I've been declining Win11 update ads for months. There was a full screen one at login the other day that took 3 clicks to get passed. Last night Win11 was installed during what looked like a normal OS update. I should have read closer, but none of the previous indicators were present.

Come play in one of the two Kubernetes Capture the Flag events we're facilitating at #DEFCON 33! Fri – Sun : Learning CTF w/ Walkthrough Saturday: Competitive CTF First Place Prize (for a team on-site at DEF CON) is a Bambu Labs A1 Mini 3D printer! containersecurityctf.com @defcon.bsky.social

The good news is that the LLM I'm using to assist class development is inserting a lot of vulnerabilities. The bad news is that they're not the vulns I want or need. It does save me time, but I cannot imagine just letting these things develop an entire codebase and then just...shipping it.

I have _TWO_ new songs dropping at @defcon.bsky.social this year. One is on the @defconmusicorg.bsky.social soundtrack, it’s an ode to Hacker Jeopardy in collaboration with @lintile.lol called DFIU. One is a 56-bar free verse that will be exclusively available on The Subnet (details below).

When the bobbin runs out exactly at the end of a long seam. :successkid:

New word of the day: Quixotic. "foolishly impractical especially in the pursuit of ideals" Growing up with Don Coyote and seeing Man of La Mancha got me interested in Quixote, but it wasn't till much later that I read it. You'll hear me occasionally refer to things as windmills because of this.

Your mission briefing awaits. Time is of the essence, submit your talk before the gate closes. wkf.ms/45fLrjH Priority Deadline: Friday, Aug. 29, 2025 Final Deadline: Monday, Nov. 3, 2025 #WWHF #MileHigh2026

One of the things I really love about teaching is that it forces me to really learn things. Not just the thing itself, but how it works, why it works that way, where it came from, etc. Not just how to get something done, but how to do it properly. But man is it easy to get nerd sniped 😅

Spent 10 minutes trying to figure out why my sql script fails on setting up a default user's password. Turns out ALTAR != ALTER. I guess my spoopy was showing.

Remember your Homeland’s Heritage.

I'm sure I'm just discovering something that other people have known forever, but "find the word in scrambled letters" games like Boggle or the millions of mobile games out there are a fantastic way to come up with Sci-Fi and Fantasy names.

Mac DFU mode: 1. Device Firmware Update 2. Did Fuck Up who's to say?

Well, Google is finally driving me off of the last service of theirs that I use. You mean all of those services that I didn't ask for, didn't sign up for, and disable as soon as I'm able to (and continue to disable whenever I notice they "somehow" get re-enabled)?

Today I heard the word "deleterious" for the first time and it rapidly became one of my favorite words.

So, out of an abundance of caution I just went in to my Gemini settings and there are multiple other options available not available before that date. And wouldn't you know it, they defaulted on. If you're a Workspaces admin, just go double check you have the settings you expect.

If you want to understand a vuln, implement it in a lab. Nothing has taught me more about hacking than building challenges and understanding what has to go wrong (and right) for various vulnerabilities to manifest in running systems. It also helps understand remediations, which is the whole point

Good friend of mine interviewed a variety of folks from musicians to chefs to martial artists and tech folks and beyond. The central theme of each conversation is passion and curiosity. The playlist is an impressive collection of people and perspectives www.youtube.com/watch?v=VDOt...

15 years is the desktop trebuchet anniversary. I don’t make the rules, I just enjoy them. 🖤 @tanyabjork.bsky.social

Gurdy’s first trip out of the house since it has arrived. Heading out to SoCal Pleasure Faire. I won’t be playing at the faire, but didn’t want to miss out on practice time. So now my friends “get to enjoy” my practicing at night in the Airbnb 😅

Hello friends. The dreaded and long awaiting blog on WHAT THE FUCK HAPPENED TO THE CYBERSECURITY JOBS MARKET has arrived. tisiphone.net/2025/04/01/l... I'm sorry.

If you're a Google Workspace customer and you have already opted out of gemini for your workspace during the beta, you will need to do so again for GA. Coming by end of this month (April 2025).

How did I not know about the Jack Nicholson version of Little Shop of Horrors (that predates the Rick Moranis version)?!

It really bugs me when registration pages silently truncate your password to fit a maximum password length control. It especially bugs me when the login form doesn't do the same. But really, stop enforcing password length limits. Or at least make them larger than 20.

Started introducing the trumpette string to my gurdy playing. It's funny, because I feel like I've been playing the same ~5 tunes for months now. Just as I start to get reasonable at them, we throw another layer complexity onto the stack and I start over from the beginning again 😅

Happy Bandcamp Friday to those who celebrate. Bandcamp forgoes their cut of purchases on the first Friday of each month. Great time to support artists. bandcamp.com

I had the pleasure of having @derek.r00k.net on the latest episode of the Security Chipmunks podcast. ✨ We talked about winning the CTF at WWHF, conferences and careers in cybersecurity. 🎧 Listen to the whole episode on your favorite podcast player or on YouTube at: 🔗 youtu.be/-Z94YSolsfw?...

+1 Understanding packets enables more than just network forensics. It’s understanding networking at a fundamental level. It improves application troubleshooting. It allows you to think differently about command and control. It enables you to be a better tech professional. There’s no tool for that.

Just learning about health checks for docker compose. Was running into an issue where the container was coming up fast but the service wasn’t, so the depends on container was dying. Added a health check to the dependency and added a healthy condition to the dependent container. It all works now!

Just a reminder that shouldn’t need to said You don’t need daughters or a sister or a wife to view fems as people with rights that shouldn’t be assaulted or accosted or whatever Maybe we should just treat people with civility regardless of their identity or your immediate friends and family circle

Another wonderful time at Wild West Hackin Fest. Caught up with old friends, met outstanding new friends, won the CTF as part of an amazing team. My voice is gone, and now it’s time for me to leave as well. Thanks again @bhinfosecurity.bsky.social. Until next time

Remember. It’s never: We fight for (these people) because maybe we’re more at risk if we don’t. No more Niemölling. We fight because they are coming for anyone. Every single person matters. Each and every human being’s life and safety is worth the fight.

I honestly believe our most powerful position in a toxic time that feeds on cynicism, apathy,& despair is to genuinely care and act for a better world. Cynicism is our enemy. We should check it, incl. on the left. It’s not intellectually superior. It’s the virus they’re trying to infect us with. NO

The level of background radiation of stress has been high for a while, but it’s spiking and will continue to rise. It affects you in ways you might not realize because it’s just the general weight of everything rather than any particular thing. Give yourself grace. Give grace to those you love.

For the up in coming or aspirational content creators out there, I’m seeing an increase in fake sponsorship phishing expeditions. It can be exciting to get your first sponsorship inquiry, but take a second, check the email address, etc.

My partner just got cartoon nerd giant circle glasses as her replacement frames. And people, I am smitten. 😏 I mean, again. Or rather, still. I mean, we’ve been married for 15 years, this smitten thing isn’t new. But yeah, shits hot.

Heading to @bhinfosecurity.bsky.social's WWHF next week in Denver. It's been ages since I've gotten to go to a smaller conference and actually be present. Signed up for a class and 4 work shops, I'm so excited! Hoping to see some of y'all there and catch up as well.

Getting far enough in my gurdy learning that what I play almost resembles music, so I started adding the drone string in. Gave me chills. I don't know what it is about drone instruments, but they really do it for me.

My friends think I'm silly for continuing to buy discs and running my own home media server rather than just doing streaming. It's exactly shit like this that makes the effort worth it.

Care for one another. Make sure people around you know they are safe there. Celebrate differences and learn from each other. Embrace “the other”. The only way through divisive rhetoric is with each other.

Diversity, Equity, and Inclusion aren't buzz words or virtue signaling. They're a competitive advantage. Every room I have ever been in has benefited from a wide range of experiences, backgrounds, and cultures. Your company shouldn't need this government mandated to get with the program. However...

At one time in my life I did not have time to read. But I _was_ on the road for 4+ hours a day. I read so many books, and a wide variety of books, via audio. And now that I spend less time on the road I even came back to visual reading. But I still listen to books. www.youtube.com/watch?v=80SC...

Product announcement pro tip: The announcement you wrote is super cool and very interesting, and probably worth the read. But a year or more later, people are just looking for the download link. Don't bury it at the bottom please, I'm more than familiar with what your software does by now

I was today years old when the Pythagorean theorem made intuitive sense to me makerworld.com/models/226436

One reason (of many) I love tmux is easily searchable shell history. My brain absorbs an answer and drops everything else almost immediately, so I often rerun commands unnecessarily to get information I didn’t absorb before. Very noisy and wasteful on offensive engagements.

Just learning about systemd-run. I swear I’ve searched for that exact thing, but whatever search terms I was using didn’t bring it up. Randomly ran across it while reading other systemd documentation.

A wish from me to you.

Original creators/artists post work, go mainly unnoticed. *Except* by those who 'find' it, post w/o credit or link & get way more shares/likes than the original (which in this case is by @tanyabjork.bsky.social). Do Better. Support Artists. IF IT'S COOL ENOUGH TO SHARE, IT'S COOL ENOUGH TO SOURCE.

A grep command I use a ton when parsing unfamiliar large config files. Not fancy, but it parses out all the comment only and blank lines, so you see what is actually being set. grep -vE '(^\s*)($|#)' -v returns lines that don’t match -E is for extended grep Regex explanation: regexr.com/8abb5

Discovery may have declared a war on the holiday, but in this house we observe the Myth-mas Marathon

i’ve been yoloing playing with new shop gear for so long, i unboxed and plugged in my new cnc mill and figured i’d be doing test projects by the end of the day. then i connected the emergency stop button and the raw destructive power of the machine sank in. gonna do some reading first…