So far this year 40% of my contracts have been a recovery from a Shai Hulud like attack. That’s in the area of 750k profit and more spent by the companies.

The instability and security issues that come of relying on the software supply chain has been pointed out for around 30 years. Seriously, go look. Multiple articles have pointed out the problems we’re seeing.

I used to ask the same question on behalf of clients but after multiple non-answers and silence my response now is just put something between you and GitHub that you can control.

▲

vemv a day ago | parent | next [-]

Hi ofjcihen, where can I learn more about your professional services?

▲

ofjcihen a day ago | parent [-]

I use this account as an outlet not tied to my actual consulting work so unfortunately I can’t point you to that.

Also, the way I do business is more along the lines of “word of mouth” if that makes sense.

I can tell you though that it’s nothing special. I lead IR operations through compromise to recovery and also train. It’s a “let’s get you out of this and make sure it doesn’t happen again” approach.

	▲	vemv a day ago \| parent [-]
		Thanks! I would enjoy a brief exchange, can you hit me up at <username> at <username> dotnet?

▲

simoneree 21 hours ago | parent | prev [-]

[flagged]