and let the facts come out.

7. I hope as a result of this B-sides will come out of it bigger and better than ever with a wider, deeper management team.

7. We have a great community in InfoSec, lets celebrate it at this time of year!

Happy Hanukah, Merry Christmas, Happy New Year and any other holiday you celebrate. Love your fellow man and give them the benefit of the doubt before rushing to judgement.

It’s That Magical Time of the Year

This is copied from the post I just put up at the RSA Conference Blog at:

https://365.rsaconference.com/blogs/security-blogger-meetup/2011/12/16/its-that-time-of-the-year

Christmas is just a week or so away, New Years is just around the corner.  You know what is next? Of course you do, it is RSA Conference Week and with that the 6th Annual Security Bloggers Meetup!   Can you believe it has been a whole year since we last gathered in San Francisco? More than that, can you believe this is the 6th annual Security Bloggers Meetup?  Of course the 4th annual Social Security Blogger Awards will be presented as well.

Our little get together has certainly grown since Martin McKeay, Rich Mogull and I talked about getting together with a few bloggers way back when. Of course it couldn't have gotten to where it is today without all of the hard work of Jennifer Leggio who does so much of the heavy lifting.  Add to the mix the tireless effort of Jeanne Friedman of RSA Conference and you have one hard working organizing committee.  We literally meet year round planning this event, lining up sponsors, entertainment, etc.

Speaking of sponsors, we are very proud to have a great mix of old and new sponsors for this years event.  Returning are RSA Conference, Qualys, Fortinet, Barracuda Networks and Core Trace.  Joining the mix this year are new sponsors Sourcefire and Akamai.  Thank you to each and everyone of them for allowing us to put this event on this year!

Well invites or more appropriately this year, registration requests are going out today. We are doing things a little differently this year. If you were on our list you will receive an event registration request. You need to follow the link and register for the event.  Let me warn you up front, you need to give your name, email address and blog URL.  Each registration will be reviewed by a live human (how quaint) and approved or disallowed. The usual no marketing/PR please rules apply.  Of course it is not that we don't love marketing/PR people, it is just that we built a tradition of a party by the bloggers, for the bloggers with the bloggers only.

If you think you should get a registration request but have not received one yet (check your spam folder, sometimes they get stuck there), please email Jennifer at mediaphyter@gmail.com. She will get one right out to you.

A couple of other things about this years event:

1. The Social Security Blogger Awards are back for their 4th year.  We will announce finalists for voting right after January 1. Our judges are already hard at work making their nominations.

2. Interesting entertainment and activities during the party

3. Hopefully same great food and drink

4. STILL THE BEST GROUP OF PEOPLE YOU WANT TO MINGLE WITH IN THE SECURITY INDUSTRY!

So don't wait, due to space we have to limit the number of people we can register to attend. If you got your invite, head on over and register now!

On behalf of Jennifer, Jeanne, Martin, Rich, myself and our sponsors, thanks and  can can't wait to see you!

Related articles

• Social Security Blogger Awards 2012 (ashimmy.com)
• Blogging is a Conversation (ashimmy.com)

It’s That Magical Time of the Year

This is copied from the post I just put up at the RSA Conference Blog at:

https://365.rsaconference.com/blogs/security-blogger-meetup/2011/12/16/its-that-time-of-the-year

Christmas is just a week or so away, New Years is just around the corner.  You know what is next? Of course you do, it is RSA Conference Week and with that the 6th Annual Security Bloggers Meetup!   Can you believe it has been a whole year since we last gathered in San Francisco? More than that, can you believe this is the 6th annual Security Bloggers Meetup?  Of course the 4th annual Social Security Blogger Awards will be presented as well.

Our little get together has certainly grown since Martin McKeay, Rich Mogull and I talked about getting together with a few bloggers way back when. Of course it couldn't have gotten to where it is today without all of the hard work of Jennifer Leggio who does so much of the heavy lifting.  Add to the mix the tireless effort of Jeanne Friedman of RSA Conference and you have one hard working organizing committee.  We literally meet year round planning this event, lining up sponsors, entertainment, etc.

Speaking of sponsors, we are very proud to have a great mix of old and new sponsors for this years event.  Returning are RSA Conference, Qualys, Fortinet, Barracuda Networks and Core Trace.  Joining the mix this year are new sponsors Sourcefire and Akamai.  Thank you to each and everyone of them for allowing us to put this event on this year!

Well invites or more appropriately this year, registration requests are going out today. We are doing things a little differently this year. If you were on our list you will receive an event registration request. You need to follow the link and register for the event.  Let me warn you up front, you need to give your name, email address and blog URL.  Each registration will be reviewed by a live human (how quaint) and approved or disallowed. The usual no marketing/PR please rules apply.  Of course it is not that we don't love marketing/PR people, it is just that we built a tradition of a party by the bloggers, for the bloggers with the bloggers only.

If you think you should get a registration request but have not received one yet (check your spam folder, sometimes they get stuck there), please email Jennifer at mediaphyter@gmail.com. She will get one right out to you.

A couple of other things about this years event:

1. The Social Security Blogger Awards are back for their 4th year.  We will announce finalists for voting right after January 1. Our judges are already hard at work making their nominations.

2. Interesting entertainment and activities during the party

3. Hopefully same great food and drink

4. STILL THE BEST GROUP OF PEOPLE YOU WANT TO MINGLE WITH IN THE SECURITY INDUSTRY!

So don't wait, due to space we have to limit the number of people we can register to attend. If you got your invite, head on over and register now!

On behalf of Jennifer, Jeanne, Martin, Rich, myself and our sponsors, thanks and  can can't wait to see you!

Related articles

• Social Security Blogger Awards 2012 (ashimmy.com)
• Blogging is a Conversation (ashimmy.com)

Social Security Blogger Awards 2012

Cooperstown, Canton, Springfield, Cleveland, what do all of these places have in common? They all are homes to a Hall of Fame. Now the Security Bloggers Awards will be joining them with Security Bloggers Hall of Fame too! 

It is Christmas time, so you know RSA Conference is not far away. If RSA is almost here, you know that is almost time for the annual Security Bloggers Meet up and Social Security Bloggers Awards. 

All of the plans have been made, the judges selected and the finalists will be announced after New Years.  As in years past all security bloggers are eligible to vote. But you will have to give your name, email and blog address.

Last years categories will return this year:

Best Corporate Security Blog

Best Security podcast

Most educational security blog

Most entertaining security blog

Security Blog that best represents the industry

The single best security blog post of the year

Additionally this year we will elect the first two members of the Security Bloggers Hall of Fame!

I will announce our judges and other information between Christmas and New Years.  This year all blogs are eligible except mine and the judges. Also be on the lookout for save the dates going out soon if you are on our list. If you are not on the list, send an email to info@securitybloggersnetwork.com or leave a comment requesting an invite. You must blog on security and no marketing/PR stuff please!

Related articles

• Blogging is a Conversation (ashimmy.com)
• New for RSA Conference 2012 - the Author's Studio (365.rsaconference.com)
• Securosis: Words matter: You stop attacks, not breaches (boxofmeat.net)
• Friday Summary, December 9, 2011 (securosis.com)

Blogging is a Conversation

For those of you who may be wondering, yes there will be a killer Security Bloggers Meet up at RSA this year. There will also be another Social Security Blogger Awards with some new categories as well. More on those in another blog. But the reason I write today is something Rich Mogull said on our blogger meet up organizing committee call.

Rich said “lets face it, the security blogger’s community isn’t what it used to be”. While I don’t disagree with Rich, I went back and looked at some of the numbers and some of the security blogs. While Rich is right, we don’t see as many as blog posts from the community as we used to, I think we all agree that Twitter probably plays a significant role in that. In fact the Tripwire 25 most influential people in security list seems pretty skewed towards twittter users. But that being said, there are still plenty of security blog posts being posted. The SBN feed is still fresh with lots of new posts every day.

One thing I do see is many of the posts come from corporate security blogs rather than individuals. Many of the corporate blogs don’t develop the personality that a good personal blog does. More importantly what has changed is another thing Rich brought up. We don’t comment anymore. We don’t blog back anymore.

People are blogging and putting their 2 cents into the conversation, but no one is repsonding. Oh, maybe they respond on twitter, on but it doesn’t make it into the blog. Blogging has always been and will always be a two way street. A blog should be a multi-party conversation with the blogger putting forth his ideas and others responding. They can agree, disagree, or concur, but they put their thoughts into the conversation.

One of the great things about reading a hot blog post was following the thread of comments, that was where the real action took place. Whether it was a Rothman post on Security Incite/Securosis or Tom Pcatek on Matasano, a good threat with 50 comments kept you reading for more.

Now maybe Twitter is where blog comments have gone and some of the discussion. Can we have a plug in that captures the real time of twitter comments and discussions back to the original blog post? Doesn’t sound too hard.

How about writing a blog post in response to another blog post? That is part of carrying on the conversation as well. Need something good to blog about? Go look at what your community is writing and join in.

Adam Shostack over on Emergent Chaos has a post up about Threat Modeling as a result of a conversation he had with Wendy Nather, who has her own good blog post about “what your analyst wishes you knew” (and she is not talking about your psychoanalyst either).

I am going over to both of those blogs and adding my voice to the conversation. I already tweeted Wendy’s post, but I realize that is not enough. If we are going to keep the Security blogging community strong and vibrant we have to add our voice on blogs.

What about you? Are you ready to rejoin the conversation?  If so, head over to your favorite security blog and join in.  Or better yet, write a blog in response to someone else’s blog.  It starts with you and you and you.

Related articles

• Reasons to Blog: Guest Post! (lexisjen.wordpress.com)
• Email chaos: How to reach Adam Shostack (emergentchaos.com)