@dymaxion@infosec.exchange

Eleanor Saitta @dymaxion@infosec.exchange · Aug 06, 2026

Signal can finally run on both Android and iOS as a linked device, including Android tablets! I've only been waiting for this for a decade

20

0

7

0

Eleanor Saitta @dymaxion@infosec.exchange · Aug 06, 2026

Ouch, apparently Ryde just lost their entire customer database, and they were keeping first six and last four of CCs. Technically not banned under PCI, but zero chance they're passing their next audit. I'm guessing there's going to be some fallout when/if all the ride histories get dropped too.

6

2

1

0

Eleanor Saitta @dymaxion@infosec.exchange · Jul 24, 2026

Availability and office hours! I've currently got room for an additional client. If you're a startup looking to build a security program or an for outside review or course correction for your existing efforts, this is your chance to get the help you need to do it right. I'm also re-opening my office hours for folks who'd like to pick my brain on security strategy for SMEs, or on specific technical problems. If you're a CTO/VP Eng/etc. of an existing org, you can grab an hour of my time for free. No sales pitches — it's fun to meet new folks and chat about problems. I'll shut this down when I get busy again. Here's the link: https://calendar.app.google/P4auoGeXDRhLdRzbA If you're seeing this from a repost and don't already know me, I run Systems Structure Ltd., a boutique consultancy providing fractional CISO services to tech-centric startups. Over the past nine years I've helped nineteen companies start their security journeys or validate their strategy. Before starting SSL, I spent a decade with other consultancies, focued on application security, threat modeling (including methodology research), and security architecure. I took five years off from the commercial world to help news organizations and NGOs targeted by nation states, doing both direct security support and tool development. I went back to industry as the security architect for Etsy, and then decided it was time to go back to consulting.

12

0

26

0

Eleanor Saitta @dymaxion@infosec.exchange · Jul 09, 2026

Mozilla apparently shipped tab groups for Android in version 152, but as far as I can tell I still don't have them. Are they doing an A/B rollout or something? If so, how do I opt in?

4

0

Eleanor Saitta @dymaxion@infosec.exchange · Jun 20, 2026

Replying to @FediTips@social.growyourown.services

@FediTips@social.growyourown.services Right — so expanding from to take a list; possibly this could even be done at the client level

1

0

Eleanor Saitta @dymaxion@infosec.exchange · Jun 20, 2026

Replying to @FediTips@social.growyourown.services

@FediTips@social.growyourown.services Ah, no, I mean sort of the opposite — let me do a global search for messages, but only show me the ones from people on this list — or, in practice, search every message I can see from the people on this list for matches.

1

3

0

Eleanor Saitta @dymaxion@infosec.exchange · Jun 19, 2026

Replying to @FediTips@social.growyourown.services

@FediTips@social.growyourown.services Huh. It would be nice if there was a way to search posts that would have been included in a list — like in:library, but differently scoped. Maybe someday

1

2

0

Eleanor Saitta @dymaxion@infosec.exchange · May 19, 2026

Replying to @cstross@wandering.shop

@cstross@wandering.shop Likewise, in 1994 @mattblaze@federate.social

1

0

1

0

Eleanor Saitta @dymaxion@infosec.exchange · May 05, 2026

Replying to @bascule@mas.to

@bascule@mas.to @gkrnours@mastodon.gamedev.place And yeah, definitely didn't have time to read the underlying studies there. It would be pretty unsurprising if oil money was driving that; possibly some day we'll get some juicy discovery there. And yeah, very few trucks that bad in the Nordics, but we have the same issue regardless; lots more small to midsize SUVs replacing sedans and hatchbacks, plus rapidly growing delivery traffic, with few of the carriers doing anything useful about moving to electric fleets, at least in Finland. We've also got less in the way of rail freight here — I live by the access road to one of the major Finnish RORO ferry and get to watch streams of freight go by every day.

1

0

Eleanor Saitta @dymaxion@infosec.exchange · May 05, 2026

Replying to @bascule@mas.to

@bascule@mas.to @gkrnours@mastodon.gamedev.place Oh, this is great news! Obviously there was some reduction from regenerative braking, but I didn't realize the difference was that significant.

1

0

Eleanor Saitta @dymaxion@infosec.exchange · May 05, 2026

Replying to @gkrnours@mastodon.gamedev.place

@gkrnours @bascule While I don't disagree in the long-term, public transit rollouts require state funding and decades, and a lot of the point of this is that the market is actually the thing driving the transition at this point, and it's driving it now, not in twenty years. So it will be lithium, and yes, resource wars are going to be messy, but the outcome from waiting is many orders of magnitude worse.

1

0

Eleanor Saitta @dymaxion@infosec.exchange · May 05, 2026

Replying to @gkrnours@mastodon.gamedev.place

@gkrnours The added weight of batteries is already causing problems from electric cars — they actually cause more particulate emissions than gas cars, because emissions controls on gas engines are a very mature technology, and most of the pollution comes from tire and brake wear, which scales more than linearly with weight. Particulate emissions from road traffic are a significant cause of preventable deaths. This doesn't mean EV cars are bad, of course, far from it, but it does mean that we need to put EVs in particular and cars in general on a serious diet. There's no room for doubling the weight of batteries. For low-cost, light non-highway vehicles? Maybe, sure. But we're much much better off electrifying with what we have immediately. @bascule

2

3

1

0

Eleanor Saitta @dymaxion@infosec.exchange · Apr 30, 2026

Replying to @wallabra@bark.lgbt

@wallabra @macronencer Iran is mostly shooting at stuff that doesn't move and doing without manual terminal-phase guidance. Again, I'm not saying that it's justified. That said, making the argument to governments that capability is not worth the risk and impact on a way that will be heard requires acknowledging the use cases where there is no direct replacement and the infrastructural dependencies that attempts to replace it imply. The EU and China are both working toward their own constellations, multiplying the problem, because having a sovereign LEO data capability is seen as a critical defense capability.

0

Eleanor Saitta @dymaxion@infosec.exchange · Apr 30, 2026

Replying to @wallabra@bark.lgbt

@wallabra @macronencer While I also don't think it justifies Starlink, no, there is currently no replacement for Starlink in the Ukrainian context. At the trench lines, there is no infrastructure of any kind left. It's all rubble. Also, getting realtime video uplink from a drone in the middle of the black sea or in the middle of Moscow is not possible for them by any non-satellite means. In theory the front line connections could be partially replaced by much much more heavily deployed terrestrial data radios, but they're by default easier to both jam and home in on with RF-seeking drones, simply due to the angle of intended emissions. The internet is somewhat resilient, yes. However, its resilience is highly overestimated by folks who don't work on carrier networks. The whole thing is held together with very expensive ducktape and bailing wire and constant efforts by thousands of people. Fiber breaks are a constant problem. The only intact fiber at the Ukrainian front is attached to FPV drones.

0

2

0

Eleanor Saitta @dymaxion@infosec.exchange · Apr 25, 2026

Replying to @mattblaze@federate.social

@mattblaze@federate.social @vandorb12@infosec.exchange @deviantollam@defcon.social Yup! Now, the file at Matthews had been in the industry for a while, working at one of the studios, so that may have been an older in-house standard that they kept and made industry-wide.

0

Eleanor Saitta @dymaxion@infosec.exchange · Apr 24, 2026

Replying to @carstenfranke@mastodon.social

@carstenfranke And then gets told where to shove it. Disaster response communities are pretty careful about this kind of thing and have a certain amount of autonomy because of the whole people dying thing. @mattblaze

1

0

Eleanor Saitta @dymaxion@infosec.exchange · Apr 15, 2026

Replying to @hacks4pancakes@infosec.exchange

@hacks4pancakes It's excellent! I'm curious how a non-security group will do with it, though — I feel like it might get tricky

1

0

Eleanor Saitta @dymaxion@infosec.exchange · Apr 14, 2026

RE: @benpate@mastodon.social

Gonna be hilarious if they add e2e and don't fix "private mentioned".

mastodon.social

Ben Pate 🤘🏻: "Have you seen this news? #Mastodon just got fund…" - Mastodon

12

0

4

0

Eleanor Saitta @dymaxion@infosec.exchange · Apr 07, 2026

Replying to @cstross@wandering.shop

@cstross At, yeah, I have a lot of friends with these, they're great — gold standard for a consumer gamma ray spectrometer

4

0

Eleanor Saitta @dymaxion@infosec.exchange · Apr 05, 2026

Replying to @mjg59@nondeterministic.computer

@mjg59 My initial parsing of this was that you donated your guest to the halfway house and kept the buns, which seemed a bit harsh

4

1

0

Eleanor Saitta @dymaxion@infosec.exchange · Mar 31, 2026

Replying to @flup@mastodon.scot

@flup @hazelweakly No, that falls under number one

0

Eleanor Saitta @dymaxion@infosec.exchange · Mar 31, 2026

Replying to @hazelweakly@hachyderm.io

@hazelweakly I feel like this list should still also include counting as number three

0

2

0

Eleanor Saitta @dymaxion@infosec.exchange · Mar 24, 2026

Replying to @SteveRudolfi@mastodon.social

@SteveRudolfi@mastodon.social Well, I hope they enjoy direct and indirect liability for all losses that either the consumer or the site can claim as a result of hallucinations

2

0

1

0

Eleanor Saitta @dymaxion@infosec.exchange · Mar 20, 2026

Replying to @charliejane@wandering.shop

@charliejane@wandering.shop Or at least unhappy sluts whose unhappiness has absolutely nothing to do with their sluttiness

1

0

Eleanor Saitta @dymaxion@infosec.exchange · Mar 14, 2026

Replying to @dymaxion@infosec.exchange

God I am so bored of talking about this shit

13

0

2

0

Eleanor Saitta @dymaxion@infosec.exchange · Mar 14, 2026

So a bunch of anti-trans hate groups sent a citizen's petition to the FDA demanding regulatory action around "cross-sex" use of estrogen. Although the language is somewhere heated and while we have no indications as to the FDA's intent with respect to this petition, I have no reason not to believe the authors of this article when they describe its potential impact if adopted: https://theneedlenews.com/anti-trans-hate-groups-petitioning-fda-for-registry-of-trans-women-crackdown-on-transition-newly-revealed-document-shows/

The short version: the creation of a registry of all trans women in the US, a federal regulatory requirement for a significant set of gatekeeping steps before estrogen can be prescribed, and authorization to seize any estrogen used without that process having been followed.

The original document can be read here: https://www.regulations.gov/document/FDA-2025-P-7321-0001

They apparently did not see the need to go after trans men here.

14

1

17

0

Eleanor Saitta @dymaxion@infosec.exchange · Mar 12, 2026

Replying to @zeank@mastodon.social

@zeank@mastodon.social @mhoye@cosocial.ca Or you could do the work properly so it doesn't take that time. And besides, your employer shouldn't be able to take time without compensating you for it. But when you do shit work, someone else pays for it with their time — and no, it's not your boss.

0

4

0

Eleanor Saitta @dymaxion@infosec.exchange · Mar 09, 2026

Replying to @notsle@kzoo.to

@notsle Needs more of a cope bun

3

2

0

Eleanor Saitta @dymaxion@infosec.exchange · Mar 03, 2026

Replying to @rafi0t@social.yoyodyne-it.eu

@rafi0t Ok but there are other options: https://bahn.bet/

2

1

0

Eleanor Saitta @dymaxion@infosec.exchange · Mar 02, 2026

Replying to @flexasync@hachyderm.io

@flexasync EU resident definitely is, but citizen might be flexible

0

1

0

Eleanor Saitta @dymaxion@infosec.exchange · Mar 02, 2026

Replying to @haroonmeer@infosec.exchange

@haroonmeer@infosec.exchange Oh fuck

2

0

Eleanor Saitta @dymaxion@infosec.exchange · Mar 02, 2026

Replying to @rafi0t@social.yoyodyne-it.eu

@rafi0t Right. So only people with connections to one of the markets can order hits, got it.

0

Eleanor Saitta @dymaxion@infosec.exchange · Mar 02, 2026

Replying to @rafi0t@social.yoyodyne-it.eu

@rafi0t ...and does having seen this message make it a crime to place that bet?

0

4

0

Eleanor Saitta @dymaxion@infosec.exchange · Feb 27, 2026

Replying to @quinn@social.circl.lu

@quinn Fucking writers man

0

Eleanor Saitta @dymaxion@infosec.exchange · Feb 26, 2026

Replying to @luis_in_brief@social.coop

@luis_in_brief Honestly I shouldn't have wasted the time

2

3

0

Eleanor Saitta @dymaxion@infosec.exchange · Feb 26, 2026

Replying to @rk@mastodon.well.com

@rk Lololol

0

Eleanor Saitta @dymaxion@infosec.exchange · Feb 26, 2026

Today I've been told that C is memory safe if you're just very neat, that code is documentation, and that expecting protocol specs is a form of bias?

I didn't realize it was 90s week; I'll go get a flannel.

59

16

0

Eleanor Saitta @dymaxion@infosec.exchange · Feb 26, 2026

Replying to @rootwyrm@weird.autos

@rootwyrm Yeah, I am unfortunately aware that it's still the exception there. The exceptions are more common, though.

0

2

0

Eleanor Saitta @dymaxion@infosec.exchange · Feb 26, 2026

Many, many years ago, at school for CS and before that interning at NASA Ames, I learned to take programming seriously as engineering work, and also the level of rigor that engineering work requires. In the intervening thirty years, I have had to come to terms with the degree to which this attitude is rare in theory and vanishingly rare in practice again and again. Tooling has gotten better, but the rigor applied to the average line of code has gotten worse.

I would hope that safety-critical systems would be different, and in some cases they really are. However, the number of people who want to build secure communications systems that they want to be safety critical and who expect thousands of people to literally use in a case where a breach of the threat model means the users will die and who as developers cannot bother to meet the basic design rigor requirement of 2006 — have a fucking threat model that is accurate and up to date — will never cease to shock me.

126

8

54

0

Eleanor Saitta @dymaxion@infosec.exchange · Feb 26, 2026

Replying to @jadedtech@aus.social

@jadedtech Eventually, but that'll be a while

2

0

Eleanor Saitta @dymaxion@infosec.exchange · Feb 26, 2026

Probably mostly not my audience here, but I'm currently looking for a business-side/CEO cofounder for an encrypted radio startup. There are solid funding options, but while I can build the team to make the product happen, I'm not the person to navigate the money side of things. I'm looking for a cofounder with previous startup CEO experience and executive-level experience (although not necessarily CEO) in a hardware startup specifically. EU citizen and resident, although it'll be a remote team, so where is less important.

49

9

139

2

Eleanor Saitta @dymaxion@infosec.exchange · Feb 24, 2026

Replying to @luis_in_brief@social.coop

@luis_in_brief This has nothing to do with cars and everything to do with politics.

1

0

Eleanor Saitta @dymaxion@infosec.exchange · Feb 17, 2026

Replying to @cstross__dup_483@wandering.shop

@cstross@wandering.shop Wtaf

2

0

Eleanor Saitta @dymaxion@infosec.exchange · Feb 12, 2026

Replying to @geeksam@ruby.social

@geeksam @V0ldek @cstross Don't worry, any video not shot from behind safety glass will suffer from rapid existence failure

2

0

Eleanor Saitta @dymaxion@infosec.exchange · Feb 10, 2026

Replying to @rafi0t@social.yoyodyne-it.eu

@rafi0t Oh good, I'm glad you've got enough of a copy to track changes. I'm assuming various folks have versioned mirrors with all the initial "oops we forgot that bit" stuff in them, but it's tough finding complete mirrors that do with unrestricted search heads on them.

0

2

0

Eleanor Saitta @dymaxion@infosec.exchange · Feb 10, 2026

Replying to @elrohir@mastodon.gal

@elrohir@mastodon.gal @grumpygamer@mastodon.gamedev.place And even there, in the US many bars are basically scanning your ID and giving a copy to Fred these days.

1

0

Eleanor Saitta @dymaxion@infosec.exchange · Jan 27, 2026

Replying to @angusm@mastodon.social

@angusm@mastodon.social @susankayequinn@wandering.shop @cstross@wandering.shop honestly both of these songs more like song titles

0

Eleanor Saitta @dymaxion@infosec.exchange · Jan 25, 2026

Replying to @yetiinabox@todon.nl

@yetiinabox @quixoticgeek Technically, yes, but I lent it to a friend on the Apple QA team when they were trying to get tests running for this new OS they were building on top of the NeXT OS core and didn't yet have enough native next-gen Apple hardware, and I never got around to asking for it back.

5

0

Eleanor Saitta @dymaxion@infosec.exchange · Jan 05, 2026

Replying to @HalvarFlake@mastodon.social

@HalvarFlake@mastodon.social If only we had any reason to believe that they helped with correctness, reliability, understanding, or resilience of systems. We need less code more carefully-written and better understood; they just make problems we already have much worse.

5

0

Eleanor Saitta @dymaxion@infosec.exchange · Dec 28, 2025

Replying to @galacticstone@mastodon.social

@galacticstone@mastodon.social Is this a Mike check?

3

2

0

Eleanor Saitta

Posts

Ben Pate 🤘🏻: "Have you seen this news? #Mastodon just got fund…" - Mastodon

Remote instance