Hey infosec folks, how’s this week going?

#infosec

needs must when the devil drives https://lnkd.in/p/g_UYVFua

For obvious reasons campaigns are much more able to use money before the absolute last minute. Deadline for the Florida candidate is 10/30 (and I think that's the last one) but sooner is better than later. Hopefully we can get some kind of countdown onto the site to make the urgency clearer

@glyph and because "we have to spend double the engineer hours maintaining two things" is easy for an entity to understand and act on and "users dont have agency in choosing how the code they run on their computer works" is this fuzzy externality , i think we probably tend to act in favor of the former more often than we should. that probably can't mean maintaining parallel designs in perpetuity after a redesign is considered necessary, but maybe it means that users get, idk, months rather than days to "onboard" themselves.

RE: https://mastodon.social/@glyph/117476045058210857

To this point: I am in the middle of analyzing all my (work) claude session notes from last client. basically have to use it if I want to stay employed, so I took copious notes about my prompts, how well the “just a tool” worked (almost always on manual mode so I was seeing EVERY mistake and command), how I FELT, and, well, more folks should do this. It’s (a) exhausting to keep the log, and (b) eye opening to review. cc @glyph

I feel pretty justified in saying "wtf is going on" about this recently

https://www.theguardian.com/world/2026/oct/20/rfk-jr-vaccine-researchers-offices-raided-guinea-bissau

here's some info about the giant php bug dropping tomorrow:

https://www.openwall.com/lists/oss-security/2026/10/20/34

hopefully mastodon doesnt absolutely destroy the video quality, but it appears to be unauth php rce.

which means every firewall on the planet thats not patched thats just php under the hood and has its management interfaces exposed is potentially a target

I saw her posting this and I was like "oh, that would do numbers on Mastodon" and she was like "really, what number would it do" and I was like "…4"

https://bsky.app/profile/did:plc:qcnnegoxnpzfz7vd7gxenqx4/post/3mydula2zuc2q

Do you get mad that the fascists are running circles around the Democrats, taking control of local and state-level offices all over the place, mobilizing across different institutions and building durable entrenched local power? Do you feel sad that you don't know where to direct resources when that problem is so pervasive? WELP HERE YOU GO, GET ON IT

https://superswingdistricts.org/2026/

the "new post" window really highlights how weird modern UI design is everywhere though. why is it in a fake window with a fake close box instead of just being in a window. why is every app its own weird little bespoke window manager. (do not answer this. I could write a dissertation-length post on the answer. I do understand. but I don't like it and I think that we could push back more often than we do)

okay I've got The New Mastodon and … I guess overall I actually like it? I still kinda hate the way that we collectively roll out UI and app updates where it's Just Different Now, but this is actually addressing some of my complaints and the big squishy rounded corners everywhere don't bother me all that much

if I had a penny for every production incident I've seen caused by the number 4, I'd only have 2 pennies, but it's weird that it happened twice

finally, a private key that current quantum computers can factorize

actually, 4 is a very hard to guess number, and is secure from modern attacks

Obviously AI isn't alive and doesn't deserve human rights or politeness or whatever else.

But as part of "AI psychosis", many people do end up personifying AI agents, having romantic feelings about them, entrusting them with deep secrets, and so on.

Which then makes it disturbing when people treat agents as slaves, or "torture" them or otherwise treat agents in "abusive" ways. Especially as far too many people see women and minorities as "less than human".

Abusing an AI isn't actually hurting something that's alive and has feelings. But it does say something about the person who is doing the abuse.

Has anyone given any thought to hand-written journaling practices for people with atrocious handwriting? Both in terms of getting back into it, and in terms of scanning it for later use.

@aurynn you're about to discover that your day has been brought to you by the number 4

"I keep coming back to this graph because it’s so eye-popping, almost impossible to believe. As you see in the legend, the blue line is data centers. The grey line is everything else. Everything else. Commercial properties. Rental properties. Single family homes. Multiple family homes. Pick your preferred flavor of development, NIMBY, YIMBY, urban, rural, it’s in there. You basically have rapid data center growth and everything else contracting."

🎁 https://talkingpointsmemo.com/edblog/its-the-ai-economy-were-just-living-in-it/sharetoken/ca52578d-d5d9-4d8b-9789-2c7a019b291f

RE: https://mastodon.social/@mcc/117474338181537837

captain it’s tuesday

Strongly dislike the fact that conference websites, like apparently everything else, are now a deepfake medium.