Hey @thebiologistisn a seed's phenotype is determined by the genotype of the "mother" plant, yeah?

My contribution to the discourse™️:

Passkeys.

@mttaggart @ifin not to say that's a position I think IFIN should take in the information it shares, but maybe a reasonable position on what we as individuals should share with each other, and with communities like IFIN. There's definitely a risk of false positives and alert fatigue that make filtering at a certain level a net good. But there's a difference between the boy who cried wolf and being the person who credibly said "I heard the boy cry wolf" and I think sometimes we worry enough about being part of the former that we miss the value in the latter.

@mttaggart posting here because i just shared the link with coworkers and don't feel like being recognized, but had a different (maybe naive) perspective on your latest at @ifin

The early rumors of 0-days in Netscalers were at best unhelpful, at worst a signal to attackers to increase their efforts on that attack surface.

I can't entirely get behind that. Did they contain actionable intelligence? No. But as much as they may have been a signal to attackers, they were also a signal to defenders to start looking, start demanding information from the vendor, and without that signal I think we would have seen the vendor continue to sit on the advisory on their timeline.

There's a lot of noise to signal in RUMINT, and I don't think we as defenders should dedicate much time or resources to addressing it, but I do think there's value in keeping our ears open and being generally prepared to act or investigate further where the volume hits critical mass or the combination of risk and confidence exceeds our thresholds. I think that also extends to sharing RUMINT at a personal level with careful attribution and clear delineation as rumor, so that others can make their own evaluations based on their threat models.

Case in point, my dumbass can't work out how to make an array in ES|QL so that I can say (source.address IN array OR destination.address IN array) without having to type out the array twice.

Please people, see me as more than my amazing thrunting skills (they aren't, but something something one eye something something blind)

Oh god, I thrunted once and now my coworkers keep asking me to thrunt for them.

I should be arrested for crimes against kanban

• Must
  • Reduce the risk of elopement, especially when adults may be asleep or otherwise occupied.
  • Security chain placed out of reach answers this in the short term, but in the long term he's nearly as tall as his mom at 8, there's not a lot of room for "accessible to his mom" and "inaccessible to him", and that gap is closing. Also doesn't help when e.g. one adult steps outside for a chore, and the other isn't there to set it.
  • Be defeatable in the event of an emergency, e.g. fire.
  • Could be a physical unlock mechanism, or defeatable by adult strength.
  • Must not replace the existing locks
  • I know IoT is a garbage fire, i'm looking at this to supplement our existing locks, not replace them with something insecure.
• Want
  • Sets itself automatically
  • This would address the gap when someone isn't there to immediately close it.
  • Able to be opened from outside, preferably phone/keyless
  • This would allow reentry without requiring someone to be there, or even have a method of opening on their person.

Weird ask, but anybody know of/have opinions on any sort of "smart safety latch" that can be retrofit on existing doors?

Context: Nonverbal, neurodivergent child who is an elopement risk. Yesterday he snuck out when i took out the trash and streaked buck naked down the cul-de-sac trailing a chunk of sequined cloth like he was adapting the bus roof scene from Priscilla, Queen of the Desert. Didn't catch him until I got back inside and he was missing, because the path to the wheelie bin had my back turned. Looking into how we could reduce the risk of a reoccurrence.

My favorite part about Dremel tools is how there’s no problem that you can’t turn into a new, worse problem.

Anybody have strong opinions on security trainings or conferences relevant for endpoint security?

Hey @jerry what’s up with the dot lol suspension?

So, enterprise managed browsers, who has opinions?

Context: I’ve been told we’ll be doing a demo of Chrome’s offering within the next month. This is a Good Thing™️, but when I brought up “I think we should be doing this to all browsers” the response I got suggested there was more interest in “forcing everyone to use managed Chrome” (because it’s easy due to Yet Another Single Pane of Glass? because it’s more capable? there are definite gaps here) than there was in “manage the big 3-4 and let people use what they use”.

“Picking winners” to that extent would be a massive departure from organizational culture, and that culture shift is likely a much, much less tractable problem than any technical work is.

Anybody know where a man can get a little catte.jpg?

Oh good, actively exploited zero day in all versions now.

https://uptime.n-able.com/event/201454/

#ThreatIntel

Never heard of N-able, seems to be MSP-oriented RMM tools? Apparently a big attack ongoing tho.

https://www.n-able.com/blog/n-central-security-update-august-1-2026

#AbsoluteWin

Just realized that with the power of quoots I can prestage memes and reaction gifs without having to rewrite the alt text every time.

Edit: Pinning this so I can find them later xD, and I'll leave them open for followers to quote as well.

Sticker!