hashtagcyber (he/him)

@johntuckner.me Too close for twitter, switching to bsky… we should revive quietcon in Vegas this year

Here’s how to share sensitive leaks with the press Thinking about securely leaking information to news organizations? This guide will show you how.

I'm just going to leave Freedom of the Press Foundation's excellent guide to leaking to the press right here in case anyone happens to need it: freedom.press/digisec/blog...

DeepSeek AI R1 x Rabbit R1 Collab This may be a promising partner for Rabbit R1, even their model name is similar. This might help improve our user experience further and in a more cost-friendly manner: DeepSeek Is Now the Number One ...

forum.rabbitcommunity.tech/t/deepseek-a...

I heard you want to use r1 with your r1, contains logos from rabbit r1 and deepseek r1

Most common question of the day, answered:
Yes - your can R1 your R1

I am not he, but no - not the same people ;)

r1 now supports multiple languages rabbit r1 is your all in one AI companion, co-designed by teenage engineering, powered by rabbit os, no subscription required - get yours for just $199 today

Fun fact about rabbit launching multi-language today... if you ever see a model with "phoneme".... that is not "phone me"... its an actual word... for mouth sounds... And if you don't include that model... it uhhh... doesn't do the mouth sounds...
rabbit.tech/newsroom/mul...

Malware detection prevents Docker Desktop to start · Issue #7527 · docker/for-mac Description Some versions of Docker Desktop might fail to start or function with the following error message: Malware Blocked. “com.docker.vmnetd” was not opened because it contains malware. This a...

This was a really fun bug to wake up to...
github.com/docker/for-m...

The rabbit r1 speaking Japanese

Been DYING to talk about this, but now that the cats out of the bag… Multi-Language on the rabbit r1 …SOON!

This has been a really fun project to work on.

Have you done a write-up on this yet? I'm still struggling to wrap my head around their frameworks, and the docs have been... less than helpful?

Fake iOS malware site

top4all Bluesky profile - one of the malware posters

Hey #infosec BlueSky… are there any good lists of “mute these accounts because they post malware…. And not in the way we do”?

I’m noticing the trend of:
- someone writes an article
- hundreds of malvertising sites copy it and repost links

So, here's an example of the most likely way that "AI is coming for your job"... Loom. Loom is awesome. It has a bunch of cool features. But at the end of the day, most people only NEED a way to record their screen. bolt.new built a PoC for me based on a few sentences, silly-froyo-8238ce.netlify.app

One of the coolest things about working at a startup… sometimes you show up to a meeting and hear, “you know the cool feature we wanted but couldn’t prioritize… it’s done”. I love this place.

@josh3drenderer1.bsky.social killed it on this bust I’m printing as a gift. Thanks for the quick turnaround and high quality STL!

My problem is nieces/nephews constantly coming back and saying, "uncle matt... show us the magic picture!"

Rabbit updates r1 device to add an item shop to dress up your on-screen rabbit using tokens earned through device usage, and more importantly and quite welcome, a gallery viewer for your #rabbitmagic photo collection! 🐰

I think you are the first person to mention the photo gallery... and it's the feature people asked the most about :D Glad you like it

Random thought of the day: Humans regularly use their bodies to heat liquid up to approximately 98*, which then heats plumbing fixtures... this is a question I want answered by XKCD

A 3d printer creating the Death Star

Christmas Present Printing has begun!

Found the giant knob labeled "cats"

wait.... hwut?

In terraform, `tostring(module.this.port)` and `"${module.this.port}"` do not do the same thing... and I don't know why... but that really bothers me.

#DFIR 💭 of the day: our product IS a report.

You can do all the fancy analysis - but if you cannot articulate it, you have no deliverable. Our reports are oh product. Technical writing should be a required skill.

If you don't have time to configure it properly, you shouldn't be buying it. The best money I've ever spent is having a (quality) MSP handle the fine-tuning of an EDR deployment.

They are out of hotdogs… but they have Nathan’s HotDogs Gift Cards… is there a Nathan’s near you?

At every place I’ve worked - my job got soooo much easier once I felt comfortable with how the SREs ran things… otherwise, you just end up standing outside an office yelling “security”.

I can’t recommend this enough: if you’re joining a company as a seceng - convince your boss that it would be good for you to spend your first few weeks with an SRE team.

Learn how CI works at the new place, what the resource lifecycle looks like, etc. Land a few PRs that touch production.

“Is that a legitimate question or do you just not have the courage to say, ‘I don’t like your idea’ “
@hashtagcyber-r1.bsky.social - remember this for later

Omg… I never thought about using it for tabs!!

Ermagerd! My favorite evangelist is on Bluesky!

An unhappy looking hacker

Speaking of MSP airport… I’m headed to re:Invent. If you want to nerd out about AI or kubernetes security, be sure to say hi to the cranky looking guy with green hair (I’m wearing CISO clothes this week… it’s weird)