That is a kind of a bumpy ride. You cannot predict markets (as I kind of heard/learned). Not sure energy footprint producing something virtual (which can disappear ... i.e lost key) is the way to go. I guess good for speculation on "nothing". Still would be good to have little bit of this high tech stuff (diversification ... if gold melts and paper burns and property collapses). I would not put all the eggs in this basket though. Tech is just tech. Systems, operators, algorithms (all can change, have bugs). All eggs in this basket can be cathastropical. Just realized that the worst would be if ppl do not buy anything but just keep gold, paper and property not used (profitable). But I think this is a no-brainer, or? Just a random Monday though inspired by recent DM
State of Software Security 2024 by Veracode has some very interesting insights by organizations using tools and methodologies to reduce/find security issues. Summary: Half drop of findings since 2016, usage of one or more tools significantly increases detection of critical severity flaws. Use tools, many of those, unify, deduplicate. Create feedback loops for devs #devsecops P.S wondering how it compares to past decade. I started my journey back then
Looking for guest blog posts/posts about DevSecOps/Cybersecurity for my blog. Must follow, please reply "connect" and I will get back with more #devsecops #cybersecurity #blog
Thank you @wiz_io for including Betterscan in your Code Security tool roundup article. Great company of tooling and tech out there.
Removed the names to respect privacy. I take it as a fact (cannot verify the source). You do not need fancy Platforms, Project, Programmes. I would start with using Open Source tools. Basics will bring you far. DM me if you want to learn more. #DevSecOps
Betterscan.io has now sample integration code to integrate with Vanta.com platform and upload scanning results of Code and Cloud files (ca. 6,000 checks) using State of the Art tools (de-deplicated, unfied, with state). Scan will be done with "On Premise" Betterscan instance. No need to upload code anywhere. Sample code based on your API Docs: github.com/marcinguy/betters… #vanta #security #compliance #code #cloud #sast
"PrivateGPT" from @ivanmartit is a great project. Try to use it via REST API in betterscan.io so users can scan/audit code and files using private LLM setups also #privategpt #gpt #llm
From yesterday's "hacking" ... dl.betterscan.io/ai-scan-cod… Some toy model to scan code using AI. Send code, receive JSON with findings. Please do not abuse. Server is small and slow. Toy setup. Trained for common/major tech, your mileage may vary. For real projects use betterscan.io PRO with OpenAI GPT (optional). #ai #sast
