← Feed

Posts

• View post

  Yup, not my #defcon but you do you.

• View post

  #Ford wanted to charge me $2600 for the little C-Clip that holds the rod in place. ($2600 is the price of a new Turbo, they don't sell the C-Clip separately) Cost me 42 cents and all of 10 minutes to install (and most of that was getting the jack out and putting it away.) #enshitifcation #righttorepair

• View post

  “Anyway You Want It” by Journey is a #safelite commercial and not #BurgerKing. What is wrong with this timeline?!

• View post

  #Ford trying to charge me $2653 to replace an entire turbo when I just need the .42 cent C-clip to hold the waste gate actuator on, because they don't sell just the C-clip. Autozone has a 18 pack for $7.49. #rightorepair #enshitifcation #plannedobselence

• View post

  Thursday night in Vegas? This is where you want to be. Signup now if you haven't already. #defcon #blackhat #bsideslv https://events.semgrep.dev/semgrep/rsvp/register?e=its-all-fun-and-games&ref=social-media

• View post

  We have an opening for a Senior/Staff Security Researcher! Come talk to us in Vegas. (Not senior? apply anyway, ya never know.) https://semgrep.dev/about/careers/?ashby_jid=2cfe1f53-4665-432c-915d-b4e6459c4ad7#job-board

• View post

  Why won't the term "Responsible Disclosure" die? (If you don't know the preferred term is Coordinated Disclosure.)

• View post

  I love the smell of Full Disclosure in the morning. (Well, anytime really.) https://mindgard.ai/blog/cursor-0day-when-full-disclosure-becomes-the-only-protection-left

• View post

  https://blog.ppb1701.com/the-quiet-renovation-at-bitwarden

• View post

  Ok, this is kinda cool/scary/creepy/awesome. Claude knows who I am "Claude responded: Thanks — that one was genuinely fun to write. Happy L0pht Day tomorrow, Space Rogue. 🖤"

• View post

  Today is L0pht Day. In 1998 7 hackers in suits told the US Senate the internet was a house of cards. We said we could take it down in 30 minutes. They looked at us like we'd landed from another planet. 28 yrs later, the gap between what the security community knows and what decision-makers act on remains a fundamental problem. Miss you, Peter Neumann. He testified that day too, with decades of hard-earned wisdom. We owe him. The work isn't done. It never was. #L0phtDay #InfoS...

• View post

  Do I win?

• View post

  I was at the first #bsidessf however many years ago, I’ve missed a few but it’s good to be back. I’ll be walking around or chilling at the #Semgrep booth, come say hi.

• View post

  Damn, #bsidessf has to have one of the best venues in all of Bsides. Imagine your slides on a 50ft iMax screen.

• View post

  Nice to see an old school no-photo policy at #bsidessf. Reminds me of #shmoocon. Yes, in our hyper surveillance culture such a policy might be pointless but it’s a nice thought.

• View post

  If you missed the keynote at #bsidessf then you missed @k8em0 actually singing part of her talk!

• View post

  Is anyone else getting anti-Sec vibes from #teampcp ???

• View post

  I know I am very opinionated when it comes to booth design, but there are a lot of bad booths this year and I haven’t even walked half the floor yet. #rsac2026 #rsac

• View post

  Gen-X to Gen-Z Translation Matrix Meaning Gen-X Gen-Z That’s cool Dope Bussin Lame Bogus Cringe I agree Word Facts Nonsense Whatever Cap True For real No cap Impressive Tight Goes hard Weird Sketchy Sus Funny That’s rich I’m dead Attractive Fine Baddie Any others?

• View post

  PhoneCon 2026, the Mid-Atlantic Historical Telephony Conference & Expo When: Sat/Sun July 25-26, 2026 Where: The Computer Museum - Baltimore MD What: Presentations and talks on telephone history, collecting, and phreaking; displays and exhibits; telephones for sale; tours of the Computer Museum Why: To celebrate the 150th anniversary of the telephone Schedules and other event information is available at https://phonecon.org #telephone #phone #hacker #phreaker #con

• View post

  First blog post for the new job! Security Should Be the Path of Least Resistance Security often creates friction that frustrates developers and users, this can actually make systems less secure because when security is difficult, noisy, or just gets int he way, people bypass or ignore the controls. https://semgrep.dev/blog/2026/security-should-be-the-path-of-least-resistance/

• View post

  In the future everyone will have their own personal AI agent/LLM. !remindme 40 years

• View post

  @maddiestone wasn’t CVE-2023-22278 first?

• View post

  Companies will put up all kinds obstacles to responsible disclosure for researchers to get around to make their own lives easier. But they often forget that in the end it is researcher who calls the shots. It is the researchers vuln and they can do whatever they want with it. https://www.bleepingcomputer.com/news/security/disgruntled-researcher-leaks-bluehammer-windows-zero-day-exploit/#comments #vulnerability #disclosure #responsibledisclosure #windows #microsoft

• View post

  FYI: if you use the handle on your #rsac badge or unusual nickname expect to have to get your badge reprinted and wait in the super long and slow line. They’re verifying that badge names exactly match government ID. Worse than TSA. (I was still able to get her to put “Space Rogue” on it, but she didn’t want to.) #rsac2026

• View post

• View post

  I know the conventional wisdom, and the historically popular choice, for a candy bag is a pillowcase, but as the person who hands out the candy, let me tell you, it is a very poor choice. It has large capacity, but it’s too hard to open, it drags on the ground and is difficult to carry. The best candy bag is a 2 1/2 gallon bucket. Easy Cary you can set it down easy access.

• View post

  I've decided to stop pussy footing around and I am now openly looking for my next challenge. Interested in a company on the small to mid-size range with a cool story. Ideal position would be a combination of customer outreach, marketing and thought leadership. What ya got? #CyberSecurity

• View post

  I’ve been in this game long enough to watch the cybersecurity industry reinvent the same mistakes over and over. I helped found one of the earliest public vulnerability research groups, L0pht Heavy Industries. I have sat in front of Congress and told them the internet was fragile, before it became daily news. I’ve hacked systems, defended networks, led threat intelligence teams, and advised executives who finally realized security is a business issue. (1/4)

• View post

  How am I only now just finding this subreddit? https://www.reddit.com/r/ISO8601/