Andy;--

@dragontologist.bsky.social

By day, cybersecurity & infosec in biglaw, by night, the nerdiest hobbies imaginable. Cons for Double Exposure (DEXCON, Dreamation, METATOPIA) Larps, board games, leather armor making now I guess? Leftist & socialist. Trying to avoid stereotypical. He/Him

New, by me: The Justice Department is prosecuting an American for allegedly providing U.S. border agents with a "duress" passcode that wiped the contents of his phone when they entered it. We've confirmed the phone was running GrapheneOS. Bypass for ad-blockers: web.archive.org/web/20260724...

US accuses American of allegedly wiping his phone using a 'duress' password during border search | TechCrunch

A U.S. citizen has asked a court to throw out the government's claim that he gave over a passcode to border authorities that wiped his phone's data, opening up fresh questions about a person's constit...

techcrunch.com

This is the food supply chain equivalent of “[software] is insecure because they put out a lot of CVEs” It’s GOOD that they patch and disclose a lot of vulnerabilities, actually. Who you really need to worry about are the ones who don’t think they have any

Sarah Taber@sarahtaber.bsky.social · 3w ago

A quick word on Taco Bell: That's where we found the suspected lettuce, and it's not bc Taco Bell is gross. It's bc Taco Bell is REALLY GOOD at tracing product! Keeping track of exactly where they got their ingredients, & exactly what restaurants each shipment of ingredients went to!

you wanna have a waterfall in your game with nothing hidden behind it, that's very a choice you can make. i personally wouldn't anger all my players and possibly spark a congressional hearing, but maybe you've got a good reason, which by the way i doubt

OKAY it's been a LONG week getting through OTHER books in my TBR pile but I've been waiting for this one for such a long time that it needed to skip the rest of the line. Damn good so far. Annoyed that I need to go run a convention instead of just continuing to read but HECK

Natalie Zed@nataliezed.bsky.social · 3mo ago

At last, the day has come. Today is VILLAIN release day! It barely seems real, and I'm thrilled and relieved and so happy this weird, difficult, joyous rejection of a redemption arc exists in the world. US: www.harpercollins.com/products/vil... Canada: www.harpercollins.ca/978006334136...

The cover image of a novel entitled VILLAIN by Natalie Zina Walschots. The cover is vibrant magenta and the title is in dark blue font with teal highlights, and the author's name is in yellow. The cover features the silhouette of a person wearing a suit and holding a cane, surrounded by the threatening silhouettes of five people wearing capes and striking superheroic poses.

I have this running theory that there's a WIDE open space for a larp that runs from sunday noonish until late monday (with the option to stay overnight till tuesday, but nothing happening tuesday).

This exactly. The priority is to get the work done. Putting barriers in place of that work means people will go around them. The business's priority is the business. As security, we need things to either work invisibly, or to demonstrate the consequences (risk outcome!) in a way that people FEEL it.

Patrick Howell O’Neill@patrickhowelloneill.com · 2mo ago

For as long as I've been in security, one major problem is that smart security people have a problem understanding that non-security people mostly will not sacrifice usability even if they are high value targets. The inability to think and talk about this is a huge weakness across the field

UC Berkeley Law creates new AI policy that bans AI for "conceptualizing, outlining, drafting, revising, translating, or editing any work submitted for credit" or exams because "thinking remains the sine qua non of good lawyering (and of a quality legal education)." That's what I'm talking about.

Rule:
The use of AI is prohibited for aid in conceptualizing, outlining, drafting, revising,
translating, or editing any work submitted for credit. AI use is prohibited for any use for
any purpose in any exam situation. Students may not upload course
materials—including assignments, readings, slides, class recordings, or other class
content—into generative AI systems. AI can be used for research on papers ONLY for the
limited purpose of identifying sources, such as cases, statutes, or secondary sources.
Students are responsible for the accuracy of their research and all other aspects of their
submitted work. Citations to sources that do not exist will raise a presumption of
prohibited AI use

Well, it happened. A client disregarded my advice about using generative AI and guess what? It gave them bad advice AND the judge ruled that by using it, Client waived confidentiality and ordered us to turn a bunch of private stuff over. STOP USING GENERATIVE AI FOR LEGAL THINGS. I BEG YOU.

The thing I've had drilled into my head over and over since I started working infosec is this: "If they want to hack you, they will. All of our defenses can only make it more expensive and time consuming. Most of the time, that's enough to deter the small actors. But the big ones can always get in."

Marcus Hutchins@malwaretech.com · 3mo ago

Listening to infosec people freak out over Mythos is so tiring. Like, bro, your local water treatment plant runs Windows XP, your mobile provider's hardware is older than you are, and the protocol that routes internet traffic is secured by everyone just agreeing that hijacking it would be uncool.