Nostr notes by Adam Shostack :donor: :rebelverified:

To be fair computer science has this solved, where we write ...

2026-10-26T14:33:34Z

In reply to nevent1q…ky2p
_________________________

To be fair computer science has this solved, where we write \math{1=1} and move along, possibly with a \snarkyfootnote about edge cases. It’s software that’s screwed it all up. 😇

I’m very sorry!

2026-10-24T02:04:18Z

In reply to nevent1q…sudj
_________________________

I’m very sorry!

Let me congratulate infosec for really stepping up, this cyber ...

2026-10-23T19:32:50Z

Let me congratulate infosec for really stepping up, this cyber awareness month has been going gangbusters!

Let's not let up now, there's still a week of awareness to deliver!

"no one ever went bankrupt underestimating people's ...

2026-10-20T22:58:03Z

In reply to nevent1q…denr
_________________________

"no one ever went bankrupt underestimating people's intelligence?"

Kevin Beaumont (npub1lcc…lcye)

To be fair, they did spend inordinate* effort making it hard to ...

2026-10-17T10:15:22Z

In reply to nevent1q…jhdz
_________________________

To be fair, they did spend inordinate* effort making it hard to move your account.

*ok, technically, it was ordinate, but you know what I mean.

Curious what you found in terms of the libraries? Is there a ...

2026-10-03T19:08:45Z

In reply to nevent1q…ld90
_________________________

Curious what you found in terms of the libraries? Is there a table somewhere?

RE: https://infosec.exchange/@cR0w/117377754771371427 This is a ...

2026-10-03T18:14:20Z

RE: https://infosec.exchange/@cR0w/117377754771371427

This is a really great point: Accelerating the PQC timeline takes security budget from other priorities, like stopping directory traversal or SQLi.
nostr:note16wur9kv2nydtw57dj3wgphnahmsa32xmpk4wjgn3zvm296f6fjgq8y3tk5

RE: https://mastodon.social/@kralcttam/117336706374065569 ...

2026-09-26T18:53:34Z

RE: https://mastodon.social/@kralcttam/117336706374065569

We've replaced the bureaucratic impediment to rapid action, Stanislav Petrov, with an LLM as part of our strategy of "aggressively identifying and eliminating bureaucratic barriers to deeper integration."

I'm glad to hear that the US is adopting #SI, the System ...

2026-09-22T18:48:45Z

I'm glad to hear that the US is adopting #SI, the System Internationale of measurement, after 40 years of inch-by-inch progress.

Nostr event nevent1qqst3xa5vdkfr8ajm8zu3kmv0t5s4n46g9mqevsse9cx2hdtsp6phpqzyzrmpzl53htrnnewdsemgmucz345faqwqknfvf6qz2s4j33nnpph66l7jhw

2026-09-20T21:43:45Z

Nostr event nevent1qqs2682da5aqhk2flua9cdcxlep8y4eu7htcmtc0z690tqfhquw5lggzyzrmpzl53htrnnewdsemgmucz345faqwqknfvf6qz2s4j33nnpph6g4zajh

2026-09-20T15:39:54Z

My new photo is titled “Zoning.” #seattle ...

2026-09-18T01:59:05Z

My new photo is titled “Zoning.” #seattle

Who amongst us has heard of a state machine?

2026-09-17T15:31:53Z

In reply to nevent1q…q84u
_________________________

Who amongst us has heard of a state machine?

“Social media seems like a great way to have this conversation ...

2026-09-17T01:31:01Z

“Social media seems like a great way to have this conversation in a thoughtful and nuanced way.”

Give positive advice. Tell people what to do, not what not to do. ...

2026-09-12T00:16:49Z

Give positive advice. Tell people what to do, not what not to do.

For example, if you think there's an unsafe voting site out there, tell people "Go to vote.gov, not super-sketchy site run by someone I don't like. That site is really bad for reasons...."

Ok! I get it! Tell me what to do to be safe. (Go to vote.gov, or your local government website.)

> Tesla put its breathtakingly ugly Cybercab on Austin streets ...

2026-09-08T16:29:51Z

> Tesla put its breathtakingly ugly Cybercab on Austin streets Thursday: it has no steering wheel, no pedals, and no door handles. Tesla published an emergency guide on its website telling first responders the robotaxi can be pushed to clear a lane, but warns that pushing it over 5mph risks overheating the motor and electric shock. The car must be “caged” before interacting with it. And, “not every high voltage component is labeled.” The guide also says first responders should contact the company “via the car’s communications system or phone… If Tesla cannot be reached by phone, the manual advises first responders to use an email address to learn more about how to move the Tesla and warns, ‘This email is not monitored for emergency requests.’” [NBC News]

Nice summary from [@violetblue](https://mastodon.social/@violetblue ) https://www.patreon.com/violetblue/posts/cybersecurity-8-168939634

I have never regretted calling the police about crazy people.

2026-09-04T02:25:02Z

In reply to nevent1q…pf44
_________________________

I have never regretted calling the police about crazy people.

Or if air marshals are seen as low value and so: why not have ...

2026-09-03T01:07:33Z

In reply to nevent1q…w8g8
_________________________

Or if air marshals are seen as low value and so: why not have them try?

Isn’t lying to the police a crime?

2026-08-27T01:02:24Z

In reply to nevent1q…7tjx
_________________________

Isn’t lying to the police a crime?

Sorry, didn't mean to ask a burdensome sort of question. (I ...

2026-08-23T19:46:19Z

In reply to nevent1q…2fzm
_________________________

Sorry, didn't mean to ask a burdensome sort of question.

(I do think the contrast between you and Dio9sys (npub1n4k…jm05) is interesting ("That's not something that is sustainable long-term, though, as Internet Archive isn't really built to be load-bearing tech startup architecture. " vs "plenty of folx here that could probably archive most of the references in their homelab without break a sweat.") I wonder how much of that needs to be public infra.

Hey thanks for doing this work! I have a couple of questions: is ...

2026-08-23T16:23:38Z

In reply to nevent1q…80fa
_________________________

Hey thanks for doing this work! I have a couple of questions: is the CVE world better or worse than general web? Are there aspects of this which are worse for CVE than Wikipedia?

Nostr event nevent1qqs0lm79nxmrm45v6dsn7huf7plkjwvqfwjqceg6qpn9vlgv44f2yxgzyzrmpzl53htrnnewdsemgmucz345faqwqknfvf6qz2s4j33nnpph6cu49lw

2026-08-12T00:32:51Z

You now own 50% of “Prisoners of Love”

RE: https://mastodon.social/@jplebreton/117021737054965508 We ...

2026-08-02T15:00:14Z

RE: https://mastodon.social/@jplebreton/117021737054965508

We mostly replaced “caveat emptor” with product quality laws because it’s good for business and society to be able to expect products are fit for purpose.

quoting
note1v7v…z4yc

Flock managed a shocking 29% accuracy rate reading license plates, a product that puts people in jail, or worse: https://www.businessinsider.com/flock-camera-misread-license-plate-reader-california-roseville-police-2026-7
Tech companies will sell completely broken non-functional products when they think they can get away with it. "It doesn't work" should never be our only critique of tech, but it's vital to point out when something does not in fact work; we should never automatically concede their default claims that their products work perfectly or even reasonably well.

Just out of curiosity, is “our models commit crimes” a good ...

2026-07-31T02:55:16Z

In reply to nevent1q…rp4h
_________________________

Just out of curiosity, is “our models commit crimes” a good thing or a bad thing in early 21-st century capitalism?

I meant feeding junk into the advertising stream.

2026-07-30T17:14:33Z

In reply to nevent1q…7r57
_________________________

I meant feeding junk into the advertising stream.

So you're saying there's pros and cons? 😇

2026-07-30T17:11:57Z

In reply to nevent1q…sm96
_________________________

So you're saying there's pros and cons? 😇

Maybe it’ll work as well as the “report spam” button, where ...

2026-07-30T15:17:57Z

In reply to nevent1q…ypjc
_________________________

Maybe it’ll work as well as the “report spam” button, where the response is always “we have determined this doesn’t violate our community guidelines “

In 1990, telephony was on DHS’s list of critical national ...

2026-07-28T02:29:15Z

In reply to nevent1q…8mra
_________________________

In 1990, telephony was on DHS’s list of critical national infrastructure and the phone company could arrest phreaks.

You might talk to an allergist if you got swelling - when I had a ...

2026-07-27T18:30:14Z

In reply to nevent1q…mp4p
_________________________

You might talk to an allergist if you got swelling - when I had a bee sting swell up, I was told that there was an accumulation effect, and now carry an epipen, because it's better to have one on hand than $100 in the bank.

I mean, you say that, but when all your containment security is ...

2026-07-21T21:24:21Z

In reply to nevent1q…als2
_________________________

I mean, you say that, but when all your containment security is vibe-coded ...

I think it’s partially a function of follower count. .01% of ...

2026-07-19T00:49:06Z

In reply to nevent1q…hq9m
_________________________

I think it’s partially a function of follower count. .01% of followers annoyed at a post gets you more shit than it gets me, and then the dogpile function takes over

Wow. That’s … I’m sorry

2026-07-19T00:42:52Z

In reply to nevent1q…ce2n
_________________________

Wow. That’s … I’m sorry

I feel you. I’ve watched a number of folks leave recently over ...

2026-07-19T00:36:21Z

In reply to nevent1q…dvll
_________________________

I feel you. I’ve watched a number of folks leave recently over the incessant correcting, demands and other unpleasantness. Wish people would stop driving others away.

20 years ago, Firefox used to impose a delay before you'd ...

2026-07-17T23:58:38Z

20 years ago, Firefox used to impose a delay before you'd install an extension. That went away, and I'm trying to figure out when and why. Does anyone remember? (A variety of searches around "firefox delay extension" and "security.dialog_enable_delay" aren't getting me anywhere.

Old behavoir: https://www.razumny.no/?p=30

RE: https://federate.social/@mattblaze/116932071020131917 Matt ...

2026-07-17T01:35:18Z

RE: https://federate.social/@mattblaze/116932071020131917

Matt Blaze has taken a bullet for y’all by compressing 90 minutes of speech into this summary

quoting
note1qvy…48lj

Trump's wishlist for election security "improvements" is a mix of actually good nonpartisan measures advocated for by experts (prioritizing the use hand marked paper ballots) and nakedly partisan restrictions on voting (cumbersome citizenship verification, restrictions on mail-in voting, etc), plus some crazy stuff that's not particularly partisan, but not helpful, either.

You post your stuff behind a paywall, in the very off chance ...

2026-07-15T02:18:42Z

In reply to nevent1q…5k2d
_________________________

You post your stuff behind a paywall, in the very off chance that… your attacker lives in an age-gate country and Bluesky won’t let them in?!?!

This seems to me like the social media version of elsevier. ...

2026-07-15T02:15:12Z

This seems to me like the social media version of elsevier.

We'd offer to let @npub12ts…x422 contribute $25b in AI red ...

2026-07-12T20:46:33Z

In reply to nevent1q…359j
_________________________

We'd offer to let Jeff Moss (npub12ts…x422) contribute $25b in AI red teaming, but he might actually do it, and then we'd have to fire our head of safety, and OpenAI hasn't provided a reliable hire in... oh, today! DT, you're totally in if you want to be.

Excellent! I'm pretty sure that means, as AI-leading ...

2026-07-12T20:32:00Z

In reply to nevent1q…jnzv
_________________________

Excellent! I'm pretty sure that means, as AI-leading entities, we can reasonably claim unicorn status and charge accordingly when we totally not-at-all fraudulently sell to the nearest not-a-sucker Qualified Investor.

I’ll sell you owasp* if you sell me bsides and are willing to ...

2026-07-12T19:43:50Z

In reply to nevent1q…djc3
_________________________

I’ll sell you owasp* if you sell me bsides and are willing to commit to $10b in token usage over the next 5 years.

*yes, I get offers to invest in owasp, sorta routinely.

Hey, for malware command and control, is the term "C2" or ...

2026-07-09T22:52:01Z

Hey, for malware command and control, is the term "C2" or "C+C" now preferred? Google Ngrams says c+c, but goes so back to the 1800s with that. Chatgpt says C2, but it's an LLM.

(A cite to a styleguide would also solve my problem; I don't need to be perfect, I need to be defensible.) NIST lists C2, but not C+C https://csrc.nist.gov/glossary/term/c2; Crowdstrike uses C&C https://www.crowdstrike.com/en-gb/cybersecurity-101/cyberattacks/command-and-control-cac-attack/?utm_source=chatgpt.com

RE: https://mstdn.social/@Nickiquote/116857607628831195 This is ...

2026-07-03T21:58:22Z

RE: https://mstdn.social/@Nickiquote/116857607628831195

This is ridiculous. Everyone knows that mayo is eggs and oil, so the basic building blocks of the universe are eggs, oil and ketchup.

Sheeeeeesh!
nostr:note1n930uldt9jwpn00g5zlqesjtgyv7pat0m9yxclp4s2v7pxyzp3zqeju7ys

RE: https://epsilon-ix.masto.host/@fuzzface/116836749601283569 It ...

2026-06-30T02:54:52Z

RE: https://epsilon-ix.masto.host/@fuzzface/116836749601283569

It burns through!

quoting
note1ez6…un2k

Available at your local grocery store… Wendy Nather (npub1udn…3tjr) :rainbowCrow: (npub1s6e…n008) GAYINT :yassquatch: (npub1ezn…nyq3)

(Borrowed from @npub1l48…te4g ) needs more whiny Luke ...

2026-06-22T15:35:39Z

(Borrowed from KidKo92 (npub1l48…te4g) ) needs more whiny Luke

Maybe nist could write a standard for that!? Seems easy.

2026-06-12T02:28:57Z

In reply to nevent1q…rvms
_________________________

Maybe nist could write a standard for that!? Seems easy.

“Followed the LETTER OF THE law” is certainly an interesting ...

2026-06-09T01:22:00Z

In reply to nevent1q…3a7w
_________________________

“Followed the LETTER OF THE law” is certainly an interesting phraseology.

2fas?

2026-06-05T02:21:49Z

In reply to nevent1q…ks78
_________________________

2fas?

Heads up everyone, a new usable security captcha just dropped. ...

2026-05-31T20:39:31Z

Heads up everyone, a new usable security captcha just dropped.

"Please confirm you are a human by completing the captcha challenge below.
Enable JavaScript and cookies to continue"

RE: https://c.im/@cdarwin/116637056362436221 If only we had some ...

2026-05-26T01:30:54Z

RE: https://c.im/@cdarwin/116637056362436221

If only we had some sort o , I dunno, cyber something review board, maybe we could draw some sort of line front other points to this point and maybe… work with me here… ask if Microsoft is putting security first?

quoting
note18pq…uqm8

The FBI issued a warning on May 21,
as a new AI-powered attack enables
"threat actors to obtain Microsoft 365 access tokens and bypass multi-factor authentication (MFA) protocols without intercepting the user's credentials.”

Dubbed Kali365, this phishing-as-a-service threat was first discovered last month.
The FBI released its public service announcement “to warn the public"
that these attacks use Microsoft’s authentication infrastructure to steal user credentials
https://www.forbes.com/sites/zakdoffman/2026/05/25/fbi-warns-microsoft-users-new-attack-gains-access-to-accounts/

Wow, understanding the Pope's 42,000 word message really is ...

2026-05-25T17:12:45Z

Wow, understanding the Pope's 42,000 word message really is going to chew up a lot of tokens.

NYT Obituary for Peter Neumann had many facts I didn't know. ...

2026-05-18T00:13:50Z

NYT Obituary for Peter Neumann had many facts I didn't know. (Gift version.)

https://www.nytimes.com/2026/05/17/obituaries/peter-g-neumann-dead.html?unlocked_article_code=1.jFA.AYUE.F9jbVDQh-Cye&smid=url-share&fbclid=IwdGRjcAR3NVlleHRuA2FlbQExAHNydGMGYXBwX2lkCjY2Mjg1NjgzNzkAAR5xEPf95pE8ZhCmX5iHMcHW8VSdjUd7urumIFs4kIYzeRTLcN35N_OBU6pV9w_aem_Tuc3-_r2N0KF8oQQVggHJA

https://kevinpatel.xyz/posts/no-way-to-prevent-this/ 🔥

2026-05-16T19:10:06Z

https://kevinpatel.xyz/posts/no-way-to-prevent-this/ 🔥

Nostr event nevent1qqs2u485xls4250zzmm4g92ync453myphvglmahmj0rnj07ldvy5gqqzyzrmpzl53htrnnewdsemgmucz345faqwqknfvf6qz2s4j33nnpph6nfc8cn

2026-05-07T20:58:52Z

In reply to nevent1q…kfe6
_________________________

"scheduled"

RE: https://zeppelin.flights/@glennf/116517975867201431 This is ...

2026-05-05T15:17:05Z

RE: https://zeppelin.flights/@glennf/116517975867201431

This is certainly the high-water mark for application naming!
nostr:note10yvgz6am3pxaaa3ag9ee4cfvpprzm62vgsapftg5wge8z8ysggxsxlcqkd

How’s your evening going? Mine is … watching @1Password and ...

2026-04-24T02:35:35Z

How’s your evening going?

Mine is … watching @1Password and Apple password fight over who gets to login to the Alaska app to the point of locking my account and I don’t even remember why I last had to change my password and now I remember why everyone hates security.

First day on the Bluesky infrastructure team! I hooked up ...

2026-04-16T21:55:02Z

First day on the Bluesky infrastructure team! I hooked up OpenClaw, and it has some amazing ideas about scaling and optimization!

🎼 "Something for rich men, something for poor men, ...

2026-04-15T01:20:02Z

In reply to nevent1q…cr8u
_________________________

🎼 "Something for rich men, something for poor men, something for everyone...a comedy tonight!"

Nostr event nevent1qqs8d57kge9c5d400u9x63080rnugzgdx9466vtsxg0emtlhupq0r5szyzrmpzl53htrnnewdsemgmucz345faqwqknfvf6qz2s4j33nnpph6w30xrv

2026-04-04T16:36:01Z

Agency obviously includes the right to repair. The right to ...

2026-03-25T20:19:48Z

In reply to nevent1q…r8uk
_________________________

Agency obviously includes the right to repair. The right to repair must include the right to interoperate and build new clients. Looking at Slack, discord, and so many others.

Nostr event nevent1qqsfzpkzrwk8nqw92v3freypmf4ypqpm49wqukq056hqxt0c6gld5pgzyzrmpzl53htrnnewdsemgmucz345faqwqknfvf6qz2s4j33nnpph6afz49x

2026-03-23T01:02:52Z

Howcome ICE is getting paid while TSA isn't?

... It's ... overinflated.

2026-03-11T23:57:15Z

In reply to nevent1q…z96y
_________________________

... It's ... overinflated.

If I were to recommend one cryptography book for implementors in ...

2026-03-10T16:47:40Z

If I were to recommend one cryptography book for implementors in 2026, would it be:

Has Jack Dorsey ever run a profitable company? That seems sort of ...

2026-02-27T04:37:55Z

Has Jack Dorsey ever run a profitable company?

That seems sort of relevant in evaluating his claim that AI changes everything.

To be fair, maybe "delete my inbox" is acting in ...

2026-02-23T16:27:46Z

In reply to nevent1q…2lzz
_________________________

To be fair, maybe "delete my inbox" is acting in accordance with human interests? 🤣

Nostr event nevent1qqs8xvlkxmfea2sr2efsw66v7d049szn6zt2njgnzcc8kcs9a4gk4jqzyzrmpzl53htrnnewdsemgmucz345faqwqknfvf6qz2s4j33nnpph65yh79p

2026-02-18T00:00:04Z

Goddamn "private mention" is hard to use safely.

If anyone has a list of mastodon profiles for those authors, ...

2026-02-07T18:50:43Z

In reply to nevent1q…55fr
_________________________

If anyone has a list of mastodon profiles for those authors, I'd be grateful.

Locus's 2025 recommended reading list is now available at ...

2026-02-07T18:26:08Z

Locus's 2025 recommended reading list is now available at https://locusmag.com/2026/02/2025-recommended-reading/ -- lots of authors I like where I'd missed their releases.

I believe there’s a correlation between “running Telnet in ...

2026-01-22T21:15:36Z

In reply to nevent1q…tt9s
_________________________

I believe there’s a correlation between “running Telnet in prod” and “would fail to notice a bull in their china shop”. I’ve absolutely seen attackers use a lack of encryption (found sniff.c where it shouldn’t have been) would they use it today? Who knows.

I hear your 1970s remote access program has a problem other than ...

2026-01-22T20:44:52Z

I hear your 1970s remote access program has a problem other than it was designed in the 1970s and isn't encrypted or authenticated?

A few years ago, I discovered that macos had stopped shipping /usr/bin/telnet and no one noticed, and there's a reason for that.

If -froot is a concern, please ask why.

When you say “do I trust” I’m pretty sure they’re public; ...

2026-01-18T19:42:50Z

In reply to nevent1q…pxk9
_________________________

When you say “do I trust” I’m pretty sure they’re public; they’re aggregated on https://clearsky.app/.

Agencies like NASA, the Peace Corp, and the global support and ...

2026-01-18T00:27:06Z

Agencies like NASA, the Peace Corp, and the global support and assistance offered by the CDC, the NTSB and plenty more are America putting our best foot forward.

They were the core of our soft power and our ability to win friends and influence people — another American idea that was so good that we forget where it came from.

aww, sorry

2026-01-13T23:22:40Z

In reply to nevent1q…x8z8
_________________________

aww, sorry

vscodium is vscode without the crap.

2026-01-13T23:15:16Z

In reply to nevent1q…2qrv
_________________________

vscodium is vscode without the crap.

They... vested.

2026-01-12T22:30:35Z

In reply to nevent1q…zmlx
_________________________

They... vested.

Nostr event nevent1qqstp7ye4vf52peaxswg0th3pc3nwfqrcgwa0hecnw4n98095vs73cszyzrmpzl53htrnnewdsemgmucz345faqwqknfvf6qz2s4j33nnpph6auphtj

2026-01-11T02:31:57Z

start with gratitude that they included you and spelled your name ...

2026-01-06T19:16:53Z

In reply to nevent1q…e2s8
_________________________

start with gratitude that they included you and spelled your name right! 🤣

My editor is probably going to ask me to change this sentence, so ...

2025-12-26T21:38:18Z

My editor is probably going to ask me to change this sentence, so I'll share it with you.

"If you have no privilege escalation issues because you’re already running as root fucking fix that shit."

I've been thinking about #GPS jamming and radio waves. Could ...

2025-12-21T18:39:42Z

I've been thinking about #GPS jamming and radio waves. Could jamming activity bounce off the ionosphere and impact other areas?

I somewhat expect that the frequencies in use are designed to go through the ionosphere, and so "no," but also finding bits about scintillation causing accidental errors.

Eg, https://novatel.com/tech-talk/ionospheric-scintillation/redundancy-and-resiliency-against-ionospheric-scintillation

and https://agupubs.onlinelibrary.wiley.com/doi/full/10.1029/2024SW004217 shows 3d errors of up to 30 meters

If I understand this morning's news properly, we're ...

2025-12-19T15:20:47Z

If I understand this morning's news properly, we're invading Venezuela because they nationalized some American oil company's assets and gave it to Venezuelan companies. In unrelated news, America has nationalized TikTok and given it to American companies.

https://fortune.com/2025/12/18/venezuela-oil-trump-chevron-seized-assets-blockade/

https://www.bbc.co.uk/news/articles/cgexp1q8wn1o.amp

I know there's a long academic literature on the question of ...

2025-12-08T00:12:12Z

I know there's a long academic literature on the question of "do programmers make similar mistakes." Has that work been extended to security? Do programmers make the same sorts of security mistakes when writing similar programs?

I love Roddenberry's aspiration for the future, especially ...

2025-12-07T18:17:40Z

In reply to nevent1q…e82w
_________________________

I love Roddenberry's aspiration for the future, especially the radical acceptance that people are created equal and should be treated with respect and compassion, even if they're black or blue or have green blood. I love the way he used science fiction to tell stories about the current day in ways that TV wouldn't otherwise do.

Of course at some point, prioritization of society's resources becomes a source of conflict even if it's no longer over food or shelter, and I think he chose to not grapple with those problems to focus on the possibilities.

I wasn't aware that you'd worked on that film! Is it a ...

2025-12-07T17:12:40Z

In reply to nevent1q…zefp
_________________________

I wasn't aware that you'd worked on that film! Is it a story you've told?

Star Trek has no freakin’ idea about how tech works, part ...

2025-12-07T16:57:00Z

Star Trek has no freakin’ idea about how tech works, part 1701/♾️ https://mastodon.fixermark.com/@mark/115668489113085020

If you’re serving a big meal today, take a second to garnish. ...

2025-11-27T20:00:07Z

If you’re serving a big meal today, take a second to garnish. The little bit of work will delight your guests and make everything look more appetizing!

Perhaps the most amazing aspect of this story is that they ...

2025-11-25T01:01:34Z

In reply to nevent1q…a2nq
_________________________

Perhaps the most amazing aspect of this story is that they (twitter) knew because they were sending money, and no one stood up to say “hang on”

Don't skip the CSRB please.

2025-11-20T22:30:15Z

In reply to nevent1q…8s44
_________________________

Don't skip the CSRB please.

If this really works, I'm ready to go back to thinking like ...

2025-11-14T15:52:53Z

In reply to nevent1q…6f0f
_________________________

If this really works, I'm ready to go back to thinking like an attacker!

🤣

(cc Viss (npub12as…yvvc) )

Nostr event nevent1qqspa6yz5ew57c4a8geuhdzlu7ga83zgpndqkk590x2nh29msgdz0hczyzrmpzl53htrnnewdsemgmucz345faqwqknfvf6qz2s4j33nnpph62ll7ur

2025-11-13T02:33:15Z

We have always been at war with Venezuela.

The word “selling” may be doing a lot of work in the sentence ...

2025-11-04T14:43:02Z

In reply to nevent1q…2je3
_________________________

The word “selling” may be doing a lot of work in the sentence “we are not selling your data to the us gov”

Have they retracted it? Their press office ought to know.

2025-11-01T01:07:37Z

In reply to nevent1q…mp7w
_________________________

Have they retracted it? Their press office ought to know.

No, the movie is not all about how a drone army is a bad idea... ...

2025-10-25T22:03:14Z

In reply to nevent1q…c04y
_________________________

No, the movie is not all about how a drone army is a bad idea... it also (checks notes) talks about the evils of tariffs, and how power without responsibility will corrupt people.

Indeed! Change is hard and it's easier to be distracted. ...

2025-10-15T16:40:04Z

In reply to nevent1q…2gje
_________________________

Indeed! Change is hard and it's easier to be distracted. Still, I think the numbers for adblocker adoption are pretty stunning and tie back to the very visible improvement in speed and web page functionality.

I think your assessment of "pretend to care, but ...

2025-10-15T15:31:11Z

In reply to nevent1q…r2mt
_________________________

I think your assessment of "pretend to care, but don't" is wrong.

20% of users have an ad blocker, 10% pick a 401k if not the default.

Everyone make sure your pi-hole is blocking jeep, and shame ...

2025-10-12T15:33:14Z

In reply to nevent1q…2nrt
_________________________

Everyone make sure your pi-hole is blocking jeep, and shame anyone who hasn’t installed Linux on theirs? 🤷

"I have just signed a deal which will keep the Empire out of ...

2025-09-27T18:22:46Z

In reply to nevent1q…707w
_________________________

"I have just signed a deal which will keep the Empire out of Cloud City forever."

“Modern attackers are using ai to drive undetectable ...

2025-09-20T21:10:36Z

“Modern attackers are using ai to drive undetectable attacks!”

Modern attacker, “nah this works fine”

It’s a small thing but Alaska Air no longer has any scotch, ...

2025-09-19T02:19:46Z

It’s a small thing but Alaska Air no longer has any scotch, because tariffs.

Looking briefly at this work ...

2025-09-18T15:30:31Z

Looking briefly at this work https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/ do I understand right that a root cause is that Microsoft rolled out Azure with symmetric authN and each machine has, not the public key associated with the actor token, but a reusable symmetric key?

Can you say more about what categories you're thinking of? I ...

2025-09-13T19:45:24Z

In reply to nevent1q…y76z
_________________________

Can you say more about what categories you're thinking of?

I don't remember any features in tin or rn that would attempt to prevent say, quoting a post.

I think this goes far beyond Mastodon. Maybe part of it is that ...

2025-09-13T17:21:41Z

In reply to nevent1q…9qjc
_________________________

I think this goes far beyond Mastodon. Maybe part of it is that when computers were rare and networks were mostly wired, the control divisions were more visible?