Sherrod DeGrippo πŸ¦“ Profile picture
Strawberry Tempest. Weird security voyeur. Vibe merchant. CISO of your heart. Official USPS fan account. πŸŽ‰ Host of THE Microsoft Threat Intelligence Podcast.
Aug 26, 2022 β€’ 16 tweets β€’ 4 min read
A lot of talk about threat modeling lately. Let me give you some idea of why I hate it and think threat modeling is bullshit. I'll also tell you what I think is better. I'm going to use $BIGCO as my example. Here's a long thread.
#infosec #blueteam #malware #skincare
πŸ”œπŸ§΅ First, you constantly hear the snarky refrain "my threat model is not your threat model" from people trying to sound important. They don't have a "threat model". They have a superiority complex in their head about potential "threats" πŸ™„ It's silly. Show me your threat model. πŸ”œπŸ§΅
Aug 19, 2022 β€’ 8 tweets β€’ 3 min read
The day after I got back from DEFCON, my dad texted me and said β€œI’m driving up tomorrowβ€œ. He lives in Florida. This is what he has been up to. Prepare yourself for the most dad thread you have ever seen. πŸ‘πŸͺ£βš οΈπŸ†—πŸ”œ He got here and within about 20 minutes he went to work. He randomly asked me to bring him a bucket. πŸͺ£ πŸ”œ
Apr 29, 2022 β€’ 10 tweets β€’ 2 min read
It's friday. Here is a 🧡 on communication choices that I think have paid off for me. 1/❓ πŸ”œ I avoid saying "yeah" when asked a question. I try to say "yes" and another affirmative statement. "Yes, definitely!" "Yes, I think so" "Yes, let's do it" "Yes, that's right" "Yes, I want to" and the old Office favorite "Yes, absolutely I do" πŸ”œ