“Dad, at school we’re not talking about actual bugs. We’re talking more about, like, …insects!”

“Dad, at school we’re not talking about actual bugs. We’re talking more about, like, …insects!” 🐜

Humbled to be part of @nohatcon.bsky.social and can’t wait to spend some time in motherland with Italian hackers and friends!

Hey, you guys, look at this. Hey, you guys ever heard of this guy? Okay it says, "Chester Copperpot: Missing while in pursuit of local legend. Reclusive scavenger claims, 'I have the key to One-eyed Willy'." Whoa, do you guys realize what we could do?

Cybersecurity doesn’t just need brilliant minds. It needs supercommunicators—people who can turn complex ideas into clarity, urgency, and action. Here’s what I tell the speakers I coach for Black Hat 🧵 trustial.org/blog/cyberse...

Today we’re studying variables with Python. Using containers to hold paper notes with values scribbled on them. Ideally operands should be of a different color, but I ran out of post-its 🙂‍↕️ Highly recommending “Python for Kids” by Jason Briggs. nostarch.com/python-kids-...

Testing Buffer

When you confuse “m” with “M”.

Anyone has this MCU programmer by SONIX? www.sonix.com.tw/article-en-3...

Very happy to be keynoting at #NoHat2025 and talk about how to secure all that silicon, firmware, and hardware that powers modern AI datacenters. Thanks @nohatcon.bsky.social for this opportunity!

If you’re from the 80s and you’ve watched The Goonies at least once, stop what you’re doing and listen to this https://www.audible.com/pd/B0DY7THK52?source_code=ORGOR69210072400FS

I am convinced 99% of websites should use magic links + passkeys. It bypasses all (debatable) portability objections to passkeys, it’s at least as secure as email-based recovery, as fast as a password manager, it’s available to all users… and importantly, no passwords!

In the old times, TVs came with not only the instructions, but with the schematics AND gerber printout!

BadRAM - new CPU attack on AMD SEV modules badram.eu

say, who remembers playing syndicate as a kid?

What a horrible time to be on the web

Industry Dive, the parent company of CybersecurityDive, is merging with TechTarget's Informa Tech www.cybersecuritydive.com/news/informa...

@sarahyo.com and I are doing a big piece of research on the role of #securityarchitect If you are a security architect, know a security architect, or have a team of security architects where you work, could you PLEASE fill this out for us for forward it on 🙏 forms.gle/abWk4eDPws9m...

I’m about done listening to “Stolen Focus” by Johann Hari. It’s not a digital-detox/diet kind of book. 1/N

If you're a UniFi user and self-hosting the UniFi Network application, this update script will save you hours. community.ui.com/questions/Un...

I'm imagining some of my American followers may be finding it a little harder to find something to feel grateful for this Thanksgiving... ...so just be thankful you're on Bluesky and not the Bad Bird Place any longer. Happy thanksgiving all. Spread the joy by inviting your friends here too.

Over the past 2 years I got used to Amazon Chime's auto-call functionality, which **calls** everyone 2 minutes before every meeting. To the point that I consistently miss all other meetings (e.g., Google Meet) that don't call me. Yes, I receive calendar notifications (multiple ones) but I miss them.

Good news everyone! The US intelligence apparatus is about to be handed over to people with such lax opsec that elaborate backdooring of telcos will no longer be necessary. www.theregister.com/2024/11/25/s...

The self described “Shodan of AWS” is now live! This is an amazing project from Daniel Grzelak that helps democratize cloud resource enumeration for the masses. Very excited about this! awseye.com

There's a Nuova Elettronica theme. If you're Italian or have otherwise been in contact with the magazine, you'll get the vibe 😍 github.com/tormyvancool... Just found this through the @kicad.org plugin manager.

The tinted icons option in iOS is just amazing.

Hello PhD candidates of Bluesky! 👋 Arun & Julia here- two academics who’ve climbed the PhD mountain and are here to help you ace yours! 🌟 We’ll share highlights from our episodes to keep you motivated, energised, and supported! Let’s tackle this journey together! #phdsky #phdvoice #academicsky

An excellent example of a group of technologists using their reverse engineering skills to uncover malfeasance and turning their findings into action that helps workers.

Replay attacks and various rolling-code exploits sold here.

Testing @openvibe.social

Seems like Bluesky's URL shortener was failing. Anyway, I created a Black Hat Review Board starter pack. Will add more members soon. Hopefully, the long link for the starter pack works this time. bsky.app/starter-pack...

My daughter’s gymnastics team is called SDR. They must be very receptive.

How do folks who want to be on Twitter/Bsky/Mastodon do cross posting without losing their mind? Is there any fancy tool I’m overlooking?

New: inside the underground site where "neural networks" churn out fake IDs - I tested, made two IDs in minutes - used one to successfully bypass the identity verification check on a cryptocurrency exchange - massive implications for crime, cybersecurity www.404media.co/inside-the-u...