Elektrine
EN
Log in Register
Paige Chat Timeline Communities Gallery Videos Email DNS VPN Uptime Kairo
Back to Timeline
Remote

Andrew Kalat

@lerg@infosec.exchange
  • Open on infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

0 Followers
0 Following
26 Posts
Joined November 04, 2022
Twitter:
https://twitter.com/Lerg
Defensive Security Podcast:
https://defensivesecurity.org/
Getting Defensive Podcast:
https://gettingdefensive.com/
Youtube Podcast feed::
https://www.youtube.com/@DefensivePodcasts

Posts

Open post
lerg
Andrew Kalat @lerg@infosec.exchange · Aug 03, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange
GitHub AI Agent Leaks Data From Private Repo's #defensivesecuritypodcast
Your browser does not support the video tag.
0
0
0
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · Jul 24, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange
True story.
0
1
0
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · Jul 23, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange
This is really amazing. And also a good look at how far undersea drone imaging technology has come. https://www.bbc.com/news/articles/cdrvyllxj71o
0
0
0
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · Jul 22, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange
So. OpenAI was testing an advanced model and it escapes their sandbox and attacked Hugging Face. Lots to unpack. But this statement really rubs me the wrong way: “we are implementing strict controls in infrastructure configuration at the cost of research velocity” Oh noes! Not your precious research velocity. Look, your dog just got out and mauled some poor kid. And you are begrudging going to build a fence and then point out how selfless you are and how much it’ll inconvenience you. Arrogant and obnoxious tone. https://openai.com/index/hugging-face-model-evaluation-security-incident/
0
0
0
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · Jul 22, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange
How many infosec vendor sales decks just got updated to say they would have protected Hugging Face?
0
1
0
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · Jul 19, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange
Replying to @jerry@infosec.exchange
@jerry@infosec.exchange Plant based Flashdance remake is well along I see.
0
0
0
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · Jul 13, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange
Did you know the Defensive Security Podcast now had a daily briefing? Jerry is putting out a 5 minute podcast every morning. Look for the "Daily Defsec Brief" in your podcast app of choice, or on our Youtube channel! @DefensivePodcasts@www.youtube.com
0
0
0
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · Jul 05, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange
Braves Sportsball for the 4th!
0
0
0
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · Jul 02, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange
Replying to @jerry@infosec.exchange
@jerry@infosec.exchange
Your browser does not support the video tag.
6
0
0
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · Jun 29, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange
Replying to @free_amproot@infosec.exchange
@free_amproot@infosec.exchange They will now! Brilliant.
0
0
0
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · May 22, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange

Stand by for news!

Okay, that's long enough. Now the news!

Today mark's my last day at Salesloft after nearly 5 years. It has been a very eventful time.
- Buyout by Private Equity
- 2 Mergers/Acquisitions
- 4 CEOs
- 7 Rounds of Layoffs
- Death of my mother
- Death of a beloved pet.
- Leadership role through a major security incident.
- Scaled a security team of 2 up to 8 and rebuilt the entire program from the ground up.

I can honestly say I learned a great deal working through all of these events. I had a great team who I will miss working with and who I owe all of our success too. I also saw some terrible leadership decisions and predictably terrible outcomes as a result. Wisdom generating events, as I like to call them.

So what's next? I'm going to take a bit of a break to try to get back to being the person I strive to be. Then I'm going to look for some new interesting adventures. Consulting, fractional work, part time, non-traditional engagements, or even full time work is all on the table. I am looking to find something that excites me again working with quality people. Life is too short to not be inspired by how we spend our precious limited time.

So if you find my particular mix of security skill and snark of use, please reach out!

10
1
0
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · May 22, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange

The next time your employer asks you to go the extra mile or work those extra hours or support “the family” just remember all the layoffs happening right now to people who did all of those things.

21
0
12
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · May 19, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange

https://www.twz.com/air/russias-new-two-seat-su-57-felon-takes-its-first-flight

1
1
0
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · May 14, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange
2
0
0
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · May 12, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange

Tikaboo Peak, Legendary Area 51 Viewing Spot, Closed by U.S. Government https://theaviationist.com/2026/05/02/tikaboo-peak-area-51-spot-closed/

2
0
2
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · May 12, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange

I’m seeing a lot of companies say that they are measuring AI usage as a performance metric.

The assumption is AI usage == efficiency.

I think this is a poor metric. They should try to measure actual efficiency metrics, not tool use. See exhibit A:
https://arstechnica.com/ai/2026/05/amazon-employees-are-tokenmaxxing-due-to-pressure-to-use-ai-tools/

3
2
0
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · May 11, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange

Y'all got any more of them security patches? | iOS 26.5 has fixes for 50 security issues on iPhone, details here https://9to5mac.com/2026/05/11/ios-26-5-has-fixes-for-50-security-issues-on-iphone-details-here/

1
0
0
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · May 08, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange

Executives bragging about coding again and shipping production code with AI because they can misses a huge massive point.

Is this really the BEST use of an executives limited time and mental energy?

Sure, it makes them feel productive and “in touch” but the role of a executive should be strategy, setting direction and priorities, hiring and mentoring their staff, holding teams accountable, and enabling their teams to be successful.

This is ego and shiny toy syndrome talking. It’s a distraction from critical high leverage work only they can do.

If you want to fast, go alone. If you want to go far, go together.

5
0
2
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · May 06, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange
Replying to @jerry@infosec.exchange
@jerry Next stop: UL Listing for professionally built apps.
2
1
0
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · May 05, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange
Replying to @aburka@hachyderm.io
@aburka Nope. I think good managers are force multipliers who do their best work by ensuring their people have the tools, air cover, priorities and time to do their jobs.
8
1
1
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · May 05, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange
Replying to @aburka@hachyderm.io
@aburka I think 7 is a reasonable max for effective leadership who actually has time for their people.
4
1
1
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · May 05, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange

So, Brian Armstrong, CEO of Coinbase, published a letter on X about his companies future and his planned layoffs.

You can find the full post here: https://x.com/brian_armstrong/status/2051616759145185723?s=20

So many folks, rightly so, have zeroed in on this sentence with serious angst:

"Non-technical teams are now shipping production code..."

I think this is the inevitable outcome of the past 30 years. First cloud, then SaaS, now vibe coding has moved IT ownership to the masses.

I don't think this is great for security, governance, or oversight, but it's AMAZING for CEOs and boards who just want to go fast and break things and "empower their people."

I'm not belittling "the masses." But they aren't technologists, by and large.

And what is being demanded of them by misguided leaders is to run some massively complex SaaS/Cloud/Coding tool that "Looks Easy Enough" but all of the devil is in the details that only hard core technologist would know or care about.

I believe this is why we have seen so many breaches based on misconfigurations and poor secret management and poor API/Token/Oauth management. The people making those design decisions aren't equipped with the skills to understand the consequences of their design choices.

They are marketing people, or sales people, or HR people, or whatever. They have other important skills, but we have forced IT onto them because leadership massively underestimates the complexity, risk, and specialized knowledge required to run it safely.

"I mean, how hard can a surgery robot be? You just push buttons right? Get the front desk guy to do it!"

This is inevitable, but stupid. Good luck to us all.

121
39
90
6
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · May 03, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange

3rd Row for Josh Gates Live. Popped for the meet and greet. We’re nerds.

0
0
0
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · Apr 30, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange

I think we need to bring back https://en.wikipedia.org/wiki/Fucked_Company but now for companies that get fucked by their own AI usage.

4
1
1
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · Apr 26, 2026
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange

Proof that occasionally @jerry@infosec.exchange and I are in the same room.

infosec.exchange

Scary Jerry 👻 (@jerry@infosec.exchange) - Infosec Exchange

45
2
1
0
Open post
lerg
Andrew Kalat @lerg@infosec.exchange · Oct 22, 2025
Andrew Kalat
@lerg@infosec.exchange

Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.

infosec.exchange
46
0
25
0

Remote instance

infosec.exchange
Open on original server

Media

313k7r1n3
Elektrine

Tor hidden service

elekhj7afj4qnrr4yd3bkzslsyo5jgfxw3orgjkhlcxifueodybyiiad.onion

Platform

  • Email
  • Chat
  • Timeline
  • Communities
  • VPN
  • DNS

Company

  • About
  • Contact
  • FAQ

Legal

  • Terms of Service
  • Privacy Policy
  • Warrant Canary
  • Lite (no JS)
  • VPN Policy
  • Source code

Support

  • support@elektrine.com
  • Report Security Issue
Mail client setup IMAP mail.elektrine.com:993 POP3 mail.elektrine.com:995 SMTP mail.elektrine.com:465
© 2026 Elektrine. All rights reserved. Server: 00:39:17 UTC