Tim Shea

@gingerjet.net

🔐 security architect @ 🎮 playstation 🏳️‍🌈 he/him 🚲 bikes 🐕 dogs 🐈‍⬛ cats DEFCON Goon recovering minnesotan now living in san diego email: gingerjet@pm.me signal: gingerjet.13 psn: gingerjet opinions are my own

sure your “ai” can write code at the 99th percentile and solve open problems in mathematics, but can it get stoned playing factorio and forget why you were refactoring blue circuits in the first place

everytime I buy a new apple product - apple reminds me what a clusterfuck it’s authentication flows are. everytime I have to “unlock” my account and yet I never receive a message when they “lock” my account. and unlocking destroys every recommended practice out there.

Your Apple Account has been unlocked message

It’s truly amazing how many people attending security conferences openly volunteer personal and professional information to a cute bartender

According to anti-cyclist replies, here's evidence that cars and bikes are equally dangerous: 🚗: They kill ~40000 people in the US annually 🚲: I saw a cyclist run a red light 30 years ago

Cocktail Con 2026: Freaky Tiki Edition. Come get leid Friday afternoon by dadbaud and cillic! If you've got an Official(tm) black chip or token you are a Cocktail Con member for life, like it or not. There will also be limited supplies for new folks available--TBA during summercamp. 🍸

Johnnie: Shield of 'Murica - Malört Division@dadbaud.cocktailcon.org · last wk.

Looks like the "official" CocktailCon account is b0rk3n so just gonna put it here: Due to the Administration's budget cuts, CocktailCon will be only on Friday of Summer Camp, from 3pm - 7pm. The theme is "Freaky Tiki", so bring your aloha shirts. Please bring your medallion for entry.

The target audience for this is aged 70+ and the 9 gays in the audience. But I appreciated the parody of musicals and the message of change. Which is why I went as it brought my partner joy.

schmigadoon the musical

Case in point on how we has a profession make things hard for people to make the right decisions. Here are two examples login flows from the largest banks in the US. Same language but clicking on one of them triggers a passkey flow. Clicking on the other one triggers a mobile application flow

passwordless sign in prompt from chasepassworldless sign on prompt from Citi bank
Tim Shea@gingerjet.net · last wk.

The industry repeatedly sucks at adopting anything new in a standard way and passkey implementations are no exception and are still a fucking mess for the average person.

As a security architect - punching a code base into a model and asking what it actually does has been hugely beneficial because a lot of times the people that own the code base don't know what it does or have wrong opinions about what it does.

Cat Hicks@grimalkina.bsky.social · 2w ago

I suspect once we figure it out agentic work in software will actually be a huge aid to codebase comprehension This is such a wildly unpopular thought right now but you know what I'm going to pre-register my belief in this possibility

I’ve been bringing my dog to the same boarding place run by the same people for years now and some dog snapped at my dog and I’ve received at least 4 apologies in the last 24 hours. Anyways here is a pic of summer confused at all the new attention.

summer a mutt lying down confused

After a brief burst of AI companies reaching out I'm starting to get job hits in linked in again. But its always amusing that someone can read my LinkedIn profile and think "siem engineer"

Diego, CA) to design and develop high-fidelity detection content, build and operate the data pipelines that power our security operations, develop automation playbooks that accelerate response, and work across a uniquely diverse telemetry landscape spanning cloud infrastructure, embedded vessel platforms, corporate systems, and operational
technology.