That’s me! 🙌

On Thursday I presented at Way West Hackin’ Fest in Denver to a group of friends, colleagues, and my son! I appreciate this community of people who come together to learn, to be supportive, and to have fun! (Slides and hopefully video shared soon.) Thank you #wwhf!

I have a friend who became blind in her 50s almost overnight. Helping her with using computers has helped me understand the need for better accessibility in a way that I never understood before.

We can all do better in making technology more accessible. Please do.

bees.substack.com/p/making-hac...

This video from Dave Plummer really helped me understand the implications and methods behind DeepSeek. Worth a listen! youtu.be/r3TpcHebtxM?...

Today I realized I’m the person people at work turn to when they have Git questions or problems.

Me.

How did we fall so far? 😬

Happy birthday to the unusual number of my cybersecurity friends who all have January 1st birthdays on Facebook! 🧐🧐🧐

Ghostty 1.0 is now available and it's amazing. ghostty.org #terminal #macos #linux

TIL about github.com/iknowjason/e..., a useful utility to assist in figuring out “what cloud provider/region is this entity deployed in?”

$ ./edge -single 140.179.144.130
…
[INF] Matched IP [140.179.144.130] to Cloud Service [API_GATEWAY] and Region [cn-north-1]

Important for parents/anyone guiding/mentoring kids-especially middle/high school: make sure they know ChatGPT etc are mostly WRONG and should never be used as sole sources!! It’s an important lesson because the (VC-fueled) tech media fawns over the lie engines as if they’re the second coming.

Here, here. --break-system-packages is unnecessarily foolish.

"Our job is to make it safe, not to tell [users] not to click on things on the *thing clicking machine that we gave them*" @metlstorm.risky.biz

I'm planning on repeating this quote quietly to myself at least once a week for the rest of my days.

www.youtube.com/watch?v=Rxye...

AI has taught me many things.

First and foremost is that I hate bulleted lists. #ai

Article by Bogdan Calin on using local LLMs to improve endpoint/file discovery. I'm not sure how practical this is for pen testers, but optimizing requests to avoid WAFs is real. www.invicti.com/blog/securit...

If you haven't checked out @404media.co, I'd like to suggest that you do so at your earliest opportunity. There is some incredible writing happening there...
www.404media.co

I tell all my students that Julia Evans @b0rk.jvns.ca is a treasure. Check out the Big Zine sale for some wonderful guides on all sorts of useful IT topics!

Happy 37th anniversary of the Max Headroom Incident, to those who celebrate.

This Wired article on Russian threat actors exploiting WiFi to gain access to a nearby target is 🧑‍🍳🤌💋. www.wired.com/story/russia...

Years ago I visited the NSA Cryptological Museum, and the docent told me about an old motel across the street from the base, owned by Russian expats. 🧐🧐🧐 Old = New

I'm working on content as a RSA keynote panel hopeful. Any thoughts on what's worrying about SaaS security? I have a few ideas here.