Advanced Cubicles & Compromises - WWHF:WW 2020 Virtual

Another one in the books. Thanks to everyone that attended Wild West Hackin' Fest: Way West - Virtual Edition Advanced Cubicles and Compromises Workshop. We had a great workshop with new injects around the Corona Virus and COVID-19. We are very sensitive to this issue so we focused on how a team responds to rapidly getting remote work infrastructure online and the pitfalls of missing security reviews from fast deployments.

A few items we learned from virtual:

1. In the future have hidden YouTube links that are provided during the injects for remove viewers to watch from home. This will address any audio issues from video and audio injects in Keynote. 
2. During presentation have the ability to have Discord up as well as the GoToMeeting chat. 

It was a great learning experience on doing this virtually and I hope the attendees got a lot out of the information in the workshop. 

I've uploaded a video update below that talks about the new injects and includes the video and audio content. If you were on for the workshop and couldn't hear well or are just curious what we did check out the below:

All the materials can be found below including the slides from the workshop:

Players Guide

Company Creation Worksheet

Pre-Built Companies

Wheel of Business Sheet 

Virtual Dice Roller

Slides from the Workshop 

Enjoy and feel free to hit me up un email [email protected] or twitter @eanmeyer.

Ean

Advanced Cubicles & Compromises - Wild West Hackin' Fest - Update!

If you had the chance to attend my workshop at Wild West Hackin' Fest 2019 I hope you enjoyed it. Below are links to the final materials including the slides in PDF format. I also include a short video that captures the voicemails, media coverage, and hacktivist videos I made for the injects.

If you enjoyed the workshop please fill out your survey and let John and Kate know what you thought. I hope to do more of these in the future!

Players Guide
Company Creation Worksheet
Wheel of Business Outcomes
Slides from Wild West Hackin' Fest Workshop

Below is a short video that includes the video and audio content used with injects during the tabletop exercise.

Also, if you have questions about running a tabletop exercise or any other questions feel free to hit me up on my email, Twitter, or LinkedIn.

Email: [email protected]
Twitter: https://twitter.com/eanmeyer
LinkedIn: https://www.linkedin.com/in/eanmeyer

Thanks!

Ean

Advanced Cubicles & Compromises - WWHF 2019

Howdy all,

We are one week out from Wild West Hackin' Fest and if you are signed up for my Advanced Cubicles & Compromises workshop I think you are in for a treat. As promised the below links will take you to the Advanced Cubicles & Compromises Players Guides as well as the Company Creation Worksheet.

Advanced Cubicles & Compromises Players Guide
Advanced Cubicles & Compromises Company Creation Sheet

The Players Guide gives an overview of the rules and how to select the controls for your company. The Company Creation Sheet is used to track the controls and implementation tiers you selected for use during gameplay. We did a test run of building a company and you should be able to create your company in about an hour. If you give yourself about two hours to read the guide and create your company you should be in good shape.

The guide also references a Wheel of Business sheet. This has all the options that may arise when the Wheel of Business spins. This will be given out during the workshop.

All materials will be provided for you including dice, though you may feel free to bring your own. You may also want a calculator on hand. Your phones calculator will do fine.

If you don't get a chance to create your company before coming out, don't fret! On Thursday 10/24 from noon to 1:00pm local time (workshop at 1:45) you can join me at a table in the main area and I will help you quickly build a company. Look for the Wheel of Business on a table, you won't miss it.

If you signed up and just couldn't get it done don't worry. I will have a few randomly generated companies to choose from during the workshop. Just come and play!

If there are updates I will post them here as we get closer to the conference.

I hope you are looking forward to this as much as I am, see you soon!

Feel free to shoot me a message on Twitter if you have questions, my DMs are open @eanmeyer

Ean

InfoSecWorld 2018 - The Hacker Carnival

I am proud to announce I am speaking at InfoSecWorld 2018 on March 19th - 3:20pm in Grand Republic B. Come say hi and hear about the Hacker Carnival.

We will be talking about how you engage your security team and get them to build relationships via a mini-conference we call the Hacker Carnival. The goal is to create security awareness training that makes everyone aware of the security team and not just aware of security.

I hope to see you there. You can read more about it at this link or below: https://infosecworld.misti.com/agenda-details/?function=153

Pumprake with swappable 3D printed rake adapaters

Halloween is about a month away and stores will be lined with these electric pumpkin carving tools.

I thought it was time I revisited a project I started Halloween of last year. The below is the story and build, but the TL;DR can be found in this video.
 
I created a 3D printed part that allows you to swap rakes in the Pumpkin Master electric pumpkin carver.

You can check out the video then jump to the STL file and print your own: https://drive.google.com/open?id=0BzY3yLosRyyxMzAxdFo3Y3ZHTUU 

You can find the Pumpkin Masters electric carving tools on Amazon, but I generally find them cheaper at CVS and Walgreens. https://www.amazon.com/Pumpkin-Masters-Halloween-Activties-Easy-Grip/dp/B0160EH5PM

Want to know more, keep reading after the break.

DHS - Corporate Security Symposium - Cyber Mitigation and Response Panel

I was pleased to have the opportunity to be a panelist at the Department of Homeland Security - Corporate Security Symposium in Orlando, FL. The panel of public and private sector security professionals covered some of the important topics businesses need to know to prepare for a potential breach and how to respond once a breach occurs. Beyond the panel I was on there were fascinating panels on the growth of Executive and Project Protection from major players like Amazon, Microsoft, and Disney. The day concluded with a breakdown of the response to the Pulse Nightclub shooting which was terrifying and riveting. It showed how law enforcement agencies worked together to respond and eliminate the threat.

If you get a chance to attend one of these symposiums I highly recommend it.

https://www.eventbrite.com/e/orlando-corporate-security-symposium-tickets-34154191105

Tripwire - State of Security - The Skills Gap is an "Entry Level" Problem

Tripwire invited me to blog about the skills gap in information security. Many strong arguments conclude there is a gigantic skills gap with position that can't be filled while others that believe the skills gap is a made up discussion. No matter your belief in this post we look at some of the ways to avoid being a company that cannot find the right security talent as well as ways to grow your current IT talent pool into security professionals.

Check out the blog post here: https://www.tripwire.com/state-of-security/security-awareness/skills-gap-entry-level-problem/