ASID Software: Standard Security Controls for Web 3
While the security industry may disagree about most topics, there is no shortage of security control frameworks. NIST 800-53r5, NIST CSF, SOC, HIPAA, PCI, ISO 2700, and SASB. While those standards address everything from technical implementations to job descriptions, more niche frameworks have emerged. These include MITRE’s ATT&CK and Google’s SLSA, which provides software supply chain security guidance. None, however, address the needs of Web3. InfiniteSn4ke | Forkbomb | Helianthus For inter...
ASID Software: Standard Security Controls for Web 3
While the security industry may disagree about most topics, there is no shortage of security control frameworks. NIST 800-53r5, NIST CSF, SOC, HIPAA, PCI, ISO 2700, and SASB. While those standards address everything from technical implementations to job descriptions, more niche frameworks have emerged. These include MITRE’s ATT&CK and Google’s SLSA, which provides software supply chain security guidance. None, however, address the needs of Web3. InfiniteSn4ke | Forkbomb | Helianthus For inter...
WTAF is a DAO?!?!?
A DAO is a Decentralized Autonomous Organization. Well, that was simple wasn’t it? Job done. This has been my TED talk and thank you for coming! Queue the applause. Except, what does that actually mean? Or more importantly, what is it supposed to mean? What DAOs are today and what DAOs aspire to be couldn’t be more different. At the moment, the majority of DAOs operate in Discord servers with the only differentiator between any other Discord community being that members vote on proposals gene...
WTAF is a DAO?!?!?
A DAO is a Decentralized Autonomous Organization. Well, that was simple wasn’t it? Job done. This has been my TED talk and thank you for coming! Queue the applause. Except, what does that actually mean? Or more importantly, what is it supposed to mean? What DAOs are today and what DAOs aspire to be couldn’t be more different. At the moment, the majority of DAOs operate in Discord servers with the only differentiator between any other Discord community being that members vote on proposals gene...
Governance Hacking: Swallowing Your Own Poison Pill
If you’re in Web3, you’re on Twitter and probably all the time (not judging, because so am I). And if you’re on Twitter, you’ve been following Elon’s purchase of Twitter. Elon’s purchase agreement (still subject to regulatory approval) aims to buy all shares of Twitter and take the company private. With Twitter’s being private, there would be no pressures from Wall Street, investors, and public demand to see the stock price increase. On the other hand, as a private company, Elon would have co...
Governance Hacking: Swallowing Your Own Poison Pill
If you’re in Web3, you’re on Twitter and probably all the time (not judging, because so am I). And if you’re on Twitter, you’ve been following Elon’s purchase of Twitter. Elon’s purchase agreement (still subject to regulatory approval) aims to buy all shares of Twitter and take the company private. With Twitter’s being private, there would be no pressures from Wall Street, investors, and public demand to see the stock price increase. On the other hand, as a private company, Elon would have co...
