come work with me! @oxide.computer is currently hiring for a whole bunch of different engineering roles, up and down the stack — from distributed systems to electrical engineering!
Oxide Computer Company@oxide.computer · last yr.You're not seeing double! New engineering positions are posted for the second week in a row. Come join the team! oxide.computer/careers
Scoop: The databases powering DOGE.gov are insecure, and people outside the government have already pushed their own updates to the site to prove it: www.404media.co/anyone-can-p...
Anyone Can Push Updates to the DOGE.gov Website
"THESE 'EXPERTS' LEFT THEIR DATABASE OPEN."
404media.co
Device code phishing strikes again www.volexity.com/blog/2025/02...
Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication
Starting in mid-January 2025, Volexity identified several social-engineering and spear-phishing campaigns by Russian threat actors aimed at compromising Microsoft 365 (M365) accounts. These attack cam...
volexity.com
New version of Product Security Bad Practices from CISA just dropped. www.cisa.gov/resources-to...
Product Security Bad Practices | CISA
This voluntary guidance provides an overview of product security bad practices that are deemed exceptionally risky, particularly for software manufacturers who produce software used in service of crit...
cisa.gov
After the holidays I am ready for my vacation next week where I return to work.
Lately, every BSides seems to have a talk on reframing security teams as a “Department of Yes” We don’t hear nearly as much about the value of a well-considered, strategically deployed “No” I've pulled together guidance on giving a better, more constructive No: ramimac.me/saying-no
How to Say “No” Well
Security’s pivot from ‘Department of No’ to ‘Department of Yes’ misses the real lesson - how to say ‘No’ the right way.
ramimac.me
I've never felt so seen and attacked at the same time. youtu.be/4gygGeLsU7A
When You Get Your Password Wrong
YouTube video by Fairbairn Films
youtu.be
First time in DC. Got to see the Apollo 11 command module at the Smithsonian National Air and Space museum.
Public Oxide security advisories are live! docs.oxide.computer/security
Docs / Oxide
docs.oxide.computer
Great article on our work with Lawrence Livermore National Laboratory and how they'll use their new Cloud Computer
Oxides rackscale compute platform lands at LNLL
System to serve as a proof of concept for applying API-driven automation to scientific computing
buff.ly
