Are you a security researcher or journalist? We want to hear from you! Please take this survey!
DataBreaches.net and myself (at this.weekinsecurity.com) are running this survey to better understand the state of legal demands and criminal threats experienced in cybersecurity.
Please share!
TL;DR
Middle management is hard. Caring is required, but the kind of care you provide matters.
🎉🥳My latest whitepaper has been nearly a year in the making and it’s finally out! 🎉🥳
A huge thanks to the many friends and colleagues that participated in the review process.
www.vectra.ai/resources/co...
#gcp #aws #msft #NHI #cloudsecurity #multicloud
Certificate Transparency is meant for browsers and website owners.
However, I estimate a majority of clients is only interested in discovering domain names. I am proposing an optional, less secure, 20x more efficient API for those clients.
With this, a CT log can probably operate with < 1 Gbps.
I'll be testifying tomorrow at 10am before the House Homeland Security Subcommittee on Cybersecurity and Infrastructure Protection about Stuxnet and critical infrastructure security. Also on panel will be Rob Lee (Dragos), Tatyana Bolton, and Nate Gleason
When I was little, the U.S. military came to our home at gunpoint and took me and my family away. We were imprisoned for years in barbed wire camps simply because we were Japanese American. I have spent my life telling that story, hoping it would never be repeated.
A chart for quantum computers, of number of qubits versus error rate, on a logarithmic scale. Broadly it shows a large gap between current quantum computers in the bottom left, and a curve in the top right of the resources they need to break RSA.
An out-of-schedule update to my quantum landscape chart: sam-jaques.appspot.com/quantum_land..., prompted by
@craiggidney.bsky.social 's new paper: arxiv.org/abs/2505.15917.
A startling jump (20x) in how easy quantum factoring can be!
Also: much improved web design!
It’s a good thing Congress isn’t alive to see this
The skywatch account lists
The maga list
The block accounts button
Bluesky is not twitter because we block losers before we even see their sad attention seeking. Think of it as vaccinating your account. Here’s an example:
1. Go to @skywatch.blue
2. Tap Lists and scroll down to MAGA
3. Tap subscribe & then block accounts.
4. All the magas now rot on the vine
New blog: I’ll admit, this one’s a bit of a ramble, mostly because I care a lot about how we give feedback, how we receive it, and why it so often feels like an attack (even when it isn’t).
TL;DR: Feedback is care, when it’s done with intention.
ashley.dev/posts/feedba...
Whoever this “Jenkins” bastard is, they have access to everything! Begin the incident response immediately.
CUT MY LIST IN TWO PIECES
THAT’S HOW YOU START QUICKSORT
My talk, 'Security Champion Worst Practices', from @ndc_conferences, is now available on YouTube!
https://twp.ai/9PRKFn
The event went smoothly despite the storms; there was a minor power outage. The youth had a great time and the free photo booth was a hit. I see why my friend does this and I hope to join him again.
We're still fundraising for the organizers (not ourselves; so far only we have donated) here:
Another one in the books! Kubernetes v1.33: Octarine is live. Congratulations to the release team!
kubernetes.io/blog/2025/04...
I’m launching SVE next week: Sean’s Vulnerability Emotes. SVEs will be rated on a scale of 🤨😕☹️😰😱💀☠️
Nginx doesn't actually load balance; it simply convinces backend servers they're handling less traffic through subtle psychological manipulation.
Truest meme I've seen in a long time
Use Signal; use Tor.
Wait, not like that.
Did you know Mortal Kombat is based off of Scandinavian Folkore?
It's a Finnish Hymn.
No matter what the US does, the rest of the world is going to spend the next twenty years dismantling US power and influence because we are too dangerous and unreliable to maintain it.
It's international women's day and that means it's the day I self-promote! I've written a few good books including my most recent on Platform Engineering, check them out here!
amzn.to/3QYGaoB
If you've been following #BlackBasta (and the recent leak), this thread might be of interest.
Last December, out of the blue, a source reached out to me (and, as I was to find out, to @valerymarchive.bsky.social as well) offering to doxx the leader of that ransomware-operation, known as "tramp".
The German debt brake is stupid.
Blog post.
addxorrol.blogspot.com/2025/03/the-...
Good thread on the German election today.
