CISO, supports @heidishmoo each year as she wrangles @shmoocon, periodic blacksmithing and leather work,
Too close to DC
Joined January 2009
- Tweets18.4K
- Following1.4K
- Followers8.2K
- Likes6.1K
Bruce Potter retweeted
We never ambulance-chase, but there's a good reason that smart security teams have suggested honeypots and deception to detect agentic attacks.
Dead simple && Works!
xitter.cf/ThinkstCanary/status/2…
Last month:
🌍 free canarytokens.org were created in ~75% of the countries around the world;
🤯 a single (@ThinkstCanary) customer deployed >500,000 Canarytokens per hour (embedded in their workflows);
💪 we uncovered at least 1 major breach at an AI cloud infra provider
Bruce Potter retweeted
Hey #blackhat #defcon - Do you know there is the Cycleoverride Bike Ride at Defcon? cycleoverride.org/2026-defco… Join us Friday morning!
There very little money in secure entropy but the failure modes are catastrophic. It’s a wild problem.
Generating truly random numbers is a deceptively difficult problem. 12 years ago I participated in crowdfunding the production of the Mycelium Entropy device for that sole purpose. Sadly, few folks cared about this issue and they only produced ~500.
xitter.cf/lopp/status/4861562950…
I don’t post much here anymore, but for those that follow me… I’ll be doing a deep dive on OpenTelemetry data and Claude Code instrumentation at 3pm EDT today. Twitch.tv/turngate. See you there.
Bruce Potter retweeted
I started Granitt in 2022 to help journalists and other groups of at-risk people continue to do their work safely and securely. Please get in touch if you’re looking for an assessment, policy and process development, training, or presentation. techcrunch.com/2022/07/15/gr…
Not entirely sure what @heidishmoo and @pwcrack are doing in this pic. :)
Some more images from the calm before #defconbahrain - our demo labs prepped for demonstration and the info desk ready to inform.
You can find out more #defcon at the #arabinternationalcybersecurityconference here:
defcon.org/html/defcon-bahra…
@NCSC_BH @AicsExpo
Breaking twitter silence to call out this kind of messaging. Use of Signal for official business is a violation of federal record laws. Use of unapproved comms for classified discussion is also illegal. Disclosure to an unauthorized 3rd party is just a small part of the problem.
Spare me the “if the other side did it” bothsidesim. 13 Marines were not killed. The SecDef didn’t go missing without telling anyone. The SOS wasn’t a two faced liar to the public like Clinton. Yeah a hack journalist shouldn’t have been included in a convo on Signal. It’s a mistake that needs to be rectified.
But I see a VP thoughtfully pushing back while ultimately deferring to the President.
A SecDef putting plans together awaiting orders.
Miller asking what’s in it for America and how do you make Europe pay for our guarantees of trading routes.
A team working toward a conclusion privately the same way they present publicly.
Bruce Potter retweeted
The people now in charge of the Office of Personnel Management apparently don’t know how to scrub PDF metadata, and have exposed the original authors of the guidance they’re publishing. Two, Noah Peters and James Sherk, have links to the Heritage Foundation and Project 2025.
Living in a town that was basically wiped out twice by water, 2 things
- Flood insurance isn’t really an option if you don’t live in a flood plain
- Flood insurance doesn’t cover “drainage issues”/flash floods. It’s a completely different beast, esp outside a flood plain
One of the tragedies of Hurricane Helene is how few people had flood insurance.
I pulled data from FEMA for every county in North Carolina.
In most inland communities, less than 1% of homes were insured before the storm.
distilled.earth/p/hurricane-…
I’m doing a talk this week on bad UI in cybersecurity. I’ve got my examples but I’m curious if anyone has some most (least?) favorites
Bruce Potter retweeted
It's interesting to me how much cybersecurity discussion focuses on the widest parts of the funnel towards an attacker's goals rather than the narrower parts of the funnel. I've come to the conclusion that experts want to expert, so we bias towards shaping our work to require it.
Bruce Potter retweeted
The US, Britain & the EU will soon sign the first-ever AI treaty after years of negotiations between 57 countries. This is a huge win for technological innovation and online safety, & a sign that AI can grow without putting the world's democracies at risk bit.ly/3TdSDXh
I’m heading to Blue Team Con next week with a few other folks from Turngate. Stop by and say “hi” if you’re there turngate.io/blog/thinking-ab…
Bruce Potter retweeted
Check out "GrrCON 2024" eventbrite.com/e/grrcon-2024… @
Bruce Potter retweeted
@jp_bourget got the chance to sit down with the @defcon youtube channel and talk about how the Def Con Bike Ride came to be, and what it's like to participate. youtube.com/watch?v=hHvIKmgv…
