Janosch

@jkppr.bsky.social

DFIR and Timesketch for work, hiking and sailing as a hobby, thoughts are my own, not much more to say...

If you are an OSS maintainer or someone filing security bug reports. This is an essential read. We need an updated process to deal with the high rate of automated vulnerability reports and this initiative points out some very good advice and suggestions. www.cncf.io/blog/2026/04...

The AI-driven shift in vulnerability discovery: What maintainers and bug finders need to know

AI models have recently drastically changed the sophistication, speed and scale of software vulnerability discovery. It is now trivial for non-experts to find real vulnerabilities in software with…

cncf.io

📣THREAD: It’s surprising to me that so many people were surprised to learn that Signal runs partly on AWS (something we can do because we use encryption to make sure no one but you–not AWS, not Signal, not anyone–can access your comms). It’s also concerning. 1/

Meredith Whittaker @meredithmeredith.bsky.social · 10mo ago

PSA: we're aware that Signal is down for some people. This appears to be related to a major AWS outage. Stand by.