Buckley's Syrup - It taste's awful. And it works. youtube.com/watch?v=XIVvV0cF…

Thanks Davey! Happy Friday to all from sunny Boston! #FF #FridayFeeling

Trying to understand where to invest budget for security efforts? The Building Security in Maturity Model (BSIMM) 10th edition is now available! Download BSIMM10 to learn how #DevOps adoption had a big impact in this year's report. ow.ly/nGOZ101MbEy

@QuinnyPig calmly waiting for an interview to start at #KubeCon

By 2020, over 50% of orgs will be running containers in production #docker

Calm before the storm. Black Duck Flight 2018 about to start. #bdsflight @SW_Integrity @black_duck_sw

High performers want to learn and grow. If you are a God on your team, your team is at risk and you might not grow. #deliveryofthings #devsecreglegalops #DevOps

The puppies are arriving #OSSummit

Tainted containers, news you don't want your company to be linked to. Know what's in your container at build time and minimize your risk. @chrisvantuin @SW_Integrity #DevOps #ContinuousDelivery #containers

Getting ready for tonight's Bay Area Cyber Security Meetup. Great group tonight to talk open source. #BACSM #DevSecOps #opensource @black_duck_sw @SW_Integrity @RedHat @chrisvantuin

@JamesBulpin @DavidCottingham @xenserver @xenorchestra Been ages since I've seen a Dundee shirt, but today was that day. #ossummit

If you don't have smoke tests in your CI, you really don't know if your product works under ideal conditions. Start there, then get fancy. #OSSummit #DevSecOps #continuoustesting

Think you know your code? Think you've tested your code? What percentage of the code you require is yours? If you can't answer that question, then you likely haven't tested it as well as you think. #OSSummit #DevSecOps #DevOps /cc @black_duck_sw @SW_Integrity

Toyota defines open source risk as copyright and patent risk. If anyone in your software supply chain doesn't understand their risks and responsabilites that could become your problem. Start by defining your acceptable risk policy. #OSSummit

Connected car could overwhelm existing cloud solutions with the volume of data. Wow. #OSSummit

Overall data flow in connected vehicles spans organizations and use cases. Security must be part of the entire software supply chain including value add from third parties. #OSSummit @EventsLF

The majority of the world runs a kernel.org kernel, not a corporate kernel. Don't get clever and create a Franken-kernel. Don't cherry pick. More toys on running secure systems. #OSSummit

One of the big things I learned today; Linux kernel and Microsoft kernel developers talk. Hugely positive for security issues like Spectre and Meltdown. Hardware issues mean we'll be fixing these for a long time. #OSSummit