On a road trip to Savannah, we stopped just north of Columbia at a roadside diner. I spotted “raw fries” on the menu and am intrigued. Surely they’re not going to bring raw potatoes over??? I order it and the waitress asks “floppy or crispy?” I request crispy. This is what hit the table.

At our Committee Review Meeting, Dr. Georgianna (George) Shea and Adrian Sanabria led discussions of 2 HoF candidates. 🏭 George discussed 𝘾𝙤𝙪𝙣𝙩𝙚𝙧𝙞𝙣𝙜 𝘾𝙮𝙗𝙚𝙧 𝙎𝙖𝙗𝙤𝙩𝙖𝙜𝙚 by Andrew Bochman and Sarah Freeman 👉 tinyurl.com/4pdbrufk 🏗️ Adrian shared Ross Haleliuk's 𝘾𝙮𝙗𝙚𝙧 𝙛𝙤𝙧 𝘽𝙪𝙞𝙡𝙙𝙚𝙧𝙨 👉 tinyurl.com/2envxjx9

I have found the best pigeon.

I know absolutely nothing about anime or manga, but really enjoyed this latest story by @lorenzofb.bsky.social; it's fascinating that this comic from 30 years ago — predating the modern Web — got so much right about cybersecurity today.

The 404 Media Podcast is up! This week - the Epstein email dump is a mess - contractor paying randos on LinkedIn $300 to physically track immigrants - subscribers-only: a new code of conduct in the adult industry Watch here: youtu.be/_6tVI4jh__Y

Starlink on a flight is indistinguishable from solid WiFi at home. It is free on this United flight and I’m streaming YouRube at 1080p while doing other work

Cloudflare wasn’t down, it was just resting My pings came back, they just took 14,400 seconds to do so

A government contractor is recruiting randos on LinkedIn to physically track undocumented immigrants for ICE. $300 per person found www.404media.co/contractor-p...

What I hear when I hear modern country music youtu.be/lR2pslqKNP8?si…

Your attack surface is sprawling & full of blind spots. 🎥 On Dec 3 at 2 PM ET, SC Media brings together @hdm.io, @todb.hugesuccess.org, & @sawaba.bsky.social to reveal how to operationalize attack surface management without losing your mind. 👉 Register here: www.scworld.com/cybercast/at...

this is cool and people saying "just buy a whistle on amazon" did not read the story, have lost the light in their hearts, and will not enter heaven with that attitude www.404media.co/the-latest-d...

Every time someone’s like “put that in the louvre,” my head now goes “and then steal it from the louvre, the security password is louvre”

The deceptively simply-named Password Checker is legit and good and more intro-to-security material should point to it. @troyhunt is doing good work, largely for free, and this site is most definitely not stealing your passwords. He has plenty already. https://haveibeenpwned.com/Passwords

The dude that bankrolled the movie Half Baked acquired a controlling interest in NSO Group Doesn’t look like he’s ever ventured outside entertainment before, I don’t see any obvious connection or rationale (though I haven’t dug very deep) This was not on my 2025 bingo card

Trump wants to erase any "negative" content from educational sites at National Parks. This week, @samleecole.bsky.social speaks to a group of data preservationists behind "Save Our Signs" who want to save the real history of parks before the administration erases it.

My partner nailed it - this is what AI chatbots feel like youtu.be/ptz4vng6HX0

There's some really big caveats to this. A thread.

I’m so relieved to hear this. It’s not just hyperscalers either. Every time I build even the simplest things these days, it feels like trying to build a lego set while a bunch of monkeys do their best to tear it apart.

Yes! Most people's experience with AI is not "a very tedious, data-heavy, repetitive process that if automated could vastly improve the quality of my work and job." It's "mom sending me fake videos of riots in her neighborhood, she's scared to go outside" or "trump shits on protestors."

Remember that heist at the Louvre a few weeks back? Some details about the state of tech debt and cybersecurity at the Louvre have been made public and I shared some thoughts. www.linkedin.com/posts/adrian...

You know how cybersecurity is a market for lemons? This creates an opportunity for lemonade makers. I share some thoughts on why and how this happens. open.substack.com/pub/defender...

“a new study… showed that everyone was bad at estimating their own performance” This is old news. Dr. Dunning already came to this conclusion before GenAI was a thing. Later in his career, he came to believe that this was more of a scale, and everyone was somewhere on it.

When human police are abolished there will be only one law on the mean streets: Horse Cop

Never again will an Apple Watch tell me to stand up when I’m already standing up. New Pebble and old Pebbles: back in business! thanks @ericmigi.com

Can’t think of a better way to spend Halloween than to set up old video games at my favorite bar and teach younger generations to blow on cartridges (I do this once a month at Crafty Bastard if you’re in the Knoxville area) And spend time with my trivia team, spending our winnings

The Pebble is baaaaaack!!! Already doing a better job than my Apple Watch and I've had it on for 5 hours.

Talking about why vuln mgmt is broken with @todb.hugesuccess.org and @hdm.io in 9 minutes! www.scworld.com/cybercast/fi...

🎙️ Join @hdm.io, @todb.hugesuccess.org & @sawaba.bsky.social for a live SC Media webcast: “Fixing a Broken System: Why Legacy Vulnerability Management Tools Can’t Keep Up” Learn what’s next for exposure & attack surface management. 📅 Oct 29 ⏰ 2 PM ET 🔗 www.scworld.com/cybercast/fi...

NEW: DHS is asking companies to submit plans to turn standard 4x4 trucks into AI-powered watchtowers—combining radar, cameras, and autonomous tracking to extend surveillance on demand. by me @ wired:

I think No Kings has a branding problem 1. Donald Trump probably likes being compared to a king 2. The UK has a king and is looking better off at the moment

Drink the rich?

This Korean data center fire keeps getting more and more tragic. Here’s what I know, to catch you up. 1. Back in 2017, S.Korea built “G Drive” for government officials to store all their files (no relation to Google drive, the ‘G’ stands for Government)

Apple Announces $2 Million Bug Bounty Reward for the Most Dangerous Exploits www.wired.com/story/apple-...

I released a new blog post: What it's Like to Record an Audiobook. There are photos, a video, and stories, just like always! https://twp.ai/9PVhDM

100% would buy this book I wouldn’t read it though. 3 months later, I’d also buy the audiobook, and then I’d listen to that

I want an internet IP lawyer to flesh this out better than I could (and let me know if you know where one has), but I kinda can't get over how the IP industries steamrolled tech in the late 90s and early aughts and now tech is steamrolling the IP industries.

Today is a day when arts degrees are worthless, but the product of those degrees is so valuable it would kill an entire industry if they were made to pay for it.

They’re using American tax dollars to fund infrastructure in Argentina because that’s where they’re all going to flee when we kick them out of office

For whomever needs to hear it 1. Bad Bunny is American 2. Rihanna is not 3. Shakira is not 47. Exactly 0 people complained about The Rolling Stones playing the half time show 48. The Who is not 49. U2 is not 50. Etc

Prediction: 🌶️🌶️🌶️

📺 Live Webcast: Fixing a Broken System 📅 Oct 29 • 2PM ET Legacy vuln mgmt leaves 25–40% of assets invisible. Join @ hdm.io, @todb.hugesuccess.org & @sawaba.bsky.social as they unpack blind spots, failed scans, & what’s next. 👉 www.scworld.com/cybercast/fi...

Thanks, #GrrCon.

ICYMI: A viral app called Neon, which pays you to record your phone calls so your audio can be used to train AI, has gone offline after I discovered a security lapse that allowed any user to access the phone numbers, call recordings, and call transcriptions of any other user.

I really can't stress enough how shoddy the programming in this space is. Everywhere you look, it's slapdash and insecure. techcrunch.com/2025/09/25/v...

Live again today from #oktane 2025. We’ll be kicking off at 9:40am PST with the intro followed by a series of interviews with Mandy. Then I’ll be doing Enterprise Security Weekly live, starting at 2:40pm PST! https://www.youtube.com/live/K-JTuv9-1CI?si=IpM1VKqqgMGo8M-n

Going live from #Oktane in 2 minutes https://www.youtube.com/live/RfSEjWXNelk?si=ZhiNqnMms2otj3Df

🎙️ @todb.hugesuccess.org joins @sawaba.bsky.social, Katie T., @jackiesinsecurity.bsky.social, Sean Metcalf + Ayman Elsawah on the ESW pod to chat: 💥 Vuln mgmt is ripe for disruption ⚠️ CVE checklists don’t stop breaches 🔑 Creds, misconfigs & EOL > “critical” CVEs 📺 www.runzero.com/resources/di...