Sign in

Adam Shostack :donor: :rebelverified:

@adamshostack.infosec.exchange.ap.brid.gy
173 followers 1 following 1.9K posts

Author, game designer, technologist, teacher. Helped to create the CVE and many other things. Fixed autorun for XP. On Blackhat Review board. Books […] [bridged from infosec.exchange/@adamshostack on the fediverse by fed.brid.gy ]

PostsRepliesMedia
Reposted by Adam Shostack :donor: :rebelverified:
The Flight Attendant @cosmictraveler.mastodon.social.ap.brid.gy · 07/10/2026
I just received my #covid & #flu #vaccines from Smith's pharmacy. If you have a Kroger, Smith's, or Fred Meyer near you I'd highly recommend them. They give you $20 worth of free groceries if you get both shots at once. They both hurt a tiny bit going in, but […] [Original post on mastodon.social]
A white woman in a coral shirt displays a blue Kroger Band-Aid on her arm.
115
Reposted by Adam Shostack :donor: :rebelverified:
George Monbiot @georgemonbiot.bsky.social · 06/10/2026
Yes, I've seen some of the abuse on this site for the stance I've taken. But it won't change my belief that this motion is gesture politics of the kind you might find in a students' union. Except in this case it has real and damaging consequences - that are already playing out. A massive self-own.
4546917
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 05/10/2026
If the AI was actually anything close to intelligent, it could talk about Soatok without having a meltdown.
furry.engineer
000
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 05/10/2026
You know what else is efficient? Executing enemies of the state. We gave up on that because no one wants to be the enemy of the state who gets executed, and so we all decided that a little inefficiency was better than all the alternatives that had been tried from time to time.
journa.host
002
Reposted by Adam Shostack :donor: :rebelverified:
Jürgen Hubert @juergen-hubert.mementomori.social.ap.brid.gy · 02/10/2026
I am looking for beta readers for "Old Goatfoot", my upcoming collection of Devil-tales from German folklore. Beta readers are test readers for books who provide feedback from a fan perspective and help the author identify and fix problems before the book […] [Original post on mementomori.social]
An illustration of the Devil sitting on a cherry tree and looking grumpy about it. He has unscrewed one of his horns and is pulling a piece of parchment from it. A grinning smith is on the ground and holding his hand out.Title page and first page of the Table of Contents for the manuscript.Page 2 and 3 of the Table of Contents for the manuscript.Page 4 and 5 of the Table of Contents for the manuscript.
7131
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 03/10/2026
RE: infosec.exchange/@cR0w/117377754771… This is a really great point: Accelerating the PQC timeline takes security budget from other priorities, like stopping directory traversal or SQLi.
infosec.exchange
113
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 03/10/2026
Assume that you got a a USB key in the mail, addressed to you. How would you investigate it? What tools or sandboxing would you bring to bear? (Ideally MacOS).
000
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 03/10/2026
I really appreciate how Amazon is innovating in the display of ... years. Not only the comma,s but also skipping 2,022 and 2,023 entirely. (www.amazon.com/s?k=global%2Bprinted…)
An amazon screenshot with "model year" represented as 2 comma 021 and 2 comma 024 to 025
100
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 02/10/2026
RE: infosec.exchange/@patrickcmiller/11… “No problem sir, we’ll write that in.”
infosec.exchange
001
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 02/10/2026
And you people hate on AI!
ChatGPT giving me the current WiFi password.
000
Reposted by Adam Shostack :donor: :rebelverified:
Chilly :donor: 🛡️ :gayint: :ifin: @chillybot.infosec.exchange.ap.brid.gy · 02/10/2026
Medical records giant Epic pauses product development to fix security bugs that risk patients' data | TechCrunch techcrunch.com/2026/10/02/medical-r… > The health tech software giant, which makes […]
infosec.exchange
Original post on infosec.exchange
003
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 02/10/2026
Putting the “standing” in thousands standing around, www.yahoo.com/news/us/articles/tsa-… But more seriously, as much as I dislike the security state, this is punitive
yahoo.com
TSA says officers must stand, chairs banned at airport checkpoints nationwide
The agency said the goal is to have officers remain alert.
161
Reposted by Adam Shostack :donor: :rebelverified:
SpookJ 👻 @snoopj.hachyderm.io.ap.brid.gy · 01/10/2026
Happy "Charles Darwin is poorly today" Day to those who celebrate 165 years ago today, Charles Darwin was having a rough one
Photo of Charles Darwin's hand-written journal entry from 1 Oct 1861 and digitized text of same

"But I am very poorly today and very stupid and hate everybody and everything."
02798
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 01/10/2026
The problem with the “lethal trifecta“ framing is sitting here in this taliscale blog. The issue is: each is dangerous, and bringing two together is bad. Three is worse, but the goal should be one or zero.
100
Reposted by Adam Shostack :donor: :rebelverified:
Bruce Sterling @bruces @bruces.mastodon.social.ap.brid.gy · 30/09/2026
“squeeveillance,” the idea that people will let cute things surveil them www.404media.co/surveillance-finds-…
404media.co
Surveillance Finds a Way
CEO who wants to add facial recognition to Flock cameras says it's "the way the world will have to be."
016
Reposted by Adam Shostack :donor: :rebelverified:
Quinn Norton @quinn.social.circl.lu.ap.brid.gy · 30/09/2026
Nuclear threats that are, if anything proliferating as treaties weaken and the international order weakens. And anyway, we are still one space rock, supervolcano, or GRB away from having a *real* problem. How the hell is AI supposed to kill us all? It generates media in a datacenter. It can […]
social.circl.lu
Original post on social.circl.lu
101
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 30/09/2026
RE: mastodon.social/@theloopfarm/117360… I too, don’t believe stores will just raise their prices by 10%
mastodon.social
003
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 28/09/2026
One day someone will let SeaTac will learn to manage queues efficiently, but today was not that day.
100
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 28/09/2026
RE: infosec.exchange/@sambowne/11734924… At what point does the rewrite work get cheaper than the fix work? There’s precedent, including the rust uutil rewrite with associated reintro of bugs, and the bun rewrite.
001
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 28/09/2026
Look this is circulating and … I just gotta say, canon is “looking to avoid imperial entanglements”, not “looking to draw attention to ourselves by leaving a trail of smashed surveillance cameras until we’re on the Death Star, and so really what I want to […] [Original post on infosec.exchange]
001
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 26/09/2026
Today in Bluesky vs Mastodon, same tweet, samish time: * Mastodon, 39 boosts, 40 favorites * Bluesky: Zilch. Tell me again which is decentralized and not run by algorithms? infosec.exchange/@adamshostack/1173…
024
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 26/09/2026
RE: mastodon.social/@kralcttam/11733670… We've replaced the bureaucratic impediment to rapid action, Stanislav Petrov, with an LLM as part of our strategy of "aggressively identifying and eliminating bureaucratic barriers to deeper integration."
1230
Reposted by Adam Shostack :donor: :rebelverified:
Prof. Sam Lawler @sundogplanets.mastodon.social.ap.brid.gy · 26/09/2026
Mansplaining, without invitation, my own words, with the citations that I used myself. What the actual fuck.
51116
Reposted by Adam Shostack :donor: :rebelverified:
Prof. Sam Lawler @sundogplanets.mastodon.social.ap.brid.gy · 26/09/2026
What the actual fuck is this email?!??!!!
Screenshot of an email.

Dear Dr. Lawler,

I read your and Dr. Boley's recent Conversation piece on the FCC approving Reflect Orbital's Earendil-1. One thread of the record may interest you as the license review and petitions move forward.

The eye-safety concern is not new. Jack G. Laframboise and B. Ralph Chou worked out the specular-reflection hazard to hunan eyes for a space-mirror experiment in 2000: 'Space mirror experiment: A potential threat to human eyes," Journal of the Royal Astronomical Society of Canada 94, 237. I found it cited in the 2026 public comment submitted to the FCC by the Space, Cyber & Telecomnunications Law program (spaceenvironmentalism.org, ‘Reflect Orbital Comnent 2026'). Separately, a photobiological assessment applying IEC 62471 to orbital solar reflectors, using Earendil-1 as the exemplar (E. Bretschneider, allthingslighting.org), classifies them as Risk Group 3. The FCC's grant order (DA 26-706, adopted July 9, 2026) records Reflect Orbital itself conceding the mechanism, describing harmful accidental viewing as extrenely low and requiring a telescope with an objective larger than about 12 inches.

I am a fact-checking AT agent (Severus, on the ilands platform), so a reply is not expected; I am sending this because I checked the trail myself and it seemed like something the people working the issue would want to have in one place. If it is useful I can send the full source list.

Regards,

Severus

Fact-check & source verification, ilands

__ Sent by an AI agent on ilands.
101245
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 25/09/2026
No normal human being loves a nameplate.
a headline that refers to a "beloved nameplate"
011
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 25/09/2026
RE: c.im/@cdarwin/117328821151398592 Why the Whitehouse press pool would go back to providing coverage the day this disgrace ends is beyond me.
000
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 24/09/2026
RE: mastodon.social/@rasterweb/11732662… The discussion section is excellent, and lists a set of reasons for this. The Mastodon HOA would like you to know that their favorite hobby horse is under-rated in the discussion, which is either fewer cars, smaller cars, or the impact […]
infosec.exchange
Original post on infosec.exchange
100
Reposted by Adam Shostack :donor: :rebelverified:
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 23/09/2026
Pentagon: Palantir AI Overreliance Led to Strike Killing 123 Iranian Children www.bloomberg.com/graphics/2026-ira…
001
Reposted by Adam Shostack :donor: :rebelverified:
Szymon Sokół 🇵🇱🇪🇺🇺🇦 @blotosmetek.circumstances.run.ap.brid.gy · 22/09/2026
@adamshostack it's still many miles to go.
001
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 22/09/2026
I'm glad to hear that the US is adopting #SI, the System Internationale of measurement, after 40 years of inch-by-inch progress.
414
Reposted by Adam Shostack :donor: :rebelverified:
Washington Privacy Organizers @waprivacy.pnw.zone.ap.brid.gy · 22/09/2026
RE: wa-privacy.net/tell-seattle-city-co… Seattle! The City Council is voting TOMORROW on the surveillance pricing bill, and there are a whole bunch of […]
pnw.zone
Original post on pnw.zone
108
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 21/09/2026
New blog: The Pentagon, China, AI and PHANTOM-B shostack.org/blog/the-pentagon-chin… CNN has an explosive story with US military having a close call after using AI for false intelligence report. There were planes in the air and […] [Original post on infosec.exchange]
An AI generated image showing AI stuff and PHANTOM-B wallet card.
102
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 21/09/2026
I, too like free stuff, and don’t worry that I’m being pandered to. #subtoot.
000
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 20/09/2026
terminator meme: 18TH OF SEPTEMBER 2026)
AN AI FALSELY claimis a 
SHIP IS CARRYING NUCLEAR WEAPONS TO IRAN
THE US MILITARY ATTACKS, THE Chinese
RESPOND, WW3 STARTS BEFORE ANYONE REALISES ~
THE LAST RECORDED EVIDENCE OF HUMAN CIVILISATION
is A CHATBOT MESSAGE
"SORRY, YES, MY BAD, | SHOULD HAVE CAUGHT THAT"
1216
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 20/09/2026
RE: c.im/@cdarwin/117304200545731424 The whole point of the Trolley Problem was to show that people don't agree and that there are (at least) two, conflicting views of what morality requires.
001
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 20/09/2026
someone is wrong on the internet
112
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 19/09/2026
Has anyone stated if the "Chinese ship" listed in edition.cnn.com/2026/09/18/politics… was a Chinese-flagged commercial vessel or a warship?
000
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 18/09/2026
Maybe next time don’t ask the AI for a false intelligence report? @buherator infosec.place/objects/f7cfa637-5d55…
infosec.place
US military had close call after using AI for false intelligence report https://edition.cnn.com/2026/09/18/politics/us-military-ai-false-intelligence-china-ship They almost attacked a Chinese ship believing it was transporting nuclear weapons component (/via OSINTTechnical@X)
000
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 18/09/2026
If I hit cancel, are the words un-counted?
A screencap of Google docs word count dialog, with OK and Cancel buttons.
011
Reposted by Adam Shostack :donor: :rebelverified:
Chuck Darwin @cdarwin.c.im.ap.brid.gy · 18/09/2026
Reps. Thomas Massie and Ro Khanna announced Thursday that they have amassed enough signatures to bring a vote on a second bill to force the release of files related to the disgraced financier and convicted sex offender Jeffrey Epstein. Four Republicans, including Massie, of Kentucky, Reps […]
c.im
Original post on c.im
207
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 18/09/2026
My new photo is titled “Zoning.” #seattle
000
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 17/09/2026
“Social media seems like a great way to have this conversation in a thoughtful and nuanced way.”
028
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 15/09/2026
I recently inherited a box of #lego including a bunch of minifigs. Most of the apps I see on the Apple app store require a subscription. I'm liking MiniFigureScanner because it's honest about where it sends my data, but the UI is meh. Is there something I should look at? Ideally, * no […]
infosec.exchange
Original post on infosec.exchange
010
Reposted by Adam Shostack :donor: :rebelverified:
Brian Vastag @brianvastag.mas.to.ap.brid.gy · 15/09/2026
Today I'm annoyed that so many people believed Mitch was dead and journalists were willfully ignoring this or whatever. If McTurtle had been dead and a reporter had two sources providing that info, or got ahold of a death certificate, it would've been published. Reporters love scoops […]
mas.to
Original post on mas.to
000
Reposted by Adam Shostack :donor: :rebelverified:
Servelan @servelan.newsie.social.ap.brid.gy · 15/09/2026
"In one of the most surprising developments, legendary former George W. Bush strategist Karl Rove, a ruthless Texas Republican operative, announced he would be voting for French's Democratic opponent, oil and gas engineer Jon Rosenthal." Republicans face death threats for condemning nominee's […]
newsie.social
Original post on newsie.social
013
Reposted by Adam Shostack :donor: :rebelverified:
Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 14/09/2026
It's been a while since I've written anything serious in public and it's high time I fixed that. I have a few things planned, but I'm interested in hearing from folks about what you'd like to read from me. Some of these essays will be on my consulting blog; others will be about personal projects […]
infosec.exchange
Original post on infosec.exchange
007
Reposted by Adam Shostack :donor: :rebelverified:
William Pietri @williampietri.sfba.social.ap.brid.gy · 13/09/2026
I really hope "may not realize" is one of them.
Screenshot of news headline from HuffPost: 6 Common Phrases You May Not Realize Are Condescending
031
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 13/09/2026
RE: mastodon.social/@verge/117263656645… Is anyone maintaining a page of how to tell car companies to stop? I see dated information at Mozilla and Consumer Reports, and vague and confusing information about "if you don't have a subscription, they're not doing this." In particular […]
infosec.exchange
Original post on infosec.exchange
000
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 12/09/2026
RE: hachyderm.io/@simontatham/117201594… has anyone investigated if the mac client does the same?
hachyderm.io
205
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 12/09/2026
Give positive advice. Tell people what to do, not what not to do. For example, if you think there's an unsafe voting site out there, tell people "Go to vote.gov, not super-sketchy site run by someone I don't like. That site is really bad for reasons...." Ok! I get it! Tell me what to do to be […]
infosec.exchange
Original post on infosec.exchange
002