Eric Hutchins
LightNews LightNews
ehutchins.bsky.social
Eric Hutchins
@ehutchins.bsky.social
1.7K followers 1.3K following 140 posts
Started in infosec, co-authored the kill chain paper, dabbled in countering influence operations at Meta, and now back to infosec. Lover of command line, python, and rust.
Posts Media Videos Starter Packs
ehutchins.bsky.social
Eric Hutchins @ehutchins.bsky.social · 3d
a) the modulated voice sounds just like their Aspiration source, so either same guy or really good modulation
b) i lol’ed that, yes of course, there’s a clippers angle
Reposted by Eric Hutchins
andrewlamb1111.bsky.social
Andrew Lamb @andrewlamb1111.bsky.social · 9d
We made Apache Parquet metadata parsing 3x-9x faster in the latest release of the Rust implementation
arrow.apache.org/blog/2025/10...
3 16
Reposted by Eric Hutchins
hultquist.bsky.social
John Hultquist @hultquist.bsky.social · 10d
If you’ve been laid off from a cyber threat intel position, and you want a ticket to CYBERWARCON, please reach out.
25 25
ehutchins.bsky.social
Eric Hutchins @ehutchins.bsky.social · 11d
I’m fully on board with justfiles now. Also love this integration to expose recipes as mcp tools: github.com/millsaj/just...

daniel.feldroy.com/posts/2025-1...
uv+just for testing multiple Python versions
In the old days we relied on tox and nox to test a Python project against multiple Python versions, now we can lean on uv+just. For most projects this keeps our configuration straightforward and reduces dependencies.
daniel.feldroy.com
1
ehutchins.bsky.social
Eric Hutchins @ehutchins.bsky.social · 14d
These Diwali snacks are rel to fyve
Fyve Elements’ brand Murukulu, crunchy and a touch spicy snack
1
ehutchins.bsky.social
Eric Hutchins @ehutchins.bsky.social · 22d
@swiftonsecurity.com were you involved in naming Microsoft’s Purview? learn.microsoft.com/en-us/purvie...
Learn about Microsoft Purview
Use this article to learn more about Microsoft Purview.
learn.microsoft.com
1
Reposted by Eric Hutchins
exum.bsky.social
Andrew Exum @exum.bsky.social · 26d
There is a bottomless pit of money out there for journalists willing to speak untruths to power. If you’re willing to soothe billionaires by telling them everything they want to hear, and telling them all of the criticism they face is misguided, the world is your oyster.
3 13 60
ehutchins.bsky.social
Eric Hutchins @ehutchins.bsky.social · 26d
ACAB?

en.m.wikipedia.org/wiki/The_Thi...
The Thin Blue Line (British TV series) - Wikipedia
en.m.wikipedia.org
1
ehutchins.bsky.social
Eric Hutchins @ehutchins.bsky.social · 27d
Sankey diagrams are glorious and great at visualizing err umm all kinds of things (see Tay’s thread)
2
ehutchins.bsky.social
Eric Hutchins @ehutchins.bsky.social · 29d
Freeze frame of Ini Kamoze from his video for Here come the hotsteppers
1
Reposted by Eric Hutchins
jamellebouie.net
jamelle @jamellebouie.net · Sep 30
and he's obsessed with appearance because that's the only thing he understands.
57 92 2.4K
Reposted by Eric Hutchins
emptywheel.bsky.social
emptywheel @emptywheel.bsky.social · Sep 30
Note how gang tattoos are not included in this.

I wonder why?
atrupar.com Aaron Rupar @atrupar.com · Sep 30
Hegseth: "Today, at my direction, the era of unprofessional appearance is over. No more beardos ... if you don't meet the male-level physical standards for combat positions, cannot pass a PT test or don't want to shave and look professional, it's time for a new position."
48 170 640
ehutchins.bsky.social
Eric Hutchins @ehutchins.bsky.social · Sep 29
<hamburger voice> Peaaa-body
3
ehutchins.bsky.social
Eric Hutchins @ehutchins.bsky.social · Sep 16
Lupe Fiasco Git Push
1
ehutchins.bsky.social
Eric Hutchins @ehutchins.bsky.social · Sep 12
Timeline cleanse

youtube.com/@bluecoats
hollyanderson.bsky.social Holly Anderson 🍇 @hollyanderson.bsky.social · Sep 12
millennials are band directors now and I think that’s terrific
3
ehutchins.bsky.social
Eric Hutchins @ehutchins.bsky.social · Sep 7
Did Xfinity steal its “Imagine that” slogan from these guys @latenightseth.bsky.social ?
Akiva and Andy from their Digital Short “Sushi Glory Hole”
1
ehutchins.bsky.social
Eric Hutchins @ehutchins.bsky.social · Aug 25
Want
willmcgugan.bsky.social Will McGugan @willmcgugan.bsky.social · Aug 25
I've been working on a new fuzzy search file picker for Toad (my terminal AI interface).

It is similar to the other terminal based agentic coding tools, but I want to address a few UX issues, and hopefully make it prettier in the process!
ehutchins.bsky.social
Eric Hutchins @ehutchins.bsky.social · Aug 20
I’m really warming up to just. Also love that it’s installable via pip under rust-just
1 3
Reposted by Eric Hutchins
zeddary.bsky.social
Zeddy @zeddary.bsky.social · Aug 14
One massively good reason for aiding Ukraine is it created a market for surplus GWOT gear that otherwise was waiting for a Republican President to use internally. An MRAP can either save six Ukrainians from an artillery shell or it can roll over on Route 340 killing 3 deputies & a graffiti suspect.
1 13 49
ehutchins.bsky.social
Eric Hutchins @ehutchins.bsky.social · Aug 20
@censys.bsky.social @silascutler.bsky.social is there an rss feed for the censys blog? Just discovered how many awesome posts I’ve been missing out on: censys.com/resources/blog
Blog
censys.com
1 1
ehutchins.bsky.social
Eric Hutchins @ehutchins.bsky.social · Aug 14
lol this took a turn
“Being different isn’t a bad thing. It means you’re brave enough to be yourself” - JK Rowling (incredibly? Ironically?)
1 1 4
ehutchins.bsky.social
Eric Hutchins @ehutchins.bsky.social · Aug 7
My brilliant friend who led the development of Gait zeek plugin has written a taxonomy for detecting proxy/ORB networks. Even the acknowledgment is 🔥

> Thanks to the attackers who have shown us that proxies are a detection opportunity

github.com/sandialabs/g...

www.osti.gov/biblio/2530825
A Taxonomy and Feature set for Server-Side Identification of Proxies (Technical Report) | OSTI.GOV
Malicious actors frequently use proxies and VPNs to evade detection and hide their origin. Currentchallenges to information security include residential proxies and Man-in-the-Middle phishingproxies w...
www.osti.gov
3
ehutchins.bsky.social
Eric Hutchins @ehutchins.bsky.social · Aug 3
Atomic trains
1978 book imagining trains of the future including atomic trains
1
ehutchins.bsky.social
Eric Hutchins @ehutchins.bsky.social · Jul 31
Very cool research from Greynoise (h/t @silascutler.bsky.social )
hrbrmstr.dev hrbrmstr 🇺🇦 🇬🇱 🇨🇦 🏳️‍🌈 @hrbrmstr.dev · Jul 31
🆕 GreyNoise Research: Early Warning Signals Before CVEs Drop

In our latest research, we examined dozens of incidents where attacker activity — often in the form of exploit attempts — spiked weeks before a new CVE was disclosed.

One chart shows what we found (much more in the report):
Here's a comprehensive alt text for the screen reader: "Chart titled 'Spike-To-New CVE Delta Distribution' showing the time delay between GreyNoise tag spikes and corresponding CVE publications. The chart has two sections: an upper cumulative distribution curve and a lower scatter plot. The upper section shows that 50% of spike-to-new-CVE events happen within 3 weeks, and 80% occur within 6 weeks, with the curve reaching nearly 100% by week 31. The lower scatter plot displays individual data points color-coded by vendor (Cisco in blue, Fortinet in red, Juniper in green, Palo Alto Networks in purple, Citrix in orange, Ivanti in teal, MikroTik in yellow, and SonicWall in pink). Most data points cluster heavily in the first 6 weeks, with the highest concentration in weeks 0-3, then gradually decreasing density through week 31. The X-axis represents weeks (0-31) and the Y-axis shows percentage of spike events (0-100%). Chart titled 'Hidden Signals Before The Storm' showing timeline relationships between GreyNoise tag spikes (white dots) and CVE publications (red dots) across 8 vendors from late 2024 through mid-2025. Organized in 8 sections: Cisco (7 vulnerabilities including Unified Directory Traversal, Prime RCE, ASA XSS), Fortinet (3 vulnerabilities including FortiOS Disclosure, Auth. Bypass), Juniper (2 JunOS REI vulnerabilities), Citrix (4 NetScaler-related vulnerabilities), Ivanti (8 vulnerabilities including Endpoint Manager RCE, EPMM Auth. Bypass variants), MikroTik (RouterOS Bruteforcer), Palo Alto Networks (6 PAN-OS vulnerabilities including RCE, Auth. Bypass), and SonicWall (4 vulnerabilities including SRA SQLi, SMA RCE). Pattern shows white spike dots consistently appearing weeks to months before red CVE publication dots across all vendors. Note indicates different X-axis scales per section.
2 3
ehutchins.bsky.social
Eric Hutchins @ehutchins.bsky.social · Jul 27
Jupiter/Thaxted is a goated hymn tune