Chris Merkel 🐀👨🏼🍳
Dad, beautiful nerd, storyteller.
AppSec, CloudSec, DevOps, DFIR, rainbow teaming, recreational hacking and dubious career advice.
By day, I lead teams comprised of the most talented people working in this industry.
Beyond that, I lead and volunteer my time doing career development work across many different venues.
Nerdy stuff I do for fun:
- Malware analysis
- Shodan safari
- Photo and video restoration
If you have SAP in your environment and then get ransomed, it's going to be a tough call to determine which threat to mitigate first.
Content pirates upset about content piracy.
This is the cyber equivalent of "this is what [horrific personal tragedy] taught me about B2B sales"
yall please. just don't.
How long do you think before tech executives realize that they money they took from laying off developers was only enough to cover the cost of a few days LLM use?
The PRC responds: "Hold my baijiu"
How auditors think SOC playbooks work
Cyberattacks that have the possibility of disrupting the supply chain for hip replacements seems like it might be a "surgical strike" against Trump's core demographic.
Thinkpiece: How the appointment of Jawbone McBanjofuck going to affect long term strategy at CISA, 5 pros, 4 cons and one conclusion you'll have to see to believe.
The reason you never leave your computer unlocked is because a threat actor will walk up to it and put a very small gap in your display arrangement, preventing your mouse from moving from one screen to the other.
Just ordered a Macbook Neo for my personal daily driver. Mostly cloud-native, so on-box processing is always minimal, great for development work, AI projects, etc. Right now my PDD is a 5 yo Dell running Ubuntu. Better battery, ARM efficiency, long supported life and it's 600 bucks. What's not to love?
Every day is like a loot box drop in software supply chain security
Github Copilot multipliers for premium requests are going to increase up to 27x tomorrow. Whatching this AI hype, it's just turtles all the way down:
How are we going to pay for all this usage with people on fixed monthly plans? <- VCs subsidize us until ASICs are available and code is made more efficicent.
Who is going to make these ASICs, chip fabs are at 100%, you need to build new chip fabs? <- VCs will fund building of chip fabs.
Ok, you have chip fabs and you still need to build hundreds of square miles worth of power-dense consuming technology, who pays for that? <- VCs pay for the build, rate payers pay for the electrical infra build out.
Ooops, turns out ratepayers don't want to shoulder those costs for us, we thought they were unwashed rubes from states we have never been to. Now what do we do? <- BUILD DATACENTERS IN ORBIT!
Cool, so turns out it costs $3M for every datacenter rack's worth of weight. Then there's the electrical costs, who pays for that? <- VCs will pay for that.
Ok now you have orbital platforms in place, how are the VCs going to recoup their investment and leave behind a sustainable business?
...
...
...
...
(with all the rhetorical flourish fitting of someone telling The Aristocrats)
Quantum Computing!
I watched the first season of For All Mankind and now internally, I'm calling Google's AI "Gem eh knee"
This is the pinnacle of self-deprecating humor.