Sign in

Allan

@allanfriedman.bsky.social
3.6K followers 939 following 653 posts

SBOM Champion. Paranoid about supply chains of all kinds. Former full-service technocrat at CISA, NTIA. Lapsed{engineer, academic, author}. Now wandering the world doing acts of infosec-goodness, & occasionally getting paid for it. Poster of food pics.

PostsRepliesMedia
Allan @allanfriedman.bsky.social · 09/10/2026
I never actually learned how to take a picture. That is, I think there’s a little more nuance than “point phone at pretty scenery / delicious plate.” I’m not about to study photography formally, but I am about to go on vacation. Anyone have a few good videos or a helpful beginner site / book?
120
Reposted by Allan
SwiftOnSecurity @swiftonsecurity.com · 27/04/2023
Error: Your password must contain at least two characters who talk to each other about something other than a man.
311220
Reposted by Allan
Jerry Chen @jcsalterego.bsky.social · 06/10/2026
*nods knowingly* mercenary clowns
1449555
Reposted by Allan
Yvonne Lam @yvonnezlam.bsky.social · 05/10/2026
I continue to think "O(n) with service growth" is the most ignored and/or (perhaps deliberately) misunderstood part of toil: sre.google/sre-book/eli...
sre.google
Google SRE - What is Toil in SRE: Understanding Its Impact
Learn what toil is in SRE, how it affects operational work, and why minimizing it is crucial for efficiency and morale.
1204
Reposted by Allan
Angry People in Local Newspapers @apiln.bsky.social · 05/10/2026
🎵 Now they know how many holes it takes to fill the Annie Hall... 🎶
@ boston.com
Ringo Starr returns to Forest
Hills Stadium
The 86-year-old drummer played the Queens venue for the first time since his former band performed there in
1964. The concert featured a mix of classic rock hits alongside his current arous.
Generated with Al, which can make mistakes

The picture is of Woody Allen.
24673118
Reposted by Allan
Joey Politano🏳️‍🌈 @josephpolitano.bsky.social · 02/10/2026
Sort of insane fact about how broken US urban planning is—America now spends more building *just the lights for roads and highways* than on all subways & ground mass transit combined Spending on roadway *pavement* is 18x transit spending
a graph of roadway and mass transit lights
502937800
Reposted by Allan
Katie Moussouris (she/her/she-hulk/she-ra)🌻 @k8em0.bsky.social · 02/10/2026
In case it’s hard to tell what I’m actually saying here: Slowing down vulnerability disclosure is to cybersecurity as drinking sea water is to dehydration. Might feel better if you’re desperate but it will greatly accelerate your doom. This isn’t a fix for vuln process saturation
03314
Allan @allanfriedman.bsky.social · 30/09/2026
Also of interest to @jonrlindsay.bsky.social , I think.
000
Allan @allanfriedman.bsky.social · 30/09/2026
I really enjoyed this article: we have new toys, and those will guide tactics, rather than strategy. Leaving aside current challenges around “not having any strategy,” there is also a pretty large cyber-shaped hole in this line of thinking that scholars need to fill.
153
Allan @allanfriedman.bsky.social · 29/09/2026
I love this thread and replies.
081
Allan @allanfriedman.bsky.social · 28/09/2026
Thanks! Love Zach Bryan, looking forward to exploring the others.
010
Allan @allanfriedman.bsky.social · 28/09/2026
I don’t mean just NYC: I want celebrations of real history, depth and complex joy of communities, the familiarity of public places, cafes, people making art, etc. I don’t mind the gravel road in the middle of nowhere, but it’s not for me. Is there art that celebrates the joy and hustle of cities?
110
Allan @allanfriedman.bsky.social · 28/09/2026
I love Americana and country music, including songs that celebrate the simple pleasures of country live: Avett Bros, Delta Rae, etc. But are there any songs that celebrate the joys of city living? The neighborhoods, the local coffee shops, street festivals, great restaurants, cocktails?
110
Allan @allanfriedman.bsky.social · 27/09/2026
Dolly. Avett Brothers. If some brings their god in a beautiful, humble way that helps me appreciate the common bonds of us all, I’m here for it.
010
Allan @allanfriedman.bsky.social · 27/09/2026
Love you boys.
130
Reposted by Allan
Kate Holterhoff, PhD @kateholterhoff.com · 24/09/2026
Chatted with @dpp.me, founder & CEO of Spice Labs, & @allanfriedman.bsky.social, Senior Technical Advisor at the Institute for Security & Technology, about PQC & Cryptographic Bill of Materials (CBOMs) for the latest @redmonk.com MonkCast. redmonk.com/videos/david... youtube.com/shorts/VPflv...
youtube.com
Cryptography Bill of Materials Explained #cbom #postquantumcryptography #softwaredevelopment
YouTube video by RedMonk
033
Reposted by Allan
Kieran Healy @kjhealy.co · 19/09/2026
I assume that when whoever is making it IPOs they will reveal the full lineup implied by the existence of Tilly Norwood.
Grid of logic gate options as Venn diagrams of Tilly Norwood, Tilly Orwood, Tilly Andwood, Tilly Xorwood, Tilly Nandwood, and Tilly Xnandwood
16626121
Allan @allanfriedman.bsky.social · 19/09/2026
Gonna be a good night.
010
Allan @allanfriedman.bsky.social · 18/09/2026
Proud to say that I was at the first ever Fluff Festival, in Somerville during grad school.
020
Reposted by Allan
Colin @colin-fraser.net · 16/09/2026
I mean that's just normal. You check things and make sure they're correct and have experts review them and so on. You edit, you extend, you simplify. It's research. Solving the N-S conjecture on Sunday and publishing the proof on Monday is weird.
413420
Allan @allanfriedman.bsky.social · 15/09/2026
I love Prof Klonick, and read what she writes regularly, but I think there’s a fairly obvious difference between being annoyed by automated content moderation and having humans review inputs that may never have been intended to be shared with anyone.
270
Reposted by Allan
Brendel @brendelbored.bsky.social · 11/09/2026
Writer for NBC10 Boston fuckin HATES Mercury
943603457
Reposted by Allan
Rowdy @r0wdy.sk33t.expert · 11/09/2026
I think the sanest way to approach this llm stuff if you use it as if it’s a new abstraction from machine code. It’s another layer to communicate instructions to a computer. The biggest problem is we weren’t ready to communicate with computers in the way we do with other people. We fucked that up
062
Allan @allanfriedman.bsky.social · 11/09/2026
Came to share that, just in case @faineg.bsky.social had not come across it before.
120
Allan @allanfriedman.bsky.social · 10/09/2026
This will be fun.
020
Reposted by Allan
Trevor A. Branch @trevorabranch.bsky.social · 09/09/2026
This is seismic news for fisheries scientists. Northern cod is *the* iconic symbol of total fisheries collapse due to overfishing (and other factors) *and* the iconic symbol of a complete failure to recover for decades afterwards. This is like announcing the complete recovery of bison on land.
8476662171
Allan @allanfriedman.bsky.social · 07/09/2026
Oh, you wanted *good* features? /takes a drag on cigarette Yeah, that’ll cost extra…
011
Allan @allanfriedman.bsky.social · 05/09/2026
Having some fun with late summer flavors: aquavit-infused croutons. (For a course with heirloom tomatoes and homemade smoked trout)
010
Reposted by Allan
P(aul) Frazee @pfrazee.com · 04/09/2026
[wipes hands] yeap. You got agents. See the message boards in your internal package manager? They must’ve nested there about ohhh 3 weeks back.
943654
Allan @allanfriedman.bsky.social · 04/09/2026
Today in obvious solutions: realizing I can put a metal rack on the burner to better roast peppers.
050
Allan @allanfriedman.bsky.social · 02/09/2026
Amazing writeup by @dangoodin.bsky.social of a BGP-hijack for a supply chain attack. He shows: 1) clear details of BGP attack w $ motive, 2) we have tools to prevent this, but you have to use them, and 3) how to write clearly about complicated security topics. arstechnica.com/security/202...
arstechnica.com
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all
What can we learn from a BGP hijacking that poisoned production software? Plenty.
052
Allan @allanfriedman.bsky.social · 01/09/2026
IYKYK
1256
Allan @allanfriedman.bsky.social · 29/08/2026
Finally enjoying @nealstephenson.bsky.social ‘s The Diamond Age, and I can’t express the joy of discovering new words that I have to look up. I flatter myself reasonably well-read and -schooled, and it’s a fun treat to be sent scurrying.
030
Allan @allanfriedman.bsky.social · 27/08/2026
Hugs and/or chest bumps.
020
Reposted by Allan
Michael Stahlke @michaelstahlke.bsky.social · 25/08/2026
Right now there is a lady in college who is discovering Dolly Parton and will carry that music through the rest of her life in the same way I discovered Johnny Cash in 2003. I take comfort in that.
2563
Reposted by Allan
Rachel Hands @rachelhands.com · 25/08/2026
if there’s a point to fame it’s to do what dolly parton did in the world
534201015
Reposted by Allan
Kevin Riggle @kevinr.free-dissociation.com · 25/08/2026
"We want a classified information system but we want it to work exactly the same as all of our unclassified information systems and introduce zero additional friction of any kind" is the cybersecurity "Claude, do a breakthrough" of the moment
4487
Reposted by Allan
B. A. Friedman @bafriedman.bsky.social · 21/08/2026
Are we finally relitigating the French and Indian War on here?
static.klipy.com
Animaechan Cracks Knuckles with Pout
ALT: Animaechan Cracks Knuckles with Pout
3565
Reposted by Allan
rand0h @akacki.net · 20/08/2026
True story.
1213
Allan @allanfriedman.bsky.social · 20/08/2026
(Not forcing one’s partner to listen to SBOM talk, making sure they have as many sequins as they want, and providing them with craft cocktails.)
010
Allan @allanfriedman.bsky.social · 20/08/2026
At least the company is good?
020
Allan @allanfriedman.bsky.social · 20/08/2026
Interesting inclusions on the list of banned items for the DC “grand prix“ event this weekend.
350
Allan @allanfriedman.bsky.social · 20/08/2026
“I'm only making fun of you because it’s something you care about deeply.” — my wife (In case anyone was wondering about the secret to a long and happy marriage)
160
Allan @allanfriedman.bsky.social · 19/08/2026
Very much this. Writing requires real precision of thought, more so even than giving a presentation or a talk.
021
Reposted by Allan
Michael Paulauski♨️ @mike10010100.com · 18/08/2026
Wait...do the math. LEDs took over around 2012–2015 and last 15,000+ hours (10–20 years). If you left home at 18 and bounce between dorms and 1-year apartment leases, the probability of ever living anywhere long enough to see a bulb burn out is practically zero. Jesus. Christ. Turn me to dust.
74812
Reposted by Allan
Kevin M. Kruse @kevinmkruse.bsky.social · 18/08/2026
There were a lot of articles recently about how bad it was for Cambridge to hire someone who made up stories about their experiences, and now Yale has hired this man?
phillymag.com
David Brooks: Boo-Boos in Paradise
The classic 2004 examination of David Brooks’s “Bobos in Paradise” by Philadelphia magazine’s Sasha Issenberg.
1232336543
Reposted by Allan
DilDog 🅅 @dildog.l0pht.com · 16/08/2026
DilDog's Third Razor: "Any sufficiently advanced stupidity is indistinguishable from malice"
0267
Reposted by Allan
rev. howard arson @theophite.bsky.social · 13/08/2026
there is absolutely no way that a modern physics department could tolerate a weird, autistic asexual with crank fascinations outside of his notional field of study. it's impossible that that person could exist today.
1036031
Allan @allanfriedman.bsky.social · 13/08/2026
Some pretty solid analysis from @erratarob.bsky.social
101
Reposted by Allan
Greg Otto @gregotto.bsky.social · 11/08/2026
NEW: Delta is investigating that viral Wi-Fi spoofing incident. Everyone i talked to stressed two things: The flight was never in any real danger and everyone investigating this is extremely annoyed cyberscoop.com/delta-flight...
cyberscoop.com
Delta investigates in-flight Wi-Fi spoofing on post-DEF CON flight from Las Vegas
Delta and federal authorities are investigating a rogue Wi-Fi spoofing incident aboard Flight 591 from Las Vegas to Atlanta following DEF CON.
32111