🌻 Director (Security) @github, Intel Nut, Dad, History Geek, Beer Dork | Opinions my own. | https://teapawt.net/t.co/uXHKfdAlt4
Maryland
Joined January 2015
- Tweets3.6K
- Following675
- Followers1.6K
- Likes2.5K
🚀 @github's work to better secure the first link in the software supply chain with 2FA was a three-year journey and I am thrilled to have led an amazing team to bring it to life. We made a ton of progress in 2023, but there's more to come.
github.blog/2024-04-24-secur…
If you're interested in learning more about how we're securing the software supply chain by bringing 2FA to millions of developers @github, grab a free virtual pass and check out our panel at #GitHubUniverse.
githubuniverse.com/?utm_sour…
ICYMI - This was a great chat about enrolling millions of @github users in 2FA, how user experience matters for security, and why culture _is_ a security control.
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
Talking 2FA at scale at @github as a means of protecting the software supply chain, starting with the developer. Thanks @MichaelNovinson!
This Post is from an account that no longer exists. Learn more
If security isn't usable, it isn't security at all! Really enjoyed my conversation with @iainthomson, cheers!
Shifting to multi-factor auth is hard to do, but GitHub recommends the long game dlvr.it/StTBms
This is what happens when the former incident responder coordinates your 2FA rollout 😂 Thanks @lilyhnewman, it was great speaking with you!
GitHub's gentle, deliberate journey to being total hardasses about mandating two-factor wired.com/story/github-two-f…
This week I had a chance to speak about @github’s 2FA enrollment campaign to help secure the software supply chain on the @ITSPmagazine Podcast with @sean_martin and @MarcoCiappelli. Had a blast discussing culture as it relates to Security.
redefining-cybersecurity.sim…
.@OptumRx Messing up the delivery of a potentially lifesaving medication that is time sensitive twice, and then asking a customer to wait a few more days so you can pinch your pennies is unacceptable. #incompetent #inhumane #corporategreed #awfulheathcare
This work has been my focus since September of 2021. It's challenging and deeply impactful work I share it with a wonderful team of product, engineering, security, support, comms, and marketing folks who made the roadmap that led us here possible.
On March 13, we officially begin rolling out our requirement for all developers who contribute code on GitHub.com to enable 2FA by the end of 2023 ✨ Learn about the process & how you can help secure the software supply chain with 2FA: github.blog/2023-03-09-raisi…
An update on how GitHub will bring 2FA to millions of developers in 2023 as part of our work to ensure a more secure software supply chain: github.blog/2022-12-14-raisi…
@[email protected] retweeted
I’m hiring! GitHub is looking for a Senior Docs Manager to help one of our three core teams of technical writers thrive in our friendly and well established crossfunctional org.
boards.greenhouse.io/github/… – at California, USA
Interesting in leading detection, response, and platform moderation capabilities at web scale? Join us!
boards.greenhouse.io/github/…
I didn't have "defend democracy" on my work goals list when I joined GitHub, but I've had a number of real opportunities to do so in my time here. Grateful to our fantastic CELA/Policy teams for their leading work in this space.
Communities are key to steering digital transformation and maintaining societal infrastructure. That's why we work with like-minded organizations, governments, and civil society to make digital technologies work for democracy and human rights. github.blog/2022-09-21-why-w…
Myles is my partner in anti-crime for this project and I'm excited to hit a home run with him and the rest of the amazing team of engineers, product professionals, comms folks, security practitioners, and field and support teams @github.
After a number of years in IR, this project is deeply fulfilling. The opportunity to help normalize and improve 2FA to secure the software supply chain is the opportunity of my professional lifetime.
Securing the software supply chain begins with the developer and we’re committed to raising the bar on account security. Today we’re announcing that users who contribute code on GitHub.com will be required to enable 2FA by the end of 2023. github.blog/2022-05-04-softw…