lord help me I’m at a cocktail event with a roomful of … IT security people.
Tim Shea
@gingerjet.net
🔐 security architect @ 🎮 playstation 🏳️🌈 he/him 🚲 bikes 🐕 dogs 🐈⬛ cats DEFCON Goon recovering minnesotan now living in san diego email: gingerjet@pm.me signal: gingerjet.13 psn: gingerjet opinions are my own
sure your “ai” can write code at the 99th percentile and solve open problems in mathematics, but can it get stoned playing factorio and forget why you were refactoring blue circuits in the first place
Attention early birds - get ready for the #DefCon network! WiFi registration is open for those who want the most secure browsing experience: wifireg.defcon.org defcon.social/@defcon/1170...
everytime I buy a new apple product - apple reminds me what a clusterfuck it’s authentication flows are. everytime I have to “unlock” my account and yet I never receive a message when they “lock” my account. and unlocking destroys every recommended practice out there.
It’s truly amazing how many people attending security conferences openly volunteer personal and professional information to a cute bartender
According to anti-cyclist replies, here's evidence that cars and bikes are equally dangerous: 🚗: They kill ~40000 people in the US annually 🚲: I saw a cyclist run a red light 30 years ago
How many people are killed by being struck by a car each year? How many by bicycle? Based on that information which real problem should we be addressing?
You can’t hear a bicycle coming at you and at 25 mph, there is enough force there to kill you. Both vehicles and bikes are hazardous to pedestrians. I support bikes but they need to operate within traffic laws as everyone else has to.
The wait is over. Meet the #DEFCON34 badge! It’s the creation of hardware superstar Bunnie Huang, and it features his open-source, fully inspectable #baochip. What will you make with yours? www.wired.com/story/defcon... #defcon #badgelife
The New Defcon Badges Pack a Unique Open Source Chip That Doubles as a Security Key
Created by legendary hardware hacker Andrew “bunnie” Huang, the badges for this year’s famed security conference aim to push the boundaries of security and transparency.
wired.com
Once again security 101 practices would have prevented this. And stop blaming “human error” - any properly configured environment would have accounted for someone screwing up.
Anthropic reveals its own rogue-model incidents: Due to human error in configuring a test environment, three Claude models hacked outside organizations during CTF exercises. Two proceeded despite realizing they were on the internet. www.anthropic.com/news/investi...
Claude hiring someone on the dark web using crypto it gets out of a pump and dump scheme so it can finish a capture the flag exercise by having someone drive to an evaluator’s house and beat the passwords out of them
information wants to be free (to break into your house)
Film you've watched more than six times with a gif. Hard mode: No Star Trek, Star Wars, LOR, Marvel, Disney or Ghibli.
Weary Soldier Walks to Tree in 1917 Field
Alt: Weary Soldier Walks to Tree in 1917 Field
static.klipy.com
Film you've watched more than six times with a gif. Hard mode: No Star Trek, Star Wars, LOR, Marvel, Disney or Ghibli.
Cocktail Con 2026: Freaky Tiki Edition. Come get leid Friday afternoon by dadbaud and cillic! If you've got an Official(tm) black chip or token you are a Cocktail Con member for life, like it or not. There will also be limited supplies for new folks available--TBA during summercamp. 🍸
Looks like the "official" CocktailCon account is b0rk3n so just gonna put it here: Due to the Administration's budget cuts, CocktailCon will be only on Friday of Summer Camp, from 3pm - 7pm. The theme is "Freaky Tiki", so bring your aloha shirts. Please bring your medallion for entry.
The target audience for this is aged 70+ and the 9 gays in the audience. But I appreciated the parody of musicals and the message of change. Which is why I went as it brought my partner joy.
we don’t deserve John Leguizamo
No one has ever looked cooler than this
Friendly #DEFCON34 reminder: Meta-style glasses with recording capabilities are prohibited at DEF CON. There is no exception for recording glasses with prescription lenses. Be sure to pack non-violating eyewear if you need them. Please see our Photo policies for more. defcon.org/html/links/d...
Case in point on how we has a profession make things hard for people to make the right decisions. Here are two examples login flows from the largest banks in the US. Same language but clicking on one of them triggers a passkey flow. Clicking on the other one triggers a mobile application flow
The industry repeatedly sucks at adopting anything new in a standard way and passkey implementations are no exception and are still a fucking mess for the average person.
The worst part about getting older is you start experimenting with stuff like getting up earlier and working out consistently first thing in the morning and not drinking every day and you realize that this does make you feel better than not.
[Darth Vader when he strikes Obi-Wan down and he disappears leaving only his robes behind] Damn that’s… that’s not what happened to all those kids
Bluesky is actually really fun if you block the right 27,000 people
That being said - we do it rather well - turn on passkeys to your playstation account if you have one ... www.playstation.com/en-us/passkey/
Passkey | PlayStation
Activate a passkey for a faster, more secure sign-in experience.
playstation.com
The industry repeatedly sucks at adopting anything new in a standard way and passkey implementations are no exception and are still a fucking mess for the average person.
There are e-bikes that are enhanced bikes and there are e-bikes that are basically mopeds. right now they are treated as the same thing and that is what causes a lot of silly arguments.
E bikes are not bikes, e bikes are motorcycles with pedals.
The PS3 becomes 20 year old tech this year. At the time the PS3 was released, an equivalently old piece of tech was the Atari 7800.
The industry repeatedly sucks at adopting anything new in a standard way and passkey implementations are no exception and are still a fucking mess for the average person.
between passkeys and webp i’m starting to think that software consumers just hate good things
As a security architect - punching a code base into a model and asking what it actually does has been hugely beneficial because a lot of times the people that own the code base don't know what it does or have wrong opinions about what it does.
I suspect once we figure it out agentic work in software will actually be a huge aid to codebase comprehension This is such a wildly unpopular thought right now but you know what I'm going to pre-register my belief in this possibility
I’ve been bringing my dog to the same boarding place run by the same people for years now and some dog snapped at my dog and I’ve received at least 4 apologies in the last 24 hours. Anyways here is a pic of summer confused at all the new attention.
After a brief burst of AI companies reaching out I'm starting to get job hits in linked in again. But its always amusing that someone can read my LinkedIn profile and think "siem engineer"