Winnona
@winnona.bsky.social
@DistrictCon Founder. Hacker and attorney. @CyberStatecraft / @BelferCenter fellow, ex-Google threat research. Dog mom. Opinions=my own 👩🏻💻
Submit submit submit! Make me read your work whether I want to or not!
DistrictCon@districtcon.bsky.social · 6d agoOUR CALL FOR PAPERS IS OFFICIALLY OPEN! We want to see all of your hacking magic, informing policy, or roundtable idea submissions. For more ideas, you can check out our page or submit directly! https://sessionize.com/districtcon https://www.districtcon.org/cfp
OUR CALL FOR PAPERS IS OFFICIALLY OPEN! We want to see all of your hacking magic, informing policy, or roundtable idea submissions. For more ideas, you can check out our page or submit directly! https://sessionize.com/districtcon https://www.districtcon.org/cfp
The Junkyard Call for Bugs is officially open! 👾 www.districtcon.org/junkyard For additional information, please reference our Disclosure Guidance doc: lnkd.in/ewjswJyf And if you missed last years presentations, check them out on YouTube now: www.youtube.com/@DistrictCon...
LFG. Our all volunteer team is stoked to put another DisCo on for all y’all. 🪩✨🤘
DistrictCon@districtcon.bsky.social · 4mo agoFeb. 6-7, 2027 | See you there 🪩✌️
DistrictCon Year 1 Talks are officially live on our YouTube Channel! Check it out: youtube.com/watch?v=RDqX... A HUGE shoutout to our incredible speaker line up that came out through the snow to share their amazing content with us.
Ian Levy (Keynote) : From protecting a country to security guard in a bookshop
YouTube video by DistrictCon
youtube.com
Just one week late posting this after being snowed into the hotel for two days longer than planned. How lucky was I to help get something new(ish) off the ground in its second year amidst its second calamity and to help speakers showcase their work in the CFP and on the mainstage!
DISTRICTCON IS STILL A GO! We are excited to see you all on Saturday, January 24 as we are still going through our normal programming! While we are unable to process refunds, we are adding virtual components to Saturday AND Sunday including a livestream for public sessions for ticket holders.
Vibes are high for DistrictCon! We’ll see you tomorrow 😎
The @districtcon.bsky.social gods ask for their due. The conference may proceed but one natural crisis will occur
One fun thing the @dreadnode.bsky.social CTI agent is unearthing from the Great Firewall leaks is how many of the employees of this Chinese deep-packet inspection/malware intro/censorship company are also part-time (PhD) students If it can work for them, it can work for me! .
Interesting paper out of Dartmouth about private sector's role in U.S. offensive cyber landscape. Recommends a national offensive cyber strategy and a pilot program for private sector access to "low-risk" targets like crypto scammers and ransomware operators: sergeybratus.gitlab.io/papers/Dartm...
sergeybratus.gitlab.io
This is going to be SO good!
DistrictCon@districtcon.bsky.social · 10mo agoWe're officially announcing our speakers DistrictCon Year 1! Check out our incredible lineup: www.districtcon.org/speakers This also includes our Day 1 & Day 2 Keynotes from Ian Levy and Dan Ridge. And don't forget, GA tickets go on sale November 16! See you in January! 🪩
We're officially announcing our speakers DistrictCon Year 1! Check out our incredible lineup: www.districtcon.org/speakers This also includes our Day 1 & Day 2 Keynotes from Ian Levy and Dan Ridge. And don't forget, GA tickets go on sale November 16! See you in January! 🪩
Come see ya boy
DistrictCon@districtcon.bsky.social · 10mo agoWe're officially announcing our speakers DistrictCon Year 1! Check out our incredible lineup: www.districtcon.org/speakers This also includes our Day 1 & Day 2 Keynotes from Ian Levy and Dan Ridge. And don't forget, GA tickets go on sale November 16! See you in January! 🪩
In early 2019 while at the German Parliament‘s Foreign Affairs Committee, I imagined this exact scenario: China using the rare earth supply chain to get fully visibility and self-reinforcing leverage. When urged to develop other sources, such as Malaysia (where I even went), Merkel gov did nothing.
German Firms Hand Over Secrets That China Could Use for Leverage
As German firms wrestle with new Chinese controls on rare earths, they are handing Beijing sensitive supply chain information it could potentially use to squeeze manufacturers or shut down production ...
bloomberg.com
So my other big piece of the day is an inside look at the struggle for the future of the CVE programthat just went live at CyberScoop. 1/2 cyberscoop.com/cve-program-...
Behind the struggle for control of the CVE program
Following a funding scare that nearly shuttered the CVE program, outside experts and CISA are positioning to take charge of the 25-year-old system before the next funding crisis hits.
cyberscoop.com
Washington is rethinking the relationship between government agencies and the private sector in offensive cyber, considering giving the private sector a more active role. Perfect timing for @winnona.bsky.social & Sergey Bratus to put out this well-reasoned and legally grounded perspective:
Publications
ists.dartmouth.edu
If the CISA 2015 info-sharing law expires tomorrow, CISA the agency may eliminate its real-time threat indicator sharing database, according to a new DHS OIG report. www.oig.dhs.gov/sites/defaul... Participation in sharing program has been declining since 2020. Post-expiration plans unclear.
Speaking as a Chinese person, in the Chinese culture, money is often given to others in a gesture of bribery.
The City Reporter@thecityreporter.nyc · last yr.BREAKING: Eric Adams Advisor Winnie Greco Handed a CITY Reporter Cash Stuffed in a Bag of Potato Chips www.thecity.nyc/2025/08/20/w...
Call For Papers — DistrictCon
districtcon.org
DistrictCon@districtcon.bsky.social · last yr.Our Call for Papers is officially OPEN! We are looking for - Hacking Magic 👾🪄 (cool research, novel TTPs, tool releases, etc.) - Policy Roundtable Topics ⚖️ (specific cyber topics focused on geopolitics, ethics, legal frameworks, governance, etc.) www.districtcon.org/cfp
I stopped by DistrictCon earlier this year, (no ticket) but was able to borrow a badge and such. The vibes were awesome, the people were great, and even with a multi-block power outage at the venue, they were still able to keep it going. I recommend this one in DC
DistrictCon@districtcon.bsky.social · last yr.Our Call for Papers is officially OPEN! We are looking for - Hacking Magic 👾🪄 (cool research, novel TTPs, tool releases, etc.) - Policy Roundtable Topics ⚖️ (specific cyber topics focused on geopolitics, ethics, legal frameworks, governance, etc.) www.districtcon.org/cfp
Our Call for Papers is officially OPEN! We are looking for - Hacking Magic 👾🪄 (cool research, novel TTPs, tool releases, etc.) - Policy Roundtable Topics ⚖️ (specific cyber topics focused on geopolitics, ethics, legal frameworks, governance, etc.) www.districtcon.org/cfp
How did China's top APT hackers come to be? Many were early "Honkers" - patriotic hackers who in late 90s launched low-skill cyberattacks against nations deemed disrespectful to China. But once Honkers developed their skills, PLA/MSS came calling. Based on great research by bsky.app/profile/eube...
How China’s Patriotic ‘Honkers’ Became the Nation’s Elite Cyber Spies
A new report traces the history of the early wave of Chinese hackers who became the backbone of the state's espionage apparatus.
wired.com
Was a ton of fun to talk about the 0day market and Pall Mall at Summercon! Thanks for having me 💕
“alignment with CCP priorities offers privileged access to state resources, regulatory favor, and expanded commercial opportunities [to hackers]." NEW Phenomenal report on Chinese civil military fusion and cyber militias by Kieran Green: margin.re/mobilizing-c...
Mobilizing Cyber Power: The Growing Role of Cyber Militias in China’s Network Warfare Force Structure
This report examines how China’s cybersecurity industry fields reserve and militia units in support of the PLA and national mobilization system.
margin.re
