Elektrine
EN
Log in Register
Paige Chat Timeline Communities Gallery Videos Email DNS VPN Uptime Kairo
Back to Timeline
Remote

Taggart :ifin:

@mttaggart@infosec.exchange
  • Open on infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute@infosec.exchange. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable

Pronouns: He/him.

8822 Followers
912 Following
50 Posts
Joined April 26, 2022
The Taggart Institute:
https://taggartinstitute.org
Blog:
https://taggart-tech.com
Codeberg:
https://codeberg.org/mttaggart
YouTube:
https://youtube.com/taggarttech
GitHub:
https://github.com/mttaggart
Keyoxide:
aspe:keyoxide.org:G4ADJFWICZZZXGR4STZQVMBJNM

Posts

Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 07, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @JessTheUnstill@infosec.exchange
@JessTheUnstill@infosec.exchange I have a lot of imposter syndrome, so maybe???
3
1
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 07, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange

I've been broken out of containment for like 15 years and nobody's made a fuss.

23
6
7
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 06, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange

@JeffGrigg@mastodon.social @securingdev@infosec.exchange Thanks, fixed

mastodon.social

Jeff Grigg (@JeffGrigg@mastodon.social) - Mastodon

2
0
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 06, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange

Great work from @securingdev@infosec.exchange's team here:

Naturally, these things are better at destroying than repairing.

The average success rate for generating a patch that fully resolved the vulnerability (without materially changing application behavior) was just 26.0%.

https://1password.com/blog/why-ai-generated-patches-still-require-human-review

infosec.exchange

Keith Hoodlet :verified: :donor: (@securingdev@infosec.exchange) - Infosec Exchange

21
0
17
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 05, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange

I see the fear mongering around "open source"* models has kicked into high gear.

https://www.cybersecuritydive.com/news/openai-hugging-face-hack-ai-models-black-hat/827167/

* They mean open-weights†

†They really mean "Chinese"

OpenAI warns autonomous hacks are ‘watershed moment for computer security’
Cybersecurity Dive

OpenAI warns autonomous hacks are ‘watershed moment for computer security’

Company employees said their industry should rethink how it balances capabilities and safeguards.

17
4
14
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 05, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @ipsquiggle@sunny.garden
@ipsquiggle@sunny.garden @accidentalciso@infosec.exchange A very balanced approach.
2
1
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 04, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @tehfishman@ioc.exchange
@tehfishman@ioc.exchange Yeah the deskilling one is really scary! But at the same time, especially with malware reversing, that skill is so specific to getting the defensive result for me, that I don't mind being somewhat mercenary about it. Also, FWIW, I recently used a model on a Golang malware sample using a very detailed set of instructions to make me do a lot of the analysis during the process, and the result was I ended up knowing more about Golang malware than when I started. I didn't lose time on address arithmetic, writing decrypt algos, etc. So yeah. It's fuzzy as hell.
2
1
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 04, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @chroma@raccoonisland.social
@chroma@raccoonisland.social Yes. It has happened more than once that the tool has successfully revealed malware indicators that would have been unreasonably time-intensive to reveal manually.
0
0
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 04, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @cR0w@infosec.exchange
@cR0w@infosec.exchange Real talk, I'm getting some bananas obfuscated samples that are most certainly more obfuscated because of LLM usage. It's just so much easier to do stuff like control flow flattening and other techniques. I can probably get there, but not in a reasonable timescale. Whereas the models can get me indicators fairly reliably. I really don't know what to do with that.
4
1
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 04, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @chroma@raccoonisland.social
@chroma@raccoonisland.social Those are important concerns, but they are orthogonal to the immediate scenario. I'm being attacked. I have a tool that can materially improve defense. Whether I use it or don't in that moment has much less bearing on "productivity gains" or corporate strategy. It might make the difference between stopping and attack in time or not. That doesn't discount the concerns you address, but it does highlight the difference of scale that duty of care speaks to. If I am responsible for defense, is my obligation to make the best defense a de facto requirement to use that tool?
1
0
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 04, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @chroma@raccoonisland.social
@chroma@raccoonisland.social I'm not a security engineer.I've done as much web dev as you, and perhaps moreI too love the creative aspect of the jobNone of that is what we're talking about This is about duty of care. If I'm being attacked with a weapon I find morally reprehensible yet highly effective, and another one is sitting next to me, do I pick it up to defend myself and those in my care, or do I ignore it?
0
1
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 04, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @chroma@raccoonisland.social
@chroma@raccoonisland.social I am, but it is far from the only location where choosing to sacrifice a career on principal can be a devastating choice for oneself and one's family.
0
1
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 04, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to on raccoonisland.social
@chroma@raccoonisland.social I beg you to read anything I've written on this topic before assuming my positions or experiences.
0
6
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 04, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @chroma@raccoonisland.social
@chroma@raccoonisland.social Yeah I don't know how things are where you live, but it can be literally life-threatening here to sacrifice a job (and healthcare) to pursue a speculative other job/career.
1
3
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 04, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @mttaggart@infosec.exchange
It's a collision of two scales of moral choices, and reasonable people can disagree about which takes precedence. I admit to leaning toward the immediate duty of care, but also recognize that without additional collective action, that evaluation never gets us anywhere better.
5
0
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 04, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @chroma@raccoonisland.social
@chroma@raccoonisland.social This isn't really about "competence," it's about speed and efficiency. Even if I can extract those indicators eventually, the LLM will do it more quickly, meaning a better defense. And the argument that you should sacrifice one's (and perhaps one's family's) wellbeing for a principle is exactly the deontology I'm highly suspicious of. It smacks of a kind of morality-by-privilege that's all-too-easy to visit on everyone else. Also, FWIW, seems kind of like a decision you shouldn't make by yourself.
2
1
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 04, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @accidentalciso@infosec.exchange
@accidentalciso@infosec.exchange Ehhh that implies an equivalence of duty that I'm not sure is present. To me this is the core conceit behind the Ethics of Care. Rather than deriving moral valence from deontology, relationships to others shape decisions about right and wrong. In this case, I am leaning in the direction that one's obligation to protectees outweighs—at least in that moment—a global obligation to the environment/society/whatever.
1
3
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 04, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
There's a really uncomfortable duty of care question facing defenders with ethical objections to generative AI—myself included. If the bad guys are attacking you with heavily obfuscated malware that takes significant time and effort to manually analyze, and the generative tool that is demonstrably excellent at performing analysis and indicator extraction is right there, are you obligated to use it? Are you neglecting your duty of care to those under your defense if you don't? I'm not sure, but I don't think it's an easy answer.
24
13
6
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 04, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange

RE: @ifin@infosec.exchange

I'm so tired of writing this post again and again.

10
0
2
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 04, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @sten@chaos.social
@sten@chaos.social We don't have the capacity to stand up a legal entity in Europe right now, but we're certainly open to it!
1
0
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 04, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
RE: https://infosec.exchange/@ifin/117037872718384291 We finally got there! But it's just the beginning.
Quoting
IFIN - The Independent Federated Intelligence Network @ifin@infosec.exchange
We're thrilled to announce IFIN has achieved 501(c)(3) recognition! Now we can get down to business. https://ifin-intel.org/blog/nonprofit/ #IFIN
Open quoted post
28
3
10
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 03, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @mttaggart@infosec.exchange
Stinger: you gotta love that Chrome considers this a physical attack "outside the threat model." https://issuetracker.google.com/issues/464305542
6
1
3
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 03, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @mttaggart@infosec.exchange
Here's a refresher on passkeys/WebAuthn for those interested: https://blog.trailofbits.com/2025/05/14/the-cryptography-behind-passkeys/
The cryptography behind passkeys
The Trail of Bits Blog

The cryptography behind passkeys

This post will examine the cryptography behind passkeys, the guarantees they do or do not give, and interesting cryptographic things you can do with them, such as generating cryptographic keys and sto

14
2
10
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 03, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @mttaggart@infosec.exchange
You might wonder why this is a problem if an attacker has to compromise you first to exploit it. Let's talk infostealers. If you have a user that somehow gets an infostealer—say, via supply chain attack and no fault of their own—but they have excellent credential hygiene, with MFA for everything sensitive, you might think you dodged a bullet. But uh oh! If they're using passkeys in Chrome, turns out the stealers now have a way to get a credential that, in many cases, bypasses the MFA requirement. The user "doing the right thing" has now become a liability because of Google's implementation.
16
4
6
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 03, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
This is fantastic research from Unit42. My takeaway here is that passkeys are still much better than passwords, and Chrome as a credential manager is still a terrible idea. Use a separate password manager. https://unit42.paloaltonetworks.com/passwordless-authentication-security-risks/
Pass the Passkey: A Novel Attack Surface in Passwordless Authentication
Unit 42

Pass the Passkey: A Novel Attack Surface in Passwordless Authentication

Explore how passkey implementation gaps undermine security when relying parties fail to validate the User Verified flag, reducing MFA to a single factor.

36
5
19
1
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 03, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @joshbressers@infosec.exchange
@joshbressers@infosec.exchange That's an estimate! GH search gives up after a while. If you reload, you might not get the same number.
3
0
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 03, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @mttaggart@infosec.exchange
Also free tokens, getcha free tokens heah
13
1
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 03, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
My hobby: depressing GitHub searches. https://github.com/search?q=remove+api+key&type=commits
0
4
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 03, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @tobraha@infosec.exchange
@tobraha@infosec.exchange Yeah for IFIN we front the post with our own thing to avoid it.
0
0
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 03, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @mttaggart@infosec.exchange
Combine this with the VulnCheck report and you have one strong case for each new CVE requiring significant fact-checking. https://www.vulncheck.com/blog/state-of-exploitation-1h-2026
VulnCheck State of Exploitation 1H-2026  | Blog | VulnCheck
VulnCheck

VulnCheck State of Exploitation 1H-2026 | Blog | VulnCheck

Key Trends and Findings from Known Exploited Vulnerabilities, AI discovered vulnerabilities, and AI targeted technologies from the first half of 2026

4
0
2
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 03, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
You have to wonder how much of this there is out there. If what is found is only a fraction of reality, then the hype bubble is even more overinflated than we thought. https://research.jfrog.com/post/sqlite-critical-cves-or-llm-slops/
research.jfrog.com

SQLite Critical CVEs or LLM Slop? - JFrog Security Research

The JFrog security research team recently identified a supply chain attack targeting the `xinference` package on PyPI. Versions 2.6.0, 2.6.1, and 2.6.2 were compromised and yanked by maintainers after

0
3
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Aug 03, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @hrbrmstr@mastodon.social
@hrbrmstr@mastodon.social This is why @ifin@infosec.exchange is generating images with Trek title card generator for any post that would surface a slop image in preview. https://trek.epicrandomness.com/#editor
Star Trek Title Card Generator
trek.epicrandomness.com

Star Trek Title Card Generator

Make your own era-accurate Star Trek episode title cards in seconds. Boldly go!

0
0
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Jul 31, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @glyph@mastodon.social
@glyph@mastodon.social Can't spell "threats" without "treats!"
2
0
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Jul 31, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange

RE: @ifin@infosec.exchange

I've wanted to write this one since we started.

infosec.exchange

IFIN - The Independent Federated Intelligence Network: "Sorry to disappoint, but there will be no IF

4
6
2
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Jul 31, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Ooof, Codeberg appears to be mega-down. HugOps to them. Both the main site and their Mastodon instance seem to have suffered a failure.
14
1
9
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Jul 31, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
I'm too tired for outrage about Anthropic. They've been telling us they're reckless the whole time.
22
0
3
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Jul 29, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @valthonis@dice.camp
@valthonis@dice.camp Same! I'm happy to keep exploring the beautiful-but-barren No Man's Sky without risk of crippling financial losses.
4
1
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Jul 29, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @mttaggart@infosec.exchange
Oh just realized this is old, ah well.
2
0
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Jul 29, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
I love a good EVE capital loss story. https://www.bbc.com/news/articles/cnvp7364q5no
Eve Online virtual space war costs gamers £400,000
www.bbc.com

Eve Online virtual space war costs gamers £400,000

One of the most violent chapters in EVE Online history wiped out an empire that had taken years to build.

6
8
2
1
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Jul 29, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @abhayakara@mastodon.nl
@abhayakara@mastodon.nl I think we can safely blame corpospeak for that one. Probably the colons too.
0
1
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Jul 29, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @OberstKrueger@gamepad.club
@OberstKrueger@gamepad.club More dangerous than the Rob Liefeld pouch game!
0
0
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Jul 29, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Everyone focuses on models' use of emdashes, but honestly the way they use colons is as big a tell to me. They just love to slam the brakes on a sentence for dramatic effect.
11
4
1
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Jul 29, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @jdp23@neuromatch.social
@jdp23@neuromatch.social Yeah I don't think that is really in conflict with anything I wrote, and I largely agree.
0
0
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Jul 28, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @glyph@mastodon.social
@glyph@mastodon.social I can virtually guarantee that if India were producing open-weights models that were competitive with his products, you'd see a demonization of that country as well.
0
0
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Jul 28, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @bartolialberto@infosec.exchange
@bartolialberto@infosec.exchange Oh look an "Are you surprised?" post that adds nothing of value to the conversation. I will continue to call out deception where I see it, thanks.
0
1
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Jul 28, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Real-time footage of Hugging Face's LLM-powered security program.
15
1
5
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Jul 28, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @glyph@mastodon.social
@glyph@mastodon.social I also have a sinking feeling that the "known" in "known exploited" is doing more lifting than we'd like.
0
0
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Jul 28, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @glyph@mastodon.social
@glyph@mastodon.social This I wholeheartedly endorse. I'm the guy who actually believes we'd be a lot better off if multiple codebases were taken down and rebuilt (well) in memory-safe languages. This dropped today, which is worth a read as well. For all the new vuln findings, the actual exploitation of same is comin' up short. https://www.vulncheck.com/blog/state-of-exploitation-1h-2026
0
1
0
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Jul 28, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Dario's post on open-weights models is intentionally misleading. With one hand, he proffers praise and admiration for the models. With the other, he tsk-tsks about the "danger" of biological attacks, demanding bans on chip sales and penalties for distillation. He's spooked. But also, to read this you would think that nobody had ever jailbroken Claude into performing criminal activity. Except...their own reports tell us that's not so. All models can be abused; no models can be secured. Why then should we trust any product we can't examine at all? I'm not saying open-weights models are unproblematic. I'm just saying this rationale for their danger doesn't pass a sniff test. Dario sees the economic reality in front of him and observes a shift to relying on open-weights models for some workflows. That's a potentially existential risk for his business (as China no doubt intended). The rest is backwards reasoning. https://www.anthropic.com/news/position-open-weights-models
Our position on open-weights models
www.anthropic.com

Our position on open-weights models

Anthropic CEO Dario Amodei on open-weights models

45
5
31
0
Open post
mttaggart
Taggart :ifin: @mttaggart@infosec.exchange · Jul 28, 2026
Taggart :ifin:
@mttaggart@infosec.exchange

Displaced Philly boy. Threat hunter. Educator. :ifin: Executive Director. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.

infosec.exchange
Replying to @AAKL@infosec.exchange
@AAKL@infosec.exchange Who's "we?" I don't really think the decisions you're referring to are being made by the vast majority of people engaging with this technology on a daily basis, let alone the vast majority of the human population. I would caution about conflating issues here.
0
1
0
0

Remote instance

infosec.exchange
Open on original server

Media

313k7r1n3
Elektrine

Tor hidden service

elekhj7afj4qnrr4yd3bkzslsyo5jgfxw3orgjkhlcxifueodybyiiad.onion

Platform

  • Email
  • Chat
  • Timeline
  • Communities
  • VPN
  • DNS

Company

  • About
  • Contact
  • FAQ

Legal

  • Terms of Service
  • Privacy Policy
  • Warrant Canary
  • Lite (no JS)
  • VPN Policy
  • Source code

Support

  • support@elektrine.com
  • Report Security Issue
Mail client setup IMAP mail.elektrine.com:993 POP3 mail.elektrine.com:995 SMTP mail.elektrine.com:465
© 2026 Elektrine. All rights reserved. Server: 18:25:22 UTC