<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <updated>2026-04-19T22:29:53Z</updated>
  <generator>https://yabu.me</generator>

  <title>Nostr notes by J Wolfgang Goerlich</title>
  <author>
    <name>J Wolfgang Goerlich</name>
  </author>
  <link rel="self" type="application/atom+xml" href="https://yabu.me/npub1qr7v23t0hkjn8q5hcg8rq7ct64tc4w6gwzauwxarr45mhmgje6uqtju272.rss" />
  <link href="https://yabu.me/npub1qr7v23t0hkjn8q5hcg8rq7ct64tc4w6gwzauwxarr45mhmgje6uqtju272" />
  <id>https://yabu.me/npub1qr7v23t0hkjn8q5hcg8rq7ct64tc4w6gwzauwxarr45mhmgje6uqtju272</id>
  <icon>https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/319/997/038/940/523/original/9b24287677ff1c39.png</icon>
  <logo>https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/319/997/038/940/523/original/9b24287677ff1c39.png</logo>




  <entry>
    <id>https://yabu.me/nevent1qqsdyl9wmwwhx02886xmm3rqucr3esandql22xdy76ccp029sr0nqfqzyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tsfj5nmd</id>
    
      <title type="html">CSRB, the NIST 800 team, CISA, ISACs for multi-state and ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsdyl9wmwwhx02886xmm3rqucr3esandql22xdy76ccp029sr0nqfqzyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tsfj5nmd" />
    <content type="html">
      In reply to &lt;a href=&#39;/nevent1qqsv726fwmw4mrfge6t6qhrq0x7scxjs384hdd65977967rwkcsm3rg348s44&#39;&gt;nevent1q…8s44&lt;/a&gt;&lt;br/&gt;_________________________&lt;br/&gt;&lt;br/&gt;CSRB, the NIST 800 team, CISA, ISACs for multi-state and elections. It’s a mess. &lt;br/&gt;&lt;br/&gt;Happy to share how this is impacting local (county) governments, if that’s a route you explore.
    </content>
    <updated>2025-11-22T06:20:13Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsw7fxedmtqlzqkywqy5n9jywxkgna0kv9lrw36j36yr5jfe7nkpsgzyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tstqjge7</id>
    
      <title type="html">Most of us build controls like we’re plugging leaks in a roof. ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsw7fxedmtqlzqkywqy5n9jywxkgna0kv9lrw36j36yr5jfe7nkpsgzyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tstqjge7" />
    <content type="html">
      Most of us build controls like we’re plugging leaks in a roof. A drip here, a patch there. Before long, the ceiling looks like a quilt of yesterday’s fixes.&lt;br/&gt;&lt;br/&gt;It works until the next storm.&lt;br/&gt;&lt;br/&gt;But the adversary doesn’t think in leaks. They think in flow. They’re already mapping where the water will run tomorrow. If our job is just plugging holes, we’ll always be one step behind.&lt;br/&gt;&lt;br/&gt;The shift comes when we stop seeing security as patchwork and start seeing it as plumbing. How is data flowing? Where will pressure build? Who has the wrench when something bursts?&lt;br/&gt;&lt;br/&gt;Good security isn&amp;#39;t reacting to breaches. Good security is anticipating how attackers will reroute around today’s controls. Our job is to channels the flow so tomorrow’s storm has fewer places to break through.&lt;br/&gt;&lt;br/&gt;That&amp;#39;s defensibility.&lt;br/&gt;&lt;br/&gt;﻿(﻿PS: Yes, I&amp;#39;m doing work on my house. How did you guess?)
    </content>
    <updated>2025-09-20T22:13:50Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqswc0qurz9dw5s8mfvjhvf62mxlsff0w3zy77lpujgjanfv9uue6mqzyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tsqz57q5</id>
    
      <title type="html">InfoSec: &amp;#34;Never ever click on emails, all emails are ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqswc0qurz9dw5s8mfvjhvf62mxlsff0w3zy77lpujgjanfv9uue6mqzyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tsqz57q5" />
    <content type="html">
      InfoSec:  &lt;br/&gt;&lt;br/&gt;&amp;#34;Never ever click on emails, all emails are malware.&amp;#34;  &lt;br/&gt;&lt;br/&gt;Also InfoSec:&lt;br/&gt;&lt;br/&gt;&amp;#34;Check out this new security feature which provides passwordless login right from an email link.&amp;#34;
    </content>
    <updated>2025-09-18T16:18:21Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsgpfa5ppsf4dfc99yagrdyras0xhpd34mt00qm4ndes9y6rzussaqzyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tslna02k</id>
    
      <title type="html">LOLs per Employee: a vital metric. Shenanigans are a sign the ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsgpfa5ppsf4dfc99yagrdyras0xhpd34mt00qm4ndes9y6rzussaqzyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tslna02k" />
    <content type="html">
      LOLs per Employee: a vital metric. &lt;br/&gt;&lt;br/&gt;Shenanigans are a sign the team has sufficient energy in reserve, signaling readiness for handling emergencies and unplanned work. Play usually reflects underlying trust, cohesion, and resilience. &lt;br/&gt;&lt;br/&gt;Encourage it.
    </content>
    <updated>2025-09-12T09:36:05Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqs0mg5cdhmdun8m962cly28f6wcwq473p7n9z8eunau4ynzzfpjz5szyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tsna8y0f</id>
    
      <title type="html">Give an investor three points on a graph, and they’ll plot a ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqs0mg5cdhmdun8m962cly28f6wcwq473p7n9z8eunau4ynzzfpjz5szyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tsna8y0f" />
    <content type="html">
      Give an investor three points on a graph, and they’ll plot a exponential curve. Any three points. Every time.
    </content>
    <updated>2025-09-02T12:21:27Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqstlaaspev0vy44c9hrks6xqgtntg8lc3yyjt2r08utjhllj4ftfxgzyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8ts0qrddw</id>
    
      <title type="html">Opened up Instagram to see a number of friends clustered in Las ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqstlaaspev0vy44c9hrks6xqgtntg8lc3yyjt2r08utjhllj4ftfxgzyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8ts0qrddw" />
    <content type="html">
      Opened up Instagram to see a number of friends clustered in Las Vegas. &lt;br/&gt;&lt;br/&gt;This is a problem. No, not because Sin City. Because Instagram apparently opted in everyone. &lt;br/&gt;&lt;br/&gt;Turn it off under chat.&lt;br/&gt; &lt;img src=&#34;https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/988/603/383/604/732/original/4d4b1ac97f642e34.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-08-07T17:14:08Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsg9humxrxz5pksykfdyax826kwtth3venru8rv2m4shr9tp83529gzyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8ts28swn6</id>
    
      <title type="html">Them: &amp;#34;In order to make this change, I need to verify you. ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsg9humxrxz5pksykfdyax826kwtth3venru8rv2m4shr9tp83529gzyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8ts28swn6" />
    <content type="html">
      Them: &amp;#34;In order to make this change, I need to verify you. I&amp;#39;ll do this with a one-time text.&amp;#34;  &lt;br/&gt;&lt;br/&gt;Me: Sure.&lt;br/&gt;&lt;br/&gt;Them: &amp;#34;We have no phone number on file.&amp;#34;&lt;br/&gt;&lt;br/&gt;Me: ...   &lt;br/&gt;&lt;br/&gt;Them: &amp;#34;Not to worry. I&amp;#39;ll update your account. What number would you like to use?&amp;#34;&lt;br/&gt;&lt;br/&gt;#CustomerService &amp;gt; #Security
    </content>
    <updated>2025-06-25T16:38:39Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsdtauyksdssm07zt5asgy63krnch0adwyqrkn2a5fp5a9lk3tmljqzyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tsrm89c0</id>
    
      <title type="html">We *must* get away from security which depends upon a full ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsdtauyksdssm07zt5asgy63krnch0adwyqrkn2a5fp5a9lk3tmljqzyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tsrm89c0" />
    <content type="html">
      We *must* get away from security which depends upon a full inventory. It was difficult back when things were mostly static and mostly ITIL. It is practically impossible at 2025 velocities.
    </content>
    <updated>2025-05-15T16:57:04Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsqrtc29n8l9jswdj5tqqyj3rpj7ts82ge24dd8fphp72fyuw4n8qszyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tsngma45</id>
    
      <title>Nostr event nevent1qqsqrtc29n8l9jswdj5tqqyj3rpj7ts82ge24dd8fphp72fyuw4n8qszyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tsngma45</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsqrtc29n8l9jswdj5tqqyj3rpj7ts82ge24dd8fphp72fyuw4n8qszyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tsngma45" />
    <content type="html">
      In reply to &lt;a href=&#39;/nevent1qqs878mdnakcawc4ewt59nzax6ny6l42de0xxnf5cuv8at2ed6etj7qe6sepk&#39;&gt;nevent1q…sepk&lt;/a&gt;&lt;br/&gt;_________________________&lt;br/&gt;&lt;br/&gt; &lt;img src=&#34;https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/366/869/208/114/881/original/9fda5b98b09dba2c.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-04-19T21:58:59Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqs09spz9xexm5p5yl7qjdw8nlwnv8l7nyld8jegyk7742qxkeagxrgzyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tsuhxkjq</id>
    
      <title type="html">I couldn’t solve a Captcha. I am very much human. But there’s ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqs09spz9xexm5p5yl7qjdw8nlwnv8l7nyld8jegyk7742qxkeagxrgzyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tsuhxkjq" />
    <content type="html">
      I couldn’t solve a Captcha. I am very much human. But there’s too much visual noise. &lt;br/&gt;&lt;br/&gt;So I screenshot the Captcha and got the answer from ChatGPT. I’m in! Modern problems, modern solutions.
    </content>
    <updated>2024-10-20T23:25:26Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsvjupdwez20ks6lg75dhr0q9d2lr20k0xydvut4zmhc2g0s7t9jlczyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tsmxewgy</id>
    
      <title type="html">If your first thought is, “maybe they never happened because we ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsvjupdwez20ks6lg75dhr0q9d2lr20k0xydvut4zmhc2g0s7t9jlczyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tsmxewgy" />
    <content type="html">
      If your first thought is, “maybe they never happened because we worried,” then a career in cybersecurity might be right for you.&lt;br/&gt; &lt;img src=&#34;https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/340/419/534/791/007/original/18ea6b18525a26d0.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2024-10-20T15:20:18Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsv2w2mfk8jq0g57rm0g4529f5htreqhvrxrty6xky9ma2csep46mczyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tsk6kttv</id>
    
      <title type="html">The Anarchist Cookbook. One of the kids brought home the ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsv2w2mfk8jq0g57rm0g4529f5htreqhvrxrty6xky9ma2csep46mczyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tsk6kttv" />
    <content type="html">
      The Anarchist Cookbook. One of the kids brought home the Cookbook. He paid $45 for the book. Anarchy, in this economy!?
    </content>
    <updated>2024-09-21T19:58:07Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqs8u23xrd40kxns4kt2cvh5j6ha4c06j5fuaerw833kycwyypsaamszyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tst70atd</id>
    
      <title type="html">Occam&amp;#39;s Razor: the simplest explanation, with the fewest ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqs8u23xrd40kxns4kt2cvh5j6ha4c06j5fuaerw833kycwyypsaamszyqq0e329d7762vuzjlpquvrmp0240z4mfpcth3cm5vwknwldzt8tst70atd" />
    <content type="html">
      Occam&amp;#39;s Razor: the simplest explanation, with the fewest assumptions, is the correct explanation.&lt;br/&gt;&lt;br/&gt;Wolf’s Electric Shaver: the silliest explanation, with the most dramatic dysfunctions, is the correct head-cannon.
    </content>
    <updated>2024-09-04T23:04:12Z</updated>
  </entry>

</feed>