It’s amusing to me that ppl are grumpy that talking to the new version of the magic box requires different words than the last version of the magic box. We are early days in all this. Expect very little consistency as we move forward. Embrace the chaos :)

Welp, we’ve got a Bluesky account now. If you’re into SaaS security operations or trialing our SIEM for your SaaS infrastructure, check us out. We’re building new things every day with our service dashboards working their way to prod in the next week :) Also, a follow would be appreciated.

This is awesome: a "WKRP in Cincinnati" fan created a three-hour Johnny Fever radio block, by using clips from the TV show and dropping in the full songs on his intros and outros, plus commercials and Les Nessman news breaks.

Closing Ceremonies @defcon.bsky.social #defcon33 @shmoocon.bsky.social @heidishmoo.bsky.social @gdead.bsky.social

Welp that was unexpected. @heidishmoo.bsky.social and I won the @defcon.bsky.social Uber award this year. Woof. What a journey this life continues to be.

I still don't understand how ostensible experts are saying we're only a few years away from true AGI (or even superintelligence). Analytical AI/ML is ultimately just statistical modeling and analysis, and generative AI is just auto-correct amped up a bunch.

TFW the concert you're at puts you on hold

Come one, come all!

I really need an old logo for the Joint Task Force - Computer Network Operations (JTF-CNO) which was formed out of the JTF-CND in 2000 and later morphed into US Cyber Command. The original logo for this org seems to have disappeared from the Internet. Any help?

From my perspective, this is a transparent attempt to put Copilot at the middle of the Office offering so it's not a "feature you can opt out of."

The cybersecurity equivalent of 'drugs in Halloween candy' is 'malware on airport USB charging ports'. Something that has not one single record of it ever having happened.

It’s fascinating to see Microsoft and Apple go in such different directions when it comes to AI. Microsoft went all-in and wrote “Sparks of AGI” www.microsoft.com/en-us/resear... Apple has done the bare minimum and just wrote “The Illusion of Thinking” ml-site.cdn-apple.com/papers/the-i...

PC load letter small group chat

Watching @paulasadoorian.bsky.social talking about using FreeBSD as a daily desktop OS. Enlightening!

you know who else came from chicago and was on "a mission from god"

Happy 5/8/77 Day to all those who celebrate. For those that don’t, here’s a good write-up on The Dead’s concert in Barton Hall at Cornell that explains why the show is so iconic. https://liveforlivemusic.com/news/grateful-dead-5-8-77-cornell-greatest-performance/

Spam in my inbox today… this type of blood pressure drop would seem… problematic

Looking for something to do this afternoon? Join @heidishmoo.bsky.social and I at 3pm EDT on Turngate’s periodic live stream. This week we’ll be doing an RSA debrief. Join us if you can. https://www.twitch.tv/turngate https://www.youtube.com/channel/UCnAV5QDvcbhKIyG8zzL7yAQ

@amtrak.com turned 54 yesterday! Here's my Vignelli-style diagram showing services as they existed in May 1971. Still really happy with how this one turned out. Zoomable version: transitmap.net/maps/amtrak-... Project page: transitmap.net/amtrak-may-1...

Building a new ATC system is literally a generational problem. This is not something that happens in a year or two. And to be frank the current administration doesn’t do a good job of planning for 6 hours from now, so I’m not holding my breath.

It's about time

Channeling my inner @thepacketrat.net Two very loud (and very hungry) pileated woodpeckers.

We’ve outsourced our confirmation biases to search engines

If only there was an agency formally tasked with supplying devices and protocols for secure comms for senior executive branch staff… hmmm…

I hope this hits the NYTimes A1 above the fold like the Clinton emails did…. But I’m not holding my breath.

The new barista at this coffee shop apparently wasn’t aware that a bunch of places lock their bathrooms. I found this out after she froze for a few minutes when I asked “Is there anything I need to know anything to use the bathroom?”

Great visualizations & writing about different IO devices and latency by @PlanetScale planetscale.com/blog/io-devi...

Three years ago, three other reporters and I ID'd and called any school accused of having litter boxes for furries. We found one (1) in the entire country: Columbine's school district. Cat litter was for a "go bucket," in case kids were locked in during a shooting. www.nbcnews.com/tech/misinfo...

Heidi and I will be doing a livestream at 3pm EDT talking about UI/UX in the world around us if you want to join :) https://www.youtube.com/@turngate.

Fixed that for ya, Southwest.

I’ve done some work in/around ATC. It’s immensely complicated and has a ton of stakeholders operationally involved at all aspects of flight. Upgrading it in less than 4 years would require a Manhattan project-like focus across industry and govt. Color me skeptical given the current environment.

Zoom lets you do this. My experience is its 10% useful and 90% trolling. Unrelated, I’m the person using it 90% of the time.

A lucky trader just happened to put in a $200m trade with 50x leverage a few hours before a Trump pro-crypto announcement. The price of crypto jumped and this person made hundreds of millions. Pure luck I’m sure.

I haven't changed my tone on crypto from day one. This reserve is the Big Scam(tm). I don't argue with y'all. I don't pretend that my decades of academic and lived experience are equal to your 2 second searches and misplaced confidence. I'm not here to make you feel more knowledgeable than you are

Everyone in cybersecurity is now excited to do their own Russian counterintelligence operations, right? Right? Right?

It’s obvious that CSRB was not the only way the US government is investigating cyber attacks like Salt Typhoon affecting telecoms — but CSRB’s sudden absence does leave a serious gap in the free, authoritative reporting of non classified information to the public from an unbiased government source.

Remember times in the past that a US president calling themselves “king” would have been career ending? Pepperidge Farms (and 249 years of history dating back to the Revolutionary War remembers).

Put Windows box to Sleep… *wakes up 15 seconds later* Do it again… *wakes up 2 hours later for some reason* Again… *doesn’t actually sleep* Again.. and again… Put Mac to Sleep… *we’re good until the heat death of the universe. Maybe longer..*

How was this contract awarded??!

Post a headline from 1972 that works in 2025

Thank god we all spent so much time and effort on FISMA and FEDRAMP… :/ I don’t see them surviving materially over the next 4 years.

Oh the memories…

I’m not sure how to right without parenthesis. They’re sentence enhancers and if you ask me to write 1,000 words without any there’s no way I’d be successful. (Yes, I can do a skeet without paren’s but that’s b/c it’s short form. Longer stuff I struggle with)

The government is granting no bid, exclusive media rights to certain announcements to Twitter.

Global power consumption for Bitcoin in 2024 was over 1/3 higher than the total national consumption of the Netherlands (110-120 TWh).

Talking about a meritocracy just because you think you hire and promote equally at your personal organization based on only skill is painfully naive. The pipeline is the problem. Breaking in is the problem.

Risk is managed in all shapes in organizations, and is generally rolled up under “Enterprise Risk Management.” ERM includes things risk from cyber threats but also includes things like market forces, competition, weather, disease, and changes in the law. With the lack of public health data.. (1/3)

2012-2025

It's been 17 years since cryptocurrency first dropped and it *still* doesn't have a *single* use case that has been adopted by the mass market desite being nearly completely unregulated all this time.

I miss just setting syslog to log *.info and catch everything in your org. Attackers have been going after users of M365 Teams via remote control but there are no audit entries for Teams Remote control. I wrote an LinkedIn thing (trying to be better about real content and not just rants)