Home | Notifications | New Note | Local | Federated | Search | Logout
Tindra@TindrasGrove@infosec.exchange
I may be the most certified person you’ve ever met. Years of IT experience in network management and security. Recently retired from the military. Interested in using creative channels, like games, to teach cyber risk to risk owners.
Cat picture booster. Multi-craftual. Unashamed public knitter.
Book Talk: @TindrasGrove
Avatar by @artbyleoniejonk
Website: https://www.tindrasgrove.com
BookWyrm: https://bookrastinating.com/user/TindrasGrove
Twitter (dormant): https://twitter.com/TindrasGrove
Pronouns: She/Her
Hair: Not Blue (yet)
Joined: 2026-07-23 16:16:44
14 notes, 0 following, 0 followers
Reply to @TindrasGrove@infosec.exchange
Tindra@TindrasGrove@infosec.exchange (2026-10-17 23:35:03)
@spacerog #JawnCon the things that are *actually* scary:
Agents with authority
Data poisoning
Human trust and automation bias
Security teams chasing hype
---Attachments---
image: https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/456/745/241/079/362/original/99a209924cc5a3e9.jpeg
Reply to @TindrasGrove@infosec.exchange
Tindra@TindrasGrove@infosec.exchange (2026-10-17 23:31:32)
@spacerog #JawnCon who benefits from defenders feeling hopeless behind?
Vendors.
Reply to @TindrasGrove@infosec.exchange
Tindra@TindrasGrove@infosec.exchange (2026-10-17 23:24:54)
@spacerog #JawnCon difference in having a bad day is what permissions an agent has, not its inherent behavior.
Don’t need new frameworks to deal with new tech, need to actually enforce the controls you supposedly have. The “basics”
---Attachments---
image: https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/456/705/314/381/532/original/65d5b6e191877116.jpeg
Reply to @TindrasGrove@infosec.exchange
Tindra@TindrasGrove@infosec.exchange (2026-10-17 23:16:59)
Now @spacerog talking about AI. It’s great at things that are documented processes?
…but how much of your job is well-documented? Or even *can* be documented?
#JawnCon
Reply to @TindrasGrove@infosec.exchange
Tindra@TindrasGrove@infosec.exchange (2026-10-17 04:24:55)
@mttaggart #JawnCon threat actors largely aren’t attacking industries; they’re attacking technologies.
There just happens to be clusters of who purchases what tech that happens to align with industry in some cases.
Reply to @TindrasGrove@infosec.exchange
Tindra@TindrasGrove@infosec.exchange (2026-10-17 04:13:38)
@mttaggart inspiration for idea of threat intelligence is mutual aid (TIIMA): seeing mutual aid happen in LA, sharing observations (intel) about ICE to help neighbors (mutual aid)
---Attachments---
image: https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/452/178/374/400/233/original/7066cc3f9a62cb07.jpeg
Reply to @TindrasGrove@infosec.exchange
Tindra@TindrasGrove@infosec.exchange (2026-10-17 04:08:26)
@mttaggart talking about the “Clancification” of threat intelligence, where it tries to make you feel like you’re part of story (whether or not this is remotely true or relevant to you) #JawnCon
Reply to @TindrasGrove@infosec.exchange
Tindra@TindrasGrove@infosec.exchange (2026-10-17 02:36:40)
#JawnCon George Sanford talking about lessons learned from working physical security. There’s a benefit to having a line at the door because it gives a chance to see how people react when frustrated (standing in line). Can spot problematic behavior early, before people get drunk.
Worth doing the same in your hiring process to avoid hiring “brilliant jerks”
(I’m reminded of the “see how a prospect treats service workers” test)
Reply to @TindrasGrove@infosec.exchange
Tindra@TindrasGrove@infosec.exchange (2026-10-16 23:51:07)
@mattblaze #JawnCon
Why can I bank on my phone but not vote on my phone?
Because we can reverse financial transactions, but (because secret ballot) we can’t undo votes.
Reply to @TindrasGrove@infosec.exchange
Tindra@TindrasGrove@infosec.exchange (2026-10-16 23:18:41)
@mattblaze talking about how most security problems are “identify bad”, but in election security you have to “ensure good”, and that’s not the same thing. #JawnCon
Reply to @TindrasGrove@infosec.exchange
Tindra@TindrasGrove@infosec.exchange (2026-10-16 22:57:47)
If you see me say hi! #JawnCon
---Attachments---
image: https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/450/936/361/183/036/original/73664cb53359d777.jpeg
Tindra@TindrasGrove@infosec.exchange (2026-10-16 22:48:11)
#JawnCon encouraging bedazzling of buttsets.
Words never before uttered in that order!
Tindra@TindrasGrove@infosec.exchange (2026-10-11 05:54:43)
The Onion is looking for back issues so they can be properly archived (and they’re willing to buy them off you if you have them)
https://theonion.com/archivehunt/?
Tindra@TindrasGrove@infosec.exchange (2026-07-23 06:57:39)
I’m gonna need everyone in security to internalize this.
Hell, my local country fair (y’know, the place where you can submit your veggies to go on display and get judged and get ribbons and shit) is requiring online registration.
Guess how many people that’s locking out? How many of the people whose submissions are what keep the exhibitions going don’t have emails or cell phones?
If your solution doesn’t work for my friend who can only be reached via landline phone or mail, it doesn’t work.
---Attachments---
image: https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/965/864/567/106/093/original/b46cf34c0f07ca82.png