#Mythos strategy coauthored by @gadievron.bsky.social @argv.bsky.social Rob T Lee, Jen Easterly, Bruce Schneier, Chris Inglis, Phil Venables, @rgblights.bsky.social, @sounil.bsky.social, Jim Reavis, Jon Stewart, Maxim K., Dave Lewis, Joshua Saxe, John Yeoh, Ramy Houssaini, James Lyne, me & many more

The Moon: oh wow you guys decided to come back Artemis II crew: earth’s haunted

"My screen has just turned blue and there's nothing I can do"

At the same time, I’m exploring new full-time or contract opportunities in: •Security and privacy education •OSINT and investigations •Program and product management

A bittersweet announcement: I was impacted by the layoffs at Consumer Reports, alongside a number of extremely talented colleagues. I’m deeply grateful for the opportunity and so proud of the work we did fighting for consumers and helping people stay safer online.

I’ve posted it before, but it feels evergreen The two hardest problems in Computer Science are 1. Human communication 2. Getting people in tech to believe that human communication is important

A round of hot or not, at #rsac. youtu.be/D2BgOCm_WhE?...

At #rsac? Grab lunch and come talk zero trust with Helen Patton and me.

Paying to market your company on an Incel Camino is *A Choice*. I didn't know anything about SecureOS before I saw this. Now I'm on a mission to ensure that doesn't change.

Cyber: Humans are the weakest link! Also cyber: Human-in-the-loop is the only way to make AI safe!

Ok @bsidessf.org are we ready to do this keynote together this morning?

RSAC 2026 looms large. The only thing I know for sure is I’ll be on stage Wednesday with Helen Patton, re-imagining and re-contextualizing Zero Trust. Other than that? You’ll have to find me. Coffee or cocktails on me, if you can.

Announcing the Zero Token architecture. Instead of burning AI tokens, you learn to think for yourself, and complete tasks using your brain.

Generative AI will never be able to do research like a PhD student. It will never have that level of self doubt or the urge to take up unrelated hobbies.

BSides Detroit is inTechTown Detroit on Saturday, May 30. Tickets went on sale yesterday. Only 25 left. Get ‘em soon! www.eventbrite.com/e/bsides-det...

Awwwww… it’s so sweet of the spammers to want to wine & dine me before they steal all my data. 🥰🥰🥰

I saw the best minds of my generation destroyed by AI.

Ladies in technology or technology adjacent field in and around the Milwaukee Area, this one's for you!! Our monthly brunch series is back for 2026. There's still time to RSVP and join us tomorrow or if that's too late of notice, watch this space for the link for next month. www.thebrunchclub.tech

My lovable echo chamber machine thinks I should walk to the car wash. That’s fine, I’m sure.

What eternal September was for the early open Internet, is that what OpenClaw and moltbook is? A flood of inexperienced personalities let loose on the Internet with little understanding and less oversight.

Putting a tiny hyper addictive computer in everyone’s hands 24/7 was a fucking horrible idea it turns out

I am a Product Manager looking to do 30-minute user interviews with people currently writing and using Python at work to find out more about how they use Python. These are 30-minute user interviews and not sales calls. These are about you, not my company, I want to learn what you are doing.

Biometric locks for phones aren’t just convenient for you, they are convenient for the cops. “explicitly authorized law enforcement personnel to obtain Natanson’s phone and both hold the device in front of her face and to forcibly use her fingers to unlock it” theintercept.com/2026/01/30/w...

5 jobs you’ve had: IT guy IT guy IT guy IT guy, fancy IT guy, senior Hmm. This reads like a cry for help.

Frozen pipes. I call my favorite plumber. Their AI answers. We schedule a visit for tomorrow. Hours later, the plumber calls back. He can’t do the work. His AI hallucinated. The best part was the plumber saying, “You need to punch your zipcode and frozen pipes into Google.”

OODA loop can be useful. But also can be over-used. First, most organizations aren’t fighter jets. They are aircraft carriers. Big. Slow. Second, most teams are cross-functional. Cyber may OOD. But it’s front-line teams that Act.

Being understood and feeling understood is two very different things, especially when what’s doing the understanding is a server farm.

The sound of dialup screaming was really warning us of what was to come

I’d definitely see that! Can I just say in the original PRD for what became Duo’s Beyond edition, there was a large section at the bottom underneath a heading that read “Here be dragons” that was all additional context about the enormity of it all

Excited for my RSAC talk with Helen Patton, on all the ways the zero trust buzzword has failed us, and all the ways to make the most out of buzz.

Their claims towards inevitable AGI are akin to claiming they can teach the solar powered calculator collecting dust in a drawer in your house how to love. It's so stupid on the face of it that it can only be the result of a concerted propaganda effort leveled at people too lazy and dumb to learn.

no they were not.

If you are organizing folks in Minneapolis right now, you may find this guide to Signal for beginners by @mshelton.bsky.social useful: freedom.press/digisec/blog...

*frantically googling* moral arc bent wrong how to fix wikihow diy moral arc fix moral arc technician near me

People are becoming the average of the 5 AIs they spend time with.

CypherCon in Milwaukee. I’m excited to bring my latest research and thinking on LLM’s social hacking capabilities. Your AI is Social Engineering You cyphercon.com/speaker/your...

The homebrew computer is the new starter home. Affordable, not so much.

If my company were collecting some (aggregate, psuedo anonymized) data around utilization of open source projects related to AI - What Data would you want to see? Version, number unique users by month? number of unique hosts per month? what else? Country?

I don't feel like spending time writing a 300 character explanation of why you should read this blog post. Just go do it.

Doing a project with an LLM is like a freshman group project. Did the bot understand the topic? Did they get bored or lazy half-way through? Are they drunk or asleep? Forget it, I’ll just do all the work myself. Just like college.

Ross Young’s: Busy is the New Stupid A tactical framework examining how busyness compromises cognitive function, strategic thinking, and effectiveness. www.cisotradecraft.com/bitns

Congratulations to @stefanigoerlich.bsky.social for her recent publication! #BDSM #kink #kinksky link.springer.com/article/10.1...

Me: I always follow my heart. Her: “Okay. But seriously. Try the next exit, the GPS can only reroute so many times.” @stefanigoerlich.bsky.social

I would add it’s the CISO who can lead their team to adapt to change

It’s not the most technical CISO that survives, but the CISO who’s most adaptable to change.

we can kill them all if we just work together and ✨believe💫

My Windows notebook doesn’t work reliably. My smart fridge doesn’t work. My app-enabled snow service doesn’t work reliably. Groceries and food delivery, unreliable. And the automated support I call isn’t reliable. I’m beginning to rethink embedding IT in everything.

Gotta say, traveled a bit in the States, and few communities come close to Chicago’s Burbsec. Respect.

The perfect gift for the therapists in your life just hit the book shelves. This is the book I wrote with @stefanigoerlich.bsky.social, explaining cybersecurity concepts and impacts, directly in the language of clinicians. Use the code 25SMA4 at routledge.com for 20% off.