Chris Merkel

@chrismerkel.bsky.social

cyber leader, teller of cautionary tales, career dev helper Professional alt, unprofessional posts. Masto: @chrismerkel@infosec.exchange

the thing about having actual principles is that when a politician I respect does some stupid shit I can just be like, “that sucks, knock it off” instead of inventing an imaginary world where I’m forced to defend stupid shit for procedural 4d chess reasons

A few years ago I was next on the talk track after @joshcorman.bsky.social and I spent the lead up trying to find the right way to express my gratitude for the spirit and energy he gives to protecting US critical infrastructure. The best word I could find to describe Josh was 'indomitable'.

Andy Greenberg@agreenberg.bsky.social · 4w ago

I sat in on a close-door war game where the insurance industry simulated a cyberattack against US water utilities by Volt Typhoon, Chinese state hackers who have been penetrating US critical infrastructure since at least 2023. The results were catastrophic. www.wired.com/story/what-h...

China's selling access to Fable via proxy for 83% less than API list price. Attackers don't need to steal creds to have affordable access to frontier models. Meanwhile your defenders are running out of tokens riiiiiiiiiiiiight about now like

BildBildBild

Assessments of threats can be seen from different perspectives. Developers may come across privacy impact assessments (PIAs), where threats to users' data and the impact on those users are paramount. PIAs may additionally examine harms to organisations, third parties and wider society. (1/6) #games

Bild