← Feed

Posts

• View post

  RE: https://infosec.exchange/@TindrasGrove/117456758033860715 I beg to differ: I have promoted someone for finishing an asset inventory. That’s the single most useful baseline for security governance there is. It’s foundational and its absence makes multiple other things impossible.

• View post

  It's not just that 4 isn't a prime number. it's that it's the smallest number that ISN'T a prime number. I"m looking for a better definition of useless entropy

• View post

  Simply apologizing to call center folks for making their call time metrics go up goes a LONG way to getting a friendlier interaction and sometimes shibboleet help. These poor folks are getting slammed with metrics and yet the reason they exist is because computers could not solve the problems you're calling in about. I remember being IT Help Desk and it is AWFUL right now.

• View post

  So, as a social scientist, I am absolutely fascinated with the longstanding issue about AirBNB guests being requested to do the cleaning of a home that they then have to play a cleaning fee in anyway. I want to know: has there been any sociologist or economist who's taken a look at this moment where we can, for the first time, put an actual price tag and some data on the economic cost of the maintenance of a home? The ongoing work of homemaking is one of continuous tasks throughout a d...

• View post

  Wherein I have a bad attitude about #PHP2Shell on international news. “Rogue AI” is mostly a marketing line. When an AI company says it built something too powerful to control, what it’s actually telling you is that it skipped the security controls. Your dentist should not have to be a PHP security expert. Companies that kept selling sites built with memory-unsafe apps to small businesses without explaining the risk own this mess. On https://www.youtube.com/watch?v=3EB16ZFkRhw @deutschew...

• View post

  fess up; who's running the deepseek swarm to patch php boxes????

• View post

  With this rising tide of vulnerabilities, trying to translate actual risk, and working with people just trying to keep critical infrastructure safe, this last week has been a hell of a year. "You are not obligated to complete the work, but neither are you free to abandon it." --Pirkei Avot

• View post

  Just a weekend thought, apropos of nothing. There have been a lot of times I've been angry at not being included in something I was qualified for, and that anger is worse when it's clear that I've been actively *disincluded* for being a woman. I mostly convert that rage into Achievement Fuel, but it also hurts to see it happen to other women. When some group or launch or listicle is billed as a gathering of high achievers or the stars of the industry, and it's a dozen or more w...

• View post

  For all incident responses from now on, I’m going to get on that Zoom call at 2am and begin by saying “Please state the nature of the computational emergency.”

• View post

  Orrrr how about you GFY. Hacking is a set of survival skills. I am not a computer criminal, I use my skills to help people, and my only crime is that of curiosity. (Everything else is past the statute of limitations.) #defcon Thanks and credit to @BenDoubleU@mastodon.llyxx.me for the photo

• View post

  This Friday at DEF CON I host the @eff@mastodon.social Poker Tournament, and novices are especially welcome. We play Fri Aug 7, noon to 3, at the Horseshoe Poker Room in Vegas, with my dad running a beginner clinic at 11. This is not the ESPN boys' club version of poker. The room is safe, surveilled, and respectful, and the dealers are briefed to teach, not judge. Your buy-in donation is also a full year of EFF membership. Send eff.org/poker to one curious friend. #DEFCON #EFF #Poker

• View post

  I have a suggestion for folk watching The Odyssey. Treat it like a rock concert and wear earplugs. After the first three minutes I put them in and I heard dialogue much better. The music is So Loud in it, and the dialogue is more intelligible when you’re not wincing.

• View post

  SecurityWeek did one of their CISO Conversations pieces on me. Highlights include getting compared to being mugged by my own career and admitting I fail on purpose about 70% of the time. Also some actual substance in there about why we don't have real incident statistics in this industry and why that's a bigger problem than any single breach. https://www.securityweek.com/ciso-conversations-tarah-wheeler-cybersecurity-leader-thought-leader-and-original-thinker/

• View post

  isgithubupforeveryoneorjustme.com

• View post

  Delve. For when you need a SOC 2 Type √(-1)

• View post

  A hill I will die on: Mexican Wedding Cookies and Russian Teacakes are the best evidence we have for time travel and alien origins of human life on earth. they're. the. same. damn. cookie.

• View post

  RE: https://infosec.exchange/@Tarah/116540734885717411 They’re operational again as of 14m ago.

• View post

  @letsencrypt is in the middle of an active incident. Issuance of new certs has ceased. Heads up. https://letsencrypt.status.io/

• View post

  Good news, everyone! The password has been updated to "LouvreWinter2025!" and is now compliant with our password change policies.

• View post

  What's a good ad blocker for Chrome? [anyone suggesting I move to Chromium, Safari, or Mozilla will be summarily meme-d to death]

• View post

  RE: https://social.vivaldi.net/@fazalmajid/116432350114276348 As a political economist by training, 👇👇👇👇

• View post

  RE: https://recurse.social/@lindsey/116189776923604763 It’s the same thing many techbros were saying out loud when they founded gig economy companies to do their laundry, cook their food, handle their errands, and clean their homes: “now that I have $app, I don’t need a mom/wife/gf to do it anymore.” It tells you what they thought women were for, all along.

• View post

  No, you did not send a numeric code to my email to help me sign in "for my security." You did it because you couldn't be arsed to implement proper app-based authentication. Control of any email address collapses down to a single factor for authentication. Do better. #TuesdayCyberGrouse

• View post

  In defense of Reviewer 2. Dear Reviewer 2: Reviewers 1 and 3 snarked uselessly. You, however, did a damn fine job giving me actionable changes, sight reading the missing recall stat from my own graph, pointing out what it meant to my theory, and making my work better. Thank you. Love, someone going to the conference and who has a brand new peer-reviewed publication thanks to your "weak accept". I ain't proud; I'll take it.

• View post

  So I hacked my way into being Cyber Policy Initiative Senior Fellow at the University of Chicago's Harris School of Public Policy. I'm workin on rural water critical infrastructure cybersecurity. Do you even hack utilities? Please chat w me. I need to quickly find out where I"m wrong about some of my assumptions. Still very entertained by the fact that I *finally* got into the University of Chicago. :D https://cpi.harris.uchicago.edu/2025/12/23/harris-cyber-policy-initiative-tap...

• View post

  I'm just like any modern woman trying to have it all. It's just...I wish I had more time to seek out the dark forces and join their hellish crusade. That's all.