I got sick of meetings filling up my day around lunchtime, leaving me without a time to eat, so I wrote a Power Automate flow that detects when I'm close to having no time for lunch and auto-reserves a lunch slot in my calendar

I love everything about this letter - a list of things the general public should and shouldn't worry about when it comes to security www.hacklore.org/letter

Before a certain year, Subarus have a 3-way light switch in the roof of the cargo space. It runs in line with the body of the car, so if you're say... unloading cargo (crazy), it's possible to accidentally flick the switch to light-always-on. If you don't notice the light, you flatten your battery.

Our Call for Villages is officially OPEN, so if you’ve got a brilliant idea, a hands-on activity, or something totally wild you want to bring to the community… now’s the time to submit! forms.gle/JNCA421jfxWj... #BSidesMelb2026 #SecurityBSides #CFVillages

Academic cryptography: "we need post-quantum cipher suites, which will solve everything" Real world crypto: "key management is hard lol" www.nytimes.com/2025/11/21/w...

X has changed their policy and now you can see where the accounts are based. Here’s an “influencer from Texas”

Nice work @kawaiicon.bsky.social www.wired.com/story/this-h...

Tis the seasson #Cybercrime @liamosaur.ragequ.it

If you're into history, I can't recommend the @fallofcivilizations.com podcast highly enough. Thoughtful, vivid, critical, humanistic, detailed, humble and exceptionally well researched

Reminder: GenAI images aren't trash slop because they look bad and generate hands with 6 fingers etc. It's trash because the models are built on content stolen from actual creatives. The quality may improve with time, but it will remain slop derived from a poisoned source

ICIJ's latest investigation The #CoinLaundry is a collaboration of 113 journalists from 38 media partners in 35 countries that exposes how cryptocurrency companies have empowered a shadow economy that lavishly profits from crime. Here are our findings:

Me: "I think I'm finally getting ok at chess puzzles?" Chess.com: "You're in the top 5% globally! Me: "cool!" Chess: "...which places you at about 1.7 millionth on our leaderboards" Me: "wtf"

🥁 EXCITING NEWS - Our CFx's are now open 🎉 - Call for Papers - Call for Training - Call for Villages Visit our website for details - www.bsidesmelbourne.com If you are stuck, or would like to run your idea past one of the committee members, please feel free to reach out. #BSidesMelb2026

Now accepting funding for my startup that is a world leader in a-djentic AI. Drawing on progressive advances in math core, this highly technical evolution introduces polyrhythms, syncopation and palm muting to the technology space

Traditional search has always had a problem with hacked sites being abused for sketchy SEO. AI is making it much worse. We're building systems that make mis- and disinformation campaigns easier www.pickr.com.au/news/2025/au...

"We built this tool that can be abused by threat actors in a completely predictable way - you'll never guess what happened next! Anyway, we figure by reframing it as us disrupting attacks (when we actually enabled them lol), we could spin it into a marketing piece?" www.anthropic.com/news/disrupt...

Traditional search has always had a problem with hacked sites being abused for sketchy SEO. AI is making it much worse. We're building systems that make mis- and disinformation campaigns easier www.pickr.com.au/news/2025/au...

I could not possibly be more fucking tired of hearing the word "agentic" on keynote stages

Apparently there's a rumour going around that I was actually born with my beard. Absolutely ridiculous. To disprove this slander, here is a photo of me at age 14, sans beard

Would you believe this gaslighting little shithead has actually already been fed dinner?

Memories...

Hey uh bc I keep getting asked by Kawaiicon attendees: it’s pepperraccoon.com and yes you can buy cool things there x

pre-writing a devastating obituary for your enemy is god-tier hating of a kind you don’t often see anymore. renaissance haterism. beautiful stuff.

An ABC producer asked if I could do a live deepfake of Julia Zemiro for... reasons. After a weekend of learning how to train a deepfake model, I recorded a segment for a pilot that eventually became Crime Night! You can see my short segment 18 mins into this episode: iview.abc.net.au/show/crime-n...

My day 2 photos of #kawaiicon are now online as well in the same album at www.flickr.com/photos/4nits... Have a great Sunday musing over all the fantastic talks and conversations. Many thanks @kawaiicon.bsky.social Crüe, volunteers, contractors, venue staff etc. who brought the event to life.

Tickets are up and on sale! Grab yours at: events.humanitix.com/crikeycon-11

Good news #Kawaiicon friends! Slides are now up on my site: garden.errbufferoverfl.me/soapbox/bull... Keep your eyes out for raw data, zines and recordings! Which should be there 🔜

My Day 1 photos of #Kawaiicon are online along with the earlier uploaded bag and tag and axe throwing photos. www.flickr.com/photos/4nits... @kawaiicon.bsky.social

"I helped the security researcher with developing an exploit for the vuln, which contributed to the price of their $200k payout" - incredible generosity from @quidity.bsky.social 💜💜💜 #kawaiicon

I loved @justinsteven.com's #kawaiicon talk about exploiting BBOT. Amazing research. Approachable presentation despite the tech depth, next level polish &jokes in the deck, and the cherry on top was Justin's signature thoughtful, blame-free and humble philosophy of vuln disclosure and remediation 💜

Check out this grouse pallet I found at #kawaiicon

Seeing @lokifer.nz and @pepperraccoon.com and @ellearmageddon.bsky.social and @fre.bsky.social and @liamosaur.ragequ.it and @sochumpy.bsky.social and @sputina.bsky.social and @metlstorm.risky.biz and @errbufferoverfl.bsky.social and @shl.ee and and and and many more.. Thank you folks

I didn't like the harsh direct light from the naked globe above my desk (and it reflected off my bald head on video calls). Couldn't find a light shade I liked, so I got a studio lantern diffuser and mounted it to the ceiling over the globe 💡🏮

I see we're talking about "juice jacking" again. *sigh* My friends, "juice jacking" is not A Thing. This gets re-raised every year or so, but it has not been a realistic attack since the dawn of mobiles. Please advise non-security people to worry about something else. Like using a password manager

"I am at peace these days Give or take a fit of blinding rage" Every time Propagandhi releases a new album I go through a journey of "what is this new rubbish" through to "this latest album is their masterwork", progressed forward with every listen open.spotify.com/track/0NLqGb...

Henlo frens. I am back after a sabbatical. If you're at #CyberconMelb25, you can catch me talking about what we learned by analysing the results of 2,500 pentests at 14:50 in room 212 today melbourne2025.cyberconference.com.au/sessions/ses...

Just another day on the Internet with an apostrophe in my surname. GG broadcom

Y Gelli, Cymru / Hay-on-Wye, Wales. The town of books. Population 1,600. 30 bookshops. I love this sign. Sharp. Crisp. Clear. A work of art 😍

Harsh. But fair. Hay-on-Wye, Wales

The logo of the bus company I'm using. Perfection.

Out of Office message: Set ✅ Teams and Outlook mobile apps: Deleted ✅ Long Service Leave commences right now. This time tomorrow I'll be in Vietnam 😎

The improvement that some upgraded lighting makes to image quality is huge. Pic 1: Overhead light. Head looks like a full moon, shadows all over face, no background separation. Pic 2: Key light + fill light. Skintones look much more natural and healthy. Added a blue LED at the guitar just for fun

The current economic bloodbath from the Trump tariffs is a good argument against the world/US being run by a shadowy conspiracy of the uber rich. They're all losing tons of money for no benefit. This whole thing is being engineered by a small group of economically illiterate clowns close to Trump

Here's a tip for people who are watching what's happening in the markets and wondering if they should "buy the dip" - you can quite often find a large 1kg tub of hummus for only a dollar or two more than the 200g dip-sized tubs. It's much better value.

Today my team released a report which draws on a year of pentest data - 2,500 engagements for 800 customers. 26,000 individual findings. We analysed this data to look for the root causes of the most common high-risk issues, and compared issues across industries.

This is admittedly a semantic argument, but i'm strongly of the opinion that there's no such thing as "Automated Pentesting". Even with the latest AI, these tools can't compete with what a human Pentester can do. Unfortunately, "Spicy Vuln Scanning" is less likely to catch on as an industry term

Tate is like Trump in this sense: the most grotesque thing is not that he exists, but that he’s hugely popular, and what that says about us as a species.

International World Standards Day is 14/10 (14 Oct) * * Except in the US, when World Standards Day is 11/14 (14 Nov) en.wikipedia.org/wiki/World_S...