At the same time, I’m exploring new full-time or contract opportunities in: •Security and privacy education •OSINT and investigations •Program and product management
Nahum Shalman
@nahum.shalman.org
Opinions expressed are my own. https://blog.shalman.org/ http://hachyderm.io/@nahumshalman (he/him)
A bittersweet announcement: I was impacted by the layoffs at Consumer Reports, alongside a number of extremely talented colleagues. I’m deeply grateful for the opportunity and so proud of the work we did fighting for consumers and helping people stay safer online.
Why yes, in my free time I did build a small web app with dropshot for the backend and then I built out end to end visibility from the web client through to the backend all visible in my personal free tier Honeycomb account.
I wrote a post about why I don't like the name that Amazon uses for their post-incident review process: "Correction of Error". surfingcomplexity.blog/2025/12/20/w...
Why I don’t like “Correction of Error”
Like many companies, AWS has a defined process for reviewing incidents. They call their process Correction of Error. For example, there’s a page on Correction of Error in their Well-Architect…
surfingcomplexity.blog
I have lived in this house for "hmm, the water dispenser is running slowly; I bet the upstairs toilet handle got stuck running... Yup!" years.
We are opening up the @oxide.computer Discord to more than just recording Oxide and Friends, and now have some general discussion channels, as well as some user channels for our open source projects discord.gg/FRwjhBaH
Join the Oxide Computer Company & Friends Discord Server!
The Oxide Computer Company and friends; home of the Oxide and Friends podcast. | 4382 members
discord.gg
My command line data analysis tool is at a point where I'm ready to share it! `freq` is a tool I wrote in Rust, intended to replace pipelines of `grep`, `sed`, `awk`, `sort`, `uniq -c`, and `sort -rn` to look at distributions of values in datasets. I use it daily. rya.nc/gh/freq
GitHub - ryancdotorg/freq: Like `sort | uniq -c | sort -rn` but better
Like `sort | uniq -c | sort -rn` but better . Contribute to ryancdotorg/freq development by creating an account on GitHub.
rya.nc
"Tailscale Enterprise Plan 9 Support" tailscale.com/plan9 (A little thing I wrote and worked on over the past few weekends with @swtch.com)
tailscale.com
Happy Don't Trust Anything You Read On The Internet Day to all who celebrate!
Anyone who says they never fell for a phish or other online scam is either lying or doesn't use the Internet. We have all been there. Well done to @troyhunt.com for being so open about his experience so that we can all learn from it
It finally happened - I got phished. Impact is limited to the Mailchimp mailing list for my blog, brief blog post with details here and more to come later: www.troyhunt.com/a-sneaky-phi...
It finally happened - I got phished. Impact is limited to the Mailchimp mailing list for my blog, brief blog post with details here and more to come later: www.troyhunt.com/a-sneaky-phi...
A Sneaky Phish Just Grabbed my Mailchimp Mailing List
You know when you're really jet lagged and really tired and the cogs in your head are just moving that little bit too slow? That's me right now, and the penny has just dropped that a Mailchimp phish h...
troyhunt.com
I can't shake this feeling that there is currently a massive opportunity for companies that want to bet on human intelligence over AI. Tons of skilled people are being laid off. I wish I had a business idea right now.
For those of us who are increasingly in positions where we cannot count on the rule of law to protect our digital privacy or security, here are some thoughts on how to threat model for your community: www.eff.org/deeplinks/20...
Building a Community Privacy Plan
Everyone's security plans and situations will always be different, which is why we often say that security and privacy are a state of mind, not a purchase. But the first step is always taking a look a...
eff.org
Do you appreciate good visualizations of math? Curious about the Talmudic approach to settling bankruptcy claims? Have I got the Mathologer video for you! https://youtu.be/uNemXgZ-MWY?si=HL8I1n3BL44KPXF2
How Did Water Solve the 1800-Year-Old Talmudic Bankruptcy Problem?
youtu.be
My superpower is that I know just enough about a lot of things to know that for everything I know about that there's someone who knows more, but most importantly I either know exactly who, or at least I know how to find them and learn from them.
Probably a 3? I don't think I have enough of a parasocial presence to be intimidating to strangers, and I'm pretty confident I am not intimidating to people who know me. How well am I calibrated?
quote this with how intimidating YOU think you are on a scale of 1 - 10 and let other ppl reply to it with how intimidating THEY think you are >:)
Be the helpers Mr. Rogers said to look for.
Ever wonder how we fixed a memory leak in our Rust proxy? From keyboard interrupts to async debugging - here's the full story of making our infrastructure more reliable for 35+ regions worldwide 🦀 🔗 ➡️ https://fly.io/blog/rust-memory-leak/
Another callout for the Quiet Posters feed: bsky.app/profile/did:... It's no longer possible for mere mute keywords to block the endless political posts on here, alas. But "people who don't post very often" is a surprisingly great filter. (I'm sure it filters out me. Nobody's perfect.)
#Tailscale 1.80.0 is out, so naturally I have done the little rebase for the #illumos / #Solaris version with tun support: https://github.com/nshalman/tailscale/releases/tag/v1.80.0-sunos
Release v1.80.0-sunos · nshalman/tailscale · GitHub
Builds deps: bump nanoid from 3.3.4 to 3.3.8 in /cmd/tsconnect (tailscale#14352) #14352 (dependabot[bot]) deps: bump braces from 3.0.2 to 3.0.3 in /cmd/tsconnect (tailscale#12468) #12468 (dependab...
github.com
This video was helpful for me to understand the news about DeepSeek: https://youtu.be/gY4Z-9QlZ64?si=Mml1zHR2yjd1Md18
DeepSeek is a Game Changer for AI - Computerphile
youtu.be
a question for the people who write code for money: if you could wave a magic wand and have your performance/promotability measured on any 5 metrics of your choice, what would those metrics be?
Are any @oxide.computer customers hiring? While I'm great at wrangling heterogenous hardware, I wouldn't mind playing on easy mode for a while... By which I mean solving actual business problems rather than fighting hardware.