Matt Linton :donor:

Professional: DFIR / Incident Management lead

Volunteer: Search & Rescue specialist, CERT trainer, Parrot handler

Amateur: Cello & Guitar

(was: 0xMatt on twitter)

Twitter:: 0xMatt
Website:: foofus.com
Keybase:: amuse

Public Key

npub16khk2fvaspfux206gfwy9adq9unw9jgytmjt58ryluclts862gdsdzf9v0

NIP-05 Address

amuse_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqsdttm9ykwcq57r98ayyhzz7ksz7fhzeyz9ae96r3j07v04cra9yxcppamhxue69uhkummnw3ezumt0d5q3gamnwvaz7tmjv4kxz7fwv3sk6atn9e5k7k673v6

Publishing to

nostr.mom

relay.damus.io

nos.lol

Author Public Key

npub16khk2fvaspfux206gfwy9adq9unw9jgytmjt58ryluclts862gdsdzf9v0

Show more details

Last Notes

2026-10-26 15:14:38 UTC

Gonna sound like an old, but... I remember when 15% was a good sit-down restaurant tip, 10% for "meh" service, 20% "I want to impress my date with my generosity".
Having a Square reader ask me to pick between 18%, 22%, or 25% at a coffee kiosk is tip-culture inflation at work.

2026-10-24 02:57:52 UTC

Wife and I are watching "Alien" (1979) and it's hilarious how the entire movie could just have been titled "Stuff would have been fine if any of the men on the ship were willing to listen to a woman" LOL

2026-09-15 23:24:22 UTC

I was invited to a very fancy restaurant yesterday for dinner, and I think I now understand why rich people still seem to be so unhappy.
Dessert was one square inch of cake, with gold leaf on it. And everyone had to pretend that they were super happy about that.

2026-09-05 23:19:24 UTC

I thought AI was supposed to help me gain an edge over the attackers
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/220/990/257/049/493/original/a03be8737332d8a6.png

2026-06-20 18:41:11 UTC

- reply

Gemini's answer didn't say the providers are unaware of these techniques or that they don't leave artifacts.
My understanding of abuse algorithms in practice is usually that there's not always _easy_ artifacts of abuse and there's usually a pool of data that indicates, but doesn't prove, abuse - which you have to tune carefully to make sure you don't false-positive-out real customers, and that usually means accepting and responding to some low-enough-to-still-be-profitable levels of abuse.
That all seems to match, from what I can tell.
Maybe someone on this platform who knows Instacart abuse systems can shed some light?

2026-06-20 18:30:23 UTC

- reply

Ah, I asked Gemini and it seems like there's known scam details:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/783/854/924/741/295/original/a5be30ffa04f4b32.png

2026-06-20 18:22:38 UTC

- reply

Oh, absolutely!
My definition of "did the scam work" isn't whether the customer lost money though, it's whether the scammer got an enduring payout. So I wonder how this one actually works on the back-end. :D

2026-06-20 18:01:15 UTC

- reply

I mean "must" obviously doesn't count in this situation though, because they didn't do that thing and yet still got the money.
I'm wondering if maybe there's a fraud situation where someone figured out how to GPS spoof their app, create a fake identity, and is literally sitting there in some remote country faking deliveries for a day until they get caught and disabled but still running away with the money in the meantime?
I don't know enough about how the supply side of Instacart works to game through the scam here, but there's clearly a scam here because they DID accept my order, I did get charged (and later refunded), and they did provide a streetview photo of the house as their "proof".

2026-06-20 04:53:17 UTC

- reply

I think the apps that shoppers/deliver-ers use these days insist they provide A photo in order to "close out" their trip.

2026-06-20 00:51:47 UTC

I ordered some items on instacart and the shopper marked the delivery "Complete" - but it wasn't there. The photo they povided for "delivery location" is a photo of the garage door taken straight from Google Street View.
Are they hoping I'll assume it got stolen & not report it?

2026-06-01 16:28:37 UTC

I can't emphasize enough about how important it is for cybersecurity/tech folks to have an enjoyable hobby outside of tech (a physical one, if possible). It's amazing how one good solid firefighting drill day (or call!) improves my mood and attitude for _days_ afterward.

2026-03-25 17:51:35 UTC

One of my biggest worries today is that decreasing job security and declining volunteerism are going to multiply one another in ways that severely undercut the fabric of our country. An early indicator: The diminishment of volunteer firefighting.
https://www.nfpa.org/news-blogs-and-articles/nfpa-journal/2026/02/11/volunteer-fire-service-crisis
This trend is understandable. Who can afford to spend the time volunteering when the cost of living fast outpaces wage growth, and when job stability is low?

2026-01-11 06:00:44 UTC

- reply

I'm definitely thinking of the year where a big party room was roped off with a bouncer who told me that it was a "private event for government and active duty military only".
I'm guessing that was the satellite hacking thing.

2026-01-11 05:39:16 UTC

With all the things going on right now, I'm very very curious about whether #defcon will continue to have as close and cozy a relationship with DHS and the US Military as they have had in the last few years.

2025-09-13 16:11:07 UTC

Maui seems to be proving that banning short-term rentals actually does drastically reduce housing costs for locals.
https://beatofhawaii.com/maui-condo-market-collapse-what-it-means-for-travelers/

2025-08-26 16:35:24 UTC

I'm a model if you know what I mean
And I bake my GPU in the crosstalk
In the crosstalk
Yeah I bake my GPU in the crosstalk

2025-08-23 18:04:52 UTC

- reply

I, too, loved those three maniacs 🥳

2025-08-23 17:38:15 UTC

My friend was offended that I said meeting "Weird Al" was more meaningful to me than meeting Pres. Obama.
Obama was amazing but he didn't inspire me through my formative years when being weird was mostly looked at as being a violence-worthy offense to humankind. Weird Al did.

2025-08-10 04:05:42 UTC

Is this a store or a detective show?
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/002/490/377/393/911/original/94ff2c7f6855a00a.jpeg

2025-07-12 17:43:52 UTC

This NextDNS blocking UX feels like a trap.
It defaults to "on" and you have to either accept web censorship based on unknown third-party criteria OR essentially say "I DO want to see child abuse material".
It's the "Yes or no: do you still beat your wife?" of UX settings.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/841/500/512/565/889/original/f6bdc04535d6c744.png

2025-06-18 00:19:53 UTC

IOT: "This is great, the oven will tell me when it's preheated!"
(Later)
"Aw hell no, I do not like this."
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/701/499/987/235/876/original/6058421a55e4f088.png

2025-06-17 02:17:43 UTC

Bummer: I actually like to use em-dashes in my writing and now I can't because it makes my stuff look AI generated.
Excellent: I also habitually double-space after periods, and now that's a sure sign that I am human!

2025-06-08 18:22:58 UTC

Whenever a big company tells me my complex and long password "has expired and needs to be changed" and there was never any hint of password expiration periods before - I will automatically assume they have been breached and aren't admitting it.

2025-05-31 19:52:39 UTC

RIP To that amazing time in history when camera phones became ubiquitous and high quality enough for us all to see amazing rare things captured by lucky people, but before AI video became ubiquitous enough that everything amazing captured on video must be assumed to be faked. 😭

2025-05-27 03:02:32 UTC

Question, is it uncouth to solicit on LinkedIn for volunteer roles?
I'm trying to find an early-career tech helper for the bird rescue I work with. Happy to trade genuine mentorship in good faith for the work, but it's not a paid role.

2025-05-23 18:19:33 UTC

I can't shake the feeling, when I see AI music & video generators, that we have crossed the precipice of creating the "Versificator" machines from Orwell's "1984" and are now about to find out exactly how accurate his other prognostications were.

2025-05-18 18:44:45 UTC

"Mission creep" claims another victim today, as a family member of mine has chosen to disable emergency alerts entirely on their phone after being awakened by a mass alert for a missing elderly person 50 miles away.

2025-05-12 15:37:47 UTC

For the "Immigration enforcement isn't an issue if you're a US Citizen" crowd: I just received my first scam call attempting to convince me that they were US Border Patrol and had incarcerated my child and needed payment to release her.

2025-03-24 20:29:28 UTC

Trump on Hillary: "Her careless storage of emails could have caused security issues!"
Hegseth: "Hold my 13 empty beers."

2025-01-27 00:22:07 UTC

I have a hard time explaining what I do to non-tech folks b/c there is so muchcontext wrapped up in "Incident Response & Forensics for a global scale tech company."
DFIR folks: How do you explain your job to laypeople?

2025-01-15 00:32:16 UTC

Publicly announcing that the 5% of your employees you plan to lay off are the "lowest performers" is probably the meanest thing a company leader could do. First they lose their jobs, then the CEO intentionally tarnishes their reputation in the market so they can't find another?

2024-12-20 05:33:48 UTC

The hardest part of calculating time-to-payoff amortization for solar panels and battery storage in California, is that you have to recalculate it every couple months as PGE rugpulls everyone.
At this rate I'll be fully amortized by next June.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/683/518/502/166/889/original/81d86e2f87f036fe.png

2024-10-10 02:38:43 UTC

Juniors, here's why it's always better to raise your mistakes early and get help: You're very unlikely to be fired over a mistake you owned up to.
Me helping you fix your mistake is cheap.
Recruiting your replacement costs more.
But recovering from a cover-up is REALLY costly.

2024-09-03 16:22:33 UTC

Career tip: If you like those unboxing videos where somebody documents the entire process of getting something out of a package and turning it on, you will LOVE digital forensics.