I carefully curate my feeds here and on Reddit, probably the only two real social networks that I hang out on. LinkedIn is so much harder to fine-tune your feed. There are just so many options that it's impossible to pick some. You know what I mean? It's out of this world how they manage to […]

I am grilling chicken thighs on the gas grill. I have an aluminium foil tray under them, and I have indirect heat to the left and right. Everybody, think non-firy thoughts for the next forty-five minutes or so, please. 🐔 🔥

Glasswing may be the most sophisticated undercover marketing campaign in the history of mankind.

This is a picture of a stalk of asparagus growing in the middle of a lemon balm patch. Now, that would seem to be odd, and I agree, but I have grown asparagus before. However, where I had it is fully 30 ft from where that stalk is growing. This isn't the […] [Original post on infosec.exchange]

"Anthropic is supporting Project Glasswing with $100 million in Mythos Preview usage credits..." Mmm hmm. https://www.darkreading.com/cloud-security/csa-cisos-prepare-post-mythos-exploit-storm #mythos #marketing

TIL Slack has "huddles."

These awesome apple blossoms brought to you by an actual Johnny Appleseed apple tree grown from seeds harvested from his grove in Medina, Ohio.

When Mistral Vibe is thinking, it puts up random "statements of work" like "Contemplating the universe" or "Buttering my toast" The last one to go by was "counting the Rs in Strawberry" which tends to make me think that vibe coding will have lore and canon all its own.

Bloomberg is covering Mythos. The journalists are VERY skeptical, and the AIBros are all like "THIS SHOULD BE A GLOBAL LAW EVERYONE SHOULD TEST WITH THIS AAAH WE ARE ALL GONNA DIE." OH man they have Kara Sprague on and she is speaking truth. THANK goodness. And now it's kreiger "OH NOT THIS IS […]

Could prospects for breakfast look any better? I think not.

I just discovered Warhammer 40k Terminus and WHY DIDN'T YOU ALL TELL ME ABOUT THIS GAME?!??!

At the Columbus Museum of Art and somehow I think everything is gonna be ok.

In a few months my Reddit account will be legal to drink.

Oooh boy, Microsoft has some thoughts about AI in the SOC. https://www.microsoft.com/en-us/security/blog/2026/04/09/the-agentic-soc-rethinking-secops-for-the-next-decade/ #microsoft #agenticai

I don't remember who mentioned Littlesnitch for Linux, but HOLY CRAP is it neat. Mighta been @viss? I don't know but damn, thannks.

For those getting questions about Glasswing from their executives, give them this article. https://tryaether.ai/blog/anthropic-glasswing-frontier-attack

Fuck. "The FBI was able to forensically extract copies of incoming Signal messages from a defendant’s iPhone, even after the app was deleted, because copies of the content were saved in the device’s push notification database [...]" h/t @404mediaco

The Ohio Renaissance Festival utterly shut down Bigtickets.com.

"Conviction is sufficient." That is a powerful, terrifying statement.

The @eff has an epic writeup about how the Arab spring was a catalyst for authoritarian information gathering and then there changes to digital life. Three part series. https://www.eff.org/deeplinks/2026/04/digital-hopes-real-power-how-arab-spring-fueled-global-surveillance-boom #arabspring […]

Oh look. I need to not be on social media today.

Good writeup on @wdormann's recent efforts. https://securityaffairs.com/190400/breaking-news/experts-published-unpatched-windows-zero-day-bluehammer.html #0day #microsoft

We have the NEST cyber security in 200 years!!! When will you all get tired if WINNING!?!?! https://www.securityweek.com/white-house-seeks-to-slash-cisa-funding-by-707-million/ #usgov #cisa

Putting hidden text in web pages just to pwn AI agents for fun and profit sounds like a good time. https://www.securityweek.com/google-deepmind-researchers-map-web-attacks-against-ai-agents/ #agenticai #posioning

Aww food crunchyroll was breached. Now everyone will know I ... uuuuh so they were breached! https://haveibeenpwned.com/Breach/Crunchyroll #breach #anime

Dammit. I already marinated the lamb!

Hey, you! Yeah you, all hunched over like a croissant in your screen-lit windowless room. Go the fuck outside.

ATTACK OF THE KILLER WASP BUTTS!!!

@Gabrielle just made a remote control lava lamp!

v.1.8.0 of my .NET Bluesky library has dropped. Highlights include Bot property on profile views Protections against malicious handles and did docs introducing SSRF vulnerabilities Protections against a malicious sending messages about a max size Metrics Support

Weather forecasting in the 614 has just sucked this week. Every day this week, Wednesday, Thursday, Friday, Saturday, they said thunderstorms, rain all day. It's going to be sloppy and warm and humid and gross, and it was absolutely beautiful every single day. #ohwx

Talos found this ginormous automated React2Shell exploitation scheme for credential harvesting at scale. I'll bed the SOB was vibe coded, too. https://www.securityweek.com/react2shell-exploited-in-large-scale-credential-harvesting-campaign/ #react2shell #breach

Nopesauce on a fresh fried tilapia sandwich. 🧑🏻‍🍳💋

We need a new XKCD with the swordfighting that says "Waiting for the AI"

OK, Trends in Appsec talk given twice in one week. That HAS to be a record.

"I checked DownDetector to see if there was an Outlook outage, but I could not find a version of DownDetector that covers space." […]

Kine of a neat vulnerability discovered in the OWASP Common Rule Set. Test your stuff on Windows folks! https://seclists.org/fulldisclosure/2026/Apr/0 #owasp #cve

This came out and I thought "Anyone actually using this with so many inexpensive commercial options right meow? Just future proofing?" Well, guess so https://www.securityweek.com/mercor-hit-by-litellm-supply-chain-attack/ #llm #malware

OK, added AI to my Making and Baking an Application Security Department talk. See ya at #stirtrek!

Oh now I know it is spring. 🦨

I love the fact that pro football in Columbus has to play in a repainted soccer stadium. Heh heh heh.

Anyone feel the under boomer in the bay area?

RE: https://c.im/@columbusnewsbot/116335927266389479 Now we are crashing into banks. #ohio

So how is the Fediverse doing today? POINT has been busier than hell, so I haven't been around reading stuff.

What the fuck does "detailed summary" even mean.

You know, when you have to go to the con web site to remember what talk you told them you were gonna give? Yeah, onea those days.

I Decompiled the White House's New App https://blog.thereallo.dev/blog/decompiling-the-white-house-app The official White House Android app has a cookie/paywall bypass injector, tracks your GPS every 4.5 minutes, and loads JavaScript from some guy's GitHub Pages.