I just want to say that @xeiaso.net's "No way to prevent this" series is my favorite thing to see show up in my RSS reader. xeiaso.net/shitposts/no...

Invert, always invert. I wrote a post on how to get hacked. Hope it helps. (Also I’m breaking my handle/name barrier) jasonstrange.com/posts/how-to...

I unintentionally switched to Bing at work a while back and it’s insane how much I accepted Google’s enshittification. I search and then immediately start scrolling to find the thing I’m looking for. In Bing, the result I want is at the top like 9/10 times. Google requires a scroll 10/10 times.

I don’t think the problem is that everyone is treating it like an enterprise customer solution. I think the problem is that everyone is trying to play the “capture user credentials to lock them into our ecosystem” game. That’s why 1Password, Chrome, and Apple all want my passkey every single time.

LLMs are an accelerant in the same way gasoline is.

The Obsidian team is growing from three engineers to four engineers. Competitive SF salary. Fully remote, live anywhere. Apply below.

Anyone with a unifi network setup figure out how to tell what remote hosts / ports / whatever the different "applications" represent? Kind of insane that I can't seem to look inside an application definition to understand what would be blocked by enabling it...

The single goofiest scene from Hackers is, without debate, Plague getting out of a car to ride a skateboard down a menacingly foggy alleyway to snatch a floppy drive from Dade without stopping, then grab the car again to continue down the alleyway before disappearing into the fog.

I’ve been seeing a lot of people complaining about Linux projects introducing a field for age in user profiles, as a result of recent California laws. The laws are dumb, but the age field is performative. Linux has asked for your phone number when creating a new user for decades. It goes nowhere.

Yeah of course I can't get RFC2549 as a license plate in California. Buncha nerds in this state.

OMG Tonight's NCIS opening makes fun of the "two idiots one keyboard" scene from much earlier in the show, which is made even better by it being written by McGee. Honestly hilarious.

You can tell how much power my ADHD has over me at any given time based on how deeply nested my parentheticals get (and how many I forget to close because I forgot I was in more than one (not that I would ever forget something like that).

Interesting thing I just thought about. LLMs are non-deterministic, but people keep inventing new ways of saying “a markdown file” to help create consistency. What I’d like to explore is two completely separate accounts interacting the exact same way with the same inputs, at scale.

I’ve been researching a lot about metrics as I’m now responsible for tracking metrics for our enterprise security function. My historical take on security metrics is that they are all bad, because the metrics people default to are basically contingent on your ability to get other people to do work.

In classic dade fashion, I hadn’t posted a blog post since April. Published 4 in a row over the last few days, mostly about self hosting and my pursuit of the ideal server. But most recently: don’t use infra-as-code to manage user access. It’s not worth it. 0xda.de/blog/2026/02...

Pronouncing “Retro” like Scooby Doo from now on. Ret-roh!

His build is ready, nodes weak, pods are heavy There’s lagging in the cluster already, Kubernetes

The kubernetes we have at home

I’m at @wildwesthackinfest.bsky.social in Denver and we’re looking to hire for a wide variety of roles across IT and Security. Did I mention we build Satellites? It’s pretty cool stuff. If you’re here and looking for work, let’s chat. #WWHF #MileHigh2026

Just had a moment of realization for my feelings about the push by VC-backed AI sycophants to "vibe code business apps" They have not yet learned that lines of code go in the liability column, not the asset column. And they may never learn, because they've forfeited cognition to the machine.

There is no protocol like it in the world, because it was created in a different one. And every other world died. SMTP. Email is the final gasp of the original dream of electronic sovereignty. Of a federated world of peer communication. It's the final one. The last protocol.

I would appreciate if @1password.bsky.social would let me set it so that it strictly matches subdomains across my whole vault. I have like a dozen subdomains and dozens of service users I track for services in my homelab and I have to scroll ten years to find the correct thing when I'm logging in

The “World Wide Web” was a great name, in hindsight. I’ve been trapped here for decades.

Apps that get DNS verification functionality wrong really cause a lot of pain for their users. Having explained the problem a number of times, I finally decided to write it down so now I can just share a link.

I've been working in a Microsoft Shop for the last 3 months and basically every single day I find a new horror in Entra/Office365/etc. I long for the days that I was complaining about Okta and Google Workspace.

An interesting thing about this is that even if Hannah hadn’t used TouchID on her work laptop, the FBI probably could have compelled the company to use MDM controls to provide access to the device. Password need not be revealed, so no compelled speech.

They should make a Fast & Furious spinoff solely focusing on Han. It’s time for Han’s Solo era.

Sooo I think I accidentally lost my mastodon Postgres database. That’s probably bad, right?

semi-regular reminder that ICE was only created in 2003 when you are asked to imagine a world without ICE, you're basically being asked to remember where you were when Lilo & Stitch came out

I am following up on the interesting thing where `truecrypt.org` was purchased in early 2025. It looks like it is basically the same as it was before it went to auction, but the footer has this weird Trump comment in it.

I'm prepping to blow away my Windows 10 machine and probably abandon Windows forever, and I found this "exploit.bat" in my documents folder that had been sitting there for 6 years. Could probably get a CVE for this in 2026...

Tangentially related to my maintenance woes today, did you know that you can subscribe to the releases feed for a github project via appending `/releases.atom` to the end of the repo url? Kind of sick. Poor man's supply chain notifications. github.com/mail-in-a-bo...

Upgraded my mailinabox server today to ubuntu 24.04 before I learned that ubuntu 24.04 is not supported by mailinabox. The mail sending and receiving part still works but I'd be willing to bet a bunch of other random things are going to be broken that I won't notice bc the web dashboard is broken

I don't remember any of the context on why I made this, but found it again today in my projects folder, and it remains true today.

The people of California are clearly demanding high speed efficient transportation options. If only such a thing existed where they could go fast AND play on their phones the whole time. Anyone heard of any technology like this?

I can’t wait to see Stewie Griifin’s Principal Shepherd’s Ruth’s Chris’ Baz Luhrmann’s William Shakespeare’s Romeo and Juliet at Donald J Trump’s John F Kennedy’s Memorial Center for the Performing Arts

Google should try delivering useful search results again.

Tinker Swift, Taylor Swift, Soldier Swift, Spy Swift

Honestly this Fedora LPE (unpatched but public) is incredible. I read it last night and woke up this morning thinking of the galaxy brain move of using $PWD to bypass input filtering for the character “/“ initblog.com/2025/abrt-ro...

who decided to call it Secret Santa when Nondisclosure Claus was right there

Connection to the users and their desire paths is the most important path of working in security and nobody goddamn does it. You are gonna make compromises. And they're all gonna be worth it. Because you understand what they want and you're gonna deliver it and they're gonna stop doing stupid shit.

getting my kid a book about rust for christmas that way when they unwrap it i can tell them they arent following best practices

cloudflare's on-duty IT staff bangs on the doors which I have padlocked from the inside as I calmly break open lava lamp after lava lamp and drink the contents

Obvious porn titles aside, “Peace through strength” is getting real close to the fascist, supremacist Norsefire slogans from V for Vendetta.

23anddeleteme please

I haven’t been paying attention but has anybody done a “You Don’t Mess With The Zohran” movie poster yet?

I'm really sick of "open enrollment" why am I having to decide shit every year until I die