I’ve been lucky enough to have a decently lengthy and very cool career in security. But also there have been many days working in security that make me want to walk directly into the sea.

If you’re wondering how I’m doing, a work doc tool just had to update my attempted use of the word “consulting” from “conslutting”.

Okay, Ruggable, imma need you to have a sprite and chill.

The “prosecute the former regime at every level” candidate has my vote in 2028.

Barbra Streisand Wooo, wooo, wooo-ooh, wooo, wooo, wooo-ooh Wooo, wooo, wooo-ooh, wooo, wooo, wooo Barbra Streisand I never watch 60 minutes but I watched that one about CECOT wooo Barbra Streisand

Any time I read an article with leaks from spyware vendors, especially containing images from their presentation materials their software UI, I’m astounded at terrible quality of the graphics | UX. Then I remember every UI/UX pro I know is a wonderful human being and would never do this garbage.

Kicking off soon, pals! We are streaming live if you are still in reg or cozy in your own hacker den: www.twitch.tv/kawaiiconnz

KawaiiconNZ - Twitch

New Zealand's cute infosec con (& book publishers) ✨The weirdness returns: November 6-8, 2025

twitch.tv

Fuck yeah, NYC! Congratulations to you all! Happy for and jealous of you for your amazing Mayor Elect Mamdani!

Are you ans experienced iOS security researcher? If so, you probably already know about the Apple Security Researcher Device Program (security.apple.com/research-dev...). If you’ve been thinking about applying, applications close in a week, on 31 October. Apply before the opportunity 👻s you!

Security Research Device - Apple Security Research

Get an iPhone dedicated to security research through the Apple Security Research Device program. Learn how to apply.

security.apple.com

I believe in evolution, in all contexts :) security.apple.com/blog/apple-s...

A major evolution of Apple Security Bounty, with the industry's top awards for the most advanced research - Apple Security Research

Today we’re announcing the next major chapter for Apple Security Bounty, featuring the industry’s highest rewards — up to $2 million and a maximum payout in excess of $5 million — expanded research ca...

security.apple.com

Yikes. Did not enjoy. Please unsubscribe.

Werner Herzog just started an IG account. You’re welcome.

I know it’s hard to find things to be happy about these days, but Zohran Mandani won NYC’s mayoral democratic primary race last right, protesters managed to shut down the ICE office in here in SF yesterday, and S4 of The Bear drops today. Absolutely dining on these morsels of serotonin this morning.

Walking up on a dreary Sunday morning, the apartment is quiet and still, the dog sleeping in his bed. Early, low light filters into the bedroom giving it a low parchment glow. My brain begins to boot into awareness: Steve le- (Wah ahahaha) Le poisson Steve (poisson Steve) It est oraaaaaaannnnnnge

Pegasus spyware maker NSO Group just got publicly rebuffed by the US. They came to DC to get off the US blacklist. It did not work out. You know about the human rights abuses, but let me tell you why NSO is no friend to the United States. 1/ www.washingtonpost.com/national-sec...

Behold my favorite weird Chrome security bug of 2025 so far! A jaw-dropping URL / omnibox spoof via ligatures, specifically the googlelogo ligature. issues.chromium.org/issues/39178...

Security friends attending RSAC, please attend this session and heckle the fuck out of Kristi Noem.

Łukasz@maldr0id.bsky.social · last yr.

If you’re at RSA remember to leave your pets far away from the venue!!

The pants I am wearing today are cute (subjectively), comfy (objectively), but so noisy. I don’t think I can wear them to the office again. I feel the need to compulsively apologize for being disruptive, as I sound like a sailboat cruising aggressively in blustery conditions just walking about.

So I guess this is the wrong time for my standard takes that CVEs often wielded like infosec Pokémon and CVSS scores are terrible data points for making software update decisions?

Two things I’ve never noticed on previous trips to Vancouver. 1. Some of the freeways have bike lanes, such as the road to the airport. 2. There are tampons and pads sitting out in the restrooms available for free. Two ways America would sadly never.

I’ve been in Vancouver (Canada) since Thursday. This somewhat randomly timed trip could actually not have been better timed. On top of my general long-time love for this city, I am especially daunted leaving tonight and returning to the U.S. and well, everything else.

Chromium now has a patch rewards bounty for fixing some (non-security) bugs! This is very cool and provides an opportunity to contribute to open source and get some 💵 for your efforts!

Supporters Of Chromium-Based Browsers@socbb.bsky.social · last yr.

🚨 Attention Chromium developers! 🚨 The SOCBB Bug Bounty Program is offering up to $10,000 for fixing bugs in Chromium-based browsers like Chrome & Edge! Contribute to repos like chromium, v8, and more. Get paid via GitHub Sponsors! Start fixing: github.com/Supporters-O... #Chromium #OpenSource

This is very cool and very excited to see this now live! If you like fixing bugs and have been looking for an excuse to participate more in OSS — here’s your chance and also get some $$$.

Rick Byers@rbyers.net · last yr.

I'm excited about this program! Chromium isn't necessarily easy, but I know there are great engineers out there who would love to get paid for improving it!

In the latest installment of weird startup ads, did you know:

A longer version of the Tufts announcement about the abduction of an international graduate student by federal authorities, circulating on Twitter and Reddit.

Blue sky nice ghost@rajandelman.bsky.social · last yr.

Jesus Christ

Congratulations to person who wrote the final episode of the series One Day, because that was truly the single most saddest and truly devastating 30 minutes of anything I’ve ever seen on a screen.