🏴‍☠️

What other problems are having the most impact?

retail

rapidly we got 99% sure it was somewhere in the building, but there were so many other fires, it just wasn't a priority

when this began we didn't even know for sure if it was in the US

huge turnover, and the org lacked the resources to figure out how the original install happened.

the entire place operated on ”don't fix it if ain't broke"

Yes. It was plugged in via Ethernet. We believed we had determined the building it was in.

However, we had ~0 documentation on anything other than the address, floor, and IP address and folks in the building assured us there was nothing unaccounted for in the server room

Only realized no one knew where it was (and we had no ability to patch/update) about a year or so in.

Spent the next three years trying to find it. Thing was still happily chugging along detecting 2012 era CVEs by the time I left.

Request for startup:

I don't want analysts working eicar test files to pad stats, and I don't want every update to risk of bricking the alert

I want an agent, running a standard OS image, doing a bunch of bad stuff every 6 hours, with double entry accounting to assure correct alerting

couple records that ive been witness to at various places:

physically lost an active firewall (handled traffic great, no sig updates in ~a decade) physical location unknown 2016-present

pci dss packets switched to non pci circuit to avoid downtime. no one noticed for 3.5 years, including audits

implementing atproto in rust is how I learned both, highly recommend

who up driving kimi k2 with claude code

Hack the planet!

current Minneapolis weather radar depicting a giant freaky-looking red storm coming straight at us

don’t like that

...I didn't think we still did that

our new interstellar friend

has anyone found a good solution for systematic testing of SOAR/SIEM/Hunt rules?

also, doxxing users of a doxxing app doesn't make you a hero. just stop.

Tea app suffers breach, exposing thousands of user images The app allows women to share safety info and personal data about men they've met.

www.engadget.com/cybersecurit...

Users of Tea app

If you uploaded your drivers license to join the app, you may have just been doxxed on 4chan

You likely need to take steps to prevent identity theft and other abuses

Tell your friends who may not be aware, this one will get messy

market research: are you interested in seeing the requests, responses, traces, etc for a session or use a non-anthropic model?

oh well I'm sorry I didn't know I was speaking to landed gentry I'M SORRY

the packets

they whisper

to me

claude code driving goose/gemini is a good one

also set your spend limits ;)

Serverless Statusphere: a walk through building serverless ATProto applications on Cloudflare’s Developer Platform Build and deploy real-time, decentralized Authenticated Transfer Protocol (ATProto) apps on Cloudflare Workers.

Real-time, decentralized social apps — without running a single server. Here’s how to build and deploy an atproto app on Cloudflare Workers. blog.cloudflare.com/serverless-a...

oh ya bigtime

I don't think I can fairly represent them. but imo it boils down to

turn off everything, that way bad people can't use computers

or the problem is they're abusing the wrong people, and with the right people in charge, we can fix that

but they won't put it in writing ;)