Amy

Black people five years ago: you know, they can kill anyone they want to out there

Everybody today: hot damn, did you know they can kill anyone they want to out there?

The “prosecute the former regime at every level” candidate has my vote in 2028.

There’s never been a better example to show that literally all the money in the world can’t buy style or class.

Barbra Streisand
Wooo, wooo, wooo-ooh, wooo, wooo, wooo-ooh
Wooo, wooo, wooo-ooh, wooo, wooo, wooo
Barbra Streisand
I never watch 60 minutes but I watched that one about CECOT wooo
Barbra Streisand

Any time I read an article with leaks from spyware vendors, especially containing images from their presentation materials their software UI, I’m astounded at terrible quality of the graphics | UX.
Then I remember every UI/UX pro I know is a wonderful human being and would never do this garbage.

KawaiiconNZ - Twitch New Zealand's cute infosec con (& book publishers) ✨The weirdness returns: November 6-8, 2025

Kicking off soon, pals!

We are streaming live if you are still in reg or cozy in your own hacker den: www.twitch.tv/kawaiiconnz

Fuck yeah, NYC! Congratulations to you all! Happy for and jealous of you for your amazing Mayor Elect Mamdani!

Security Research Device - Apple Security Research Get an iPhone dedicated to security research through the Apple Security Research Device program. Learn how to apply.

Are you ans experienced iOS security researcher? If so, you probably already know about the Apple Security Researcher Device Program (security.apple.com/research-dev...).
If you’ve been thinking about applying, applications close in a week, on 31 October. Apply before the opportunity 👻s you!

A major evolution of Apple Security Bounty, with the industry's top awards for the most advanced research - Apple Security Research Today we’re announcing the next major chapter for Apple Security Bounty, featuring the industry’s highest rewards — up to $2 million and a maximum payout in excess of $5 million — expanded research ca...

I believe in evolution, in all contexts :)
security.apple.com/blog/apple-s...

Yikes. Did not enjoy. Please unsubscribe.

Werner Herzog just started an IG account. You’re welcome.

Yes, I get that one of these things is not like the other in terms of societal impact, but I find joy in it nevertheless.

I know it’s hard to find things to be happy about these days, but Zohran Mandani won NYC’s mayoral democratic primary race last right, protesters managed to shut down the ICE office in here in SF yesterday, and S4 of The Bear drops today.
Absolutely dining on these morsels of serotonin this morning.

Walking up on a dreary Sunday morning, the apartment is quiet and still, the dog sleeping in his bed. Early, low light filters into the bedroom giving it a low parchment glow. My brain begins to boot into awareness:
Steve le-
(Wah ahahaha)
Le poisson Steve
(poisson Steve)
It est oraaaaaaannnnnnge

Pegasus spyware maker NSO Group just got publicly rebuffed by the US.

They came to DC to get off the US blacklist.

It did not work out.

You know about the human rights abuses, but let me tell you why NSO is no friend to the United States. 1/

www.washingtonpost.com/national-sec...

Put some on a piece of strong English cheddar, smoked Gouda, or a dill havarti and it will change your life.

a man wearing sunglasses and a leather jacket says you were so preoccupied with whether or not you could ALT: a man wearing sunglasses and a leather jacket says you were so preoccupied with whether or not you could

Me, when I see things like this logo ligature

Behold my favorite weird Chrome security bug of 2025 so far!

A jaw-dropping URL / omnibox spoof via ligatures, specifically the googlelogo ligature.

issues.chromium.org/issues/39178...

Sprinting home to watch this.

Agree. So much that I essentially watched the entire season in a single weekend a couple of weeks ago.

Security friends attending RSAC, please attend this session and heckle the fuck out of Kristi Noem.

The pants I am wearing today are cute (subjectively), comfy (objectively), but so noisy.

I don’t think I can wear them to the office again. I feel the need to compulsively apologize for being disruptive, as I sound like a sailboat cruising aggressively in blustery conditions just walking about.

So I guess this is the wrong time for my standard takes that CVEs often wielded like infosec Pokémon and CVSS scores are terrible data points for making software update decisions?

/subscribe
I’m genuinely interested in folks respond to this question.

Two things I’ve never noticed on previous trips to Vancouver.
1. Some of the freeways have bike lanes, such as the road to the airport.
2. There are tampons and pads sitting out in the restrooms available for free.
Two ways America would sadly never.

I’ve been in Vancouver (Canada) since Thursday. This somewhat randomly timed trip could actually not have been better timed.
On top of my general long-time love for this city, I am especially daunted leaving tonight and returning to the U.S. and well, everything else.

Instead and unfortunately some are doing the opposite. I’m seeing cybersecurity firms (at least one former employer) cheerleading Trump because of the EO to grease the wheels of the defense acquisitions process. They’re bending the knee because they want that DoD contracts money.

Chromium now has a patch rewards bounty for fixing some (non-security) bugs!

This is very cool and provides an opportunity to contribute to open source and get some 💵 for your efforts!

This is very cool and very excited to see this now live!

If you like fixing bugs and have been looking for an excuse to participate more in OSS — here’s your chance and also get some $$$.