beep beep boop

Some of the best hackers I know still manage to overestimate their expertise in completely unrelated fields, medical science being a big one. I can go from soaking in some arcane tech wisdom to fielding batshit takes about vaccines in the span of a few seconds with some of you guys. Why?

Every time I go on a podcast as a guest, I spend the next 24 hours trying to remember if I said anything painfully stupid that will tank my career.

Does Bluesky really still not support TOTP? Can I stop having to copy a code from my email and remove the backticks that it includes?

STOP CALLING IT VISHING AND SMISHING YOU SOUND LIKE A FUCKING TODDLER BABBLING NONSENSE ITS PHISHING OR SOCIAL ENGINEERING REEEEEEEEE

Watch out for people who take your personal growth personally.

Working on a conference talk

"nano is for babies" - crontab

It's a personal conviction of mine that, for how much of the tech industry operates out of Atlanta, there is a serious lack of quality security conferences and communities. But I know some people trying to change that.

Most fun I've ever had speaking at a conference, hands down. If you were there at @wildwesthackinfest.bsky.social , you were the best audience a guy could hope for. www.youtube.com/watch?v=Vrtp...

I would simply write memory-safe code

Laptop numpads are psychotic, why do I have to overextend my right shoulder just to type

Finally getting around to watching Chernobyl and all I see is a bunch of MBAs making fun of technical experts and high-fiving

If there's anything I can count on BlueSky for, it's showing me all of the stuff I've painstakingly worked to not have to look at on Twitter.

"In addition, ChatGPT doesn’t just itself fail to recognize the difference between fact and fiction, it presents these answers to people who are themselves unable to discern the difference." lmnt.me/blog/the-dys...

A little tired of getting random junk in conference "swag bags", can I opt out? I don't need fifty branded drawstring bags that I'm just going to donate and might eventually end up in a landfill.

iPad babies can be any age.

Hey Gemini, which spreadsheet does this company store passwords in

imagine still using OOP when you could vibe-code functions and structs

Some of my favorites from Zion National Park. Taken with Kodak Portra 400.

I wish Signal would find a way to make their service censorship-resistant. Can't help but feel like completely abandoning countries that demand encryption backdoors is the wrong move. Better to refuse AND make service use as hard to restrict as possible.

Mudge is the Obi-wan Kenobi that the industry needs right now. Stop what you're doing and read this blog.

Got my personal site running (again) in its new forever location. Any tech writing I do that isn't explicitly meant to be customer facing will be there, including but not limited to: - Rambunctious research - Pontification - Snide commentary - Corporate criticism

The Security Conversation - The value of offensive security work is fully realized by participation in the security conversation. aff-wg.org/2025/03/13/t...

Use social engineering to get your competetive friends back to their gym routine and PR #wehackhealth

Them: It's just a leg day Me: www.youtube.com/watch?v=BuIF...

Nothing will make me stop listening to someone faster than if they they do 👏 this 👏 clap 👏 thing.

TSA: you can opt out, but we delete the face ID photos right after we take them, so it's all good either way

I wonder how many attack surface management products would have never existed if Nuclei wasn't MIT licensed.

Come to @wildwesthackinfest.bsky.social track 3 tomorrow to hear about #Nix or you'll never be able to make Arch users feel inferior

alias head='sed 11q'

I really hate what business turns people into. Over the last several years, I've discovered I'm friends with more and more people who really do not like each other.

“how do i become more technical?” fuck something up & fix it. repeat

🔎 Search is here! Find the tool, exploit or technique you need from our 217 issues of Last Week in Security! blog.badsectorlabs.com

RIP to the homie TikTok. We'll miss all of your brainrot, pseudo celebrities, and hyper-invasive data collection strategies.

The great tragedy of org-mode is that it's exclusive to Emacs.

Drum roll, please! Agenda for Wild West Hackin' Fest @ Mile High 2025 is up! Check it out here: wildwesthackinfest.com/wild-west-ha... #WWHF #MileHigh2025

Just couldn't end 2024 without one more internet fight about who's an influencer/charalatan/fraud/expert/legit. 😏

You can learn quite a lot about making conference talks interesting just by watching stand-up comedians joke about complicated problems.

this yule, my deciduous.app co-conspirator and I bear a gift: Deciduous-VS, a #VSCode extension to build and visualize security decision trees within your IDE 🎄 also means local threat model dev for classified/regulated envs, too 👀 learn more in my post: kellyshortridge.com/blog/posts/d...

This is the first stress-free Q4 I've had in seven years, and I don't think I can ever go back.

I'll be presenting "Solving Dumb Hacker Problems with Nix" at @wildwesthackinfest.bsky.social Mile High in February! It'll be a quick one, but I'll cram in as much #Nix declarative black magic and Python dependency trash talk as I possibly can.

Been seriously lifting for about a year and a half now. Ending 2024 strong, I think. #wehackhealth 2-year deadlift goal: 275 ---- Current: 335 2-year squat goal: 230 ---- Current: 288 2-year bench goal: 185 ---- Current: 175

The @trustedsec.com BoF dev class is up learn.trustedsec.com/catalog

One of my favorite questions to ask during red team scoping is, from the starting access they're providing, how the client would go after the goals they set for me. It helps avoid being pigeonholed with unrealistically low permissions and being unable to demonstrate actual value.

Shout out to all the poor IT people who have to follow up on every possible alert from every endpoint given to full-time pentesters. I hope there is a better way, for you, some day.

Something I really loved about one of my old employers was their 48-hour decision rule after interviewing candidates. Either they were right for the position or they weren't, no pitting candidates against each other to nab as much possible skill for the same salary offer.

Divide and downgrade.

Some #photography favorites of my own snapping