Sign in

Andy Sayler

@andysayler.bsky.social
393 followers 116 following 34 posts

Information Security, Public Policy, and Food Stuff. Risk @Patreon. Ex-Infosec @Workday, ex-InfoSec @twitter. (he/him)

PostsRepliesMedia
Reposted by Andy Sayler
Lea Kissner @leak.bsky.social · 10/07/2026
Did I mention that we've been writing a book? Fundamentally, security, privacy, trust&safety, AI safety -- all the fields aimed at dealing with dealing with how technical systems hurt people and how to avoid it -- share a foundation. We cover how to think and achieve *truly* effective practice. 1/
Cover of the book "Building Safer Technology: A Field Guide to Failing Well" by Yonatan Zunger, Lea Kissner, Neil Coles, Juan Pablo Hernandez, Harmony Mabrey, and Phillip Misner. Cover includes an illustration of a fuse repaired with kintsugi
48524 0
Andy Sayler @andysayler.bsky.social · 30/06/2026
Now they just need to do a partnership with @xkcd.com to replace their normal logo with that graph. I'd buy a bottle.
020 0
Andy Sayler @andysayler.bsky.social · 30/06/2026
I was coming here to post that. They show up with a tent at the various Pearl St markets and it's always a pretty niche joke I don't think most people get.
120 0
Reposted by Andy Sayler
BoulderSec @bouldersec.bsky.social · 04/06/2026
Woah, June already!? That can only mean two things: it means that love is love, and also BoulderSec is tomorrow, June 4! At the Rayback collective! At 7:00pm! Be here || be queer!
131 0
Reposted by Andy Sayler
BoulderSec @bouldersec.bsky.social · 07/05/2026
Wow, what a winter wonderland out there! It's almost like some kind of Day After Tomorrow situation. Only, you know which day is before the day after tomorrow? That's right, it's another BoulderSec! Come on by tomorrow, May 7, 7:00pm at the Rayback collective where we can warm ourselves by the fire!
131 0
Reposted by Andy Sayler
BoulderSec @bouldersec.bsky.social · 01/04/2026
Gadzooks! The Meepy signal has been lit, Gondor calls for aid! Better scuttle your way down to the Rayback this Thursday, April 2, at 7:00pm to consume food and beverages with your favorite friends!
121 0
Andy Sayler @andysayler.bsky.social · 30/03/2026
I need a "home battery on wheels" is one of the better car ownership justifications. 🙂
010 0
Andy Sayler @andysayler.bsky.social · 30/03/2026
All of this is somewhat silly, however, given the number of EV batteries connected to the grid. We just need to standardize vehicle-to-grid hookups so we can all stop buying these relatively tiny 10 kWh home batteries when the car has 50+ kWh ready to use right there.
120 0
Andy Sayler @andysayler.bsky.social · 30/03/2026
Xcel does have a program where they get to charge/discharge your battery to support the grid and pay you for the trouble. But you're not generally allowed to do pure rate arbitrage yourself.
110 0
Andy Sayler @andysayler.bsky.social · 30/03/2026
Worth confirming, but at least the interconnect agreement I had to sign when installing batteries a few years ago included a prohibition on charging from the grid in normal circumstances (I think emergency charging is allowed).
110 0
Andy Sayler @andysayler.bsky.social · 30/03/2026
I'd love to see your calculations for load shifting. Last time I did the math, we're a ways off from that being economical for batteries with 10Y lifespans. (Also, note that Xcel doesn't allow charging of batteries from grid power today, so you can only even do load shifting if you have solar.)
130 0
Reposted by Andy Sayler
BoulderSec @bouldersec.bsky.social · 04/03/2026
Ah, my friend! Come sit down for another round of BoulderSec: the Gathering (of security engineers (or anyone really*) on the first Thursday of every month). Join us Thursday March 5, 7:00pm at the Rayback for friends and fun! *Mono blue players allowed but discouraged
111 0
Reposted by Andy Sayler
BoulderSec @bouldersec.bsky.social · 03/09/2025
I don't know why I made this. Is it funny? Does it have purpose? If all humor is dadaist what separates wit from noise? Does this convey the artist's intended meaning that BoulderSec is tomorrow, Sept 4, 7:00pm at the Rayback and will have wonderful friends and food? I don't even know any more.
132 0
Andy Sayler @andysayler.bsky.social · 03/09/2025
👋 Are you looking to chat with business owners? Locals? Someone else? I'm happy to chime in as a frequent user of the pedestrian mall. @ericmbudd.com might have thoughts as well.
030 0
Andy Sayler @andysayler.bsky.social · 27/08/2025
You can get a grand jury to indict a ham sandwich, but you can't get a grand jury to indict for throwing one: www.nytimes.com/2025/08/27/u...
nytimes.com
Prosecutors Fail to Secure Indictment Against Man Who Threw Sandwich at Federal Agent
17013 0
Andy Sayler @andysayler.bsky.social · 10/04/2025
My latest in the @boulderweekly.bsky.social: boulderweekly.com/news/analysi...
boulderweekly.com
Digital Harm Reduction: A guide to (more) ethical technology use - Boulder Weekly
Technology is dual-use, and there’s no ethical consumption under capitalism. But we can take steps to reduce tech's harms.
010 0
Reposted by Andy Sayler
BoulderSec @bouldersec.bsky.social · 03/03/2025
Ah March, the month when we remember the downfall of an attempted dictator. Anyway, where was I? Oh right, BoulderSec is this Thursday March 6, 7:00pm at the Rayback! Come on by to spend some quality time with Meepy. And also your friends and good food I guess.
121 0
Andy Sayler @andysayler.bsky.social · 18/02/2025
Great to see the GovTrack.com folks getting into the executive space. You can help support expanding government transparency at www.kickstarter.com/projects/gov...!
kickstarter.com
Alert: New Executive Order
We've been tracking the U.S. Congress for twenty years. Now it's time to track the White House.
000 0
Reposted by Andy Sayler
Joseph Lorenzo Hall, PhD @josephhall.org · 15/02/2025
We've got killer talks in the hopper for Enigma 2025 track at USENIX Security this year in Seattle! Deadline is 5 March and we'd love to have YOU up there on the dais sharing your cutting edge security knowledge
usenix.org
USENIX Security '25 Enigma Track Call for Participation
Submissions due: Wednesday, March 5, 2025 Notification to submitters: Wednesday, May 7, 2025
01611 0
Reposted by Andy Sayler
Pearl For You @handle.invalid · 04/02/2025
It's time to bring back West Pearl! What's better than going out to play on Pearl Street? Going to do it with your best friend! There are no paws on the bricks, but paws are always welcome on West Pearl. Sign here now and be a part of the pet-revolution: www.pearlforyou.org/sign
022 0
Reposted by Andy Sayler
BoulderSec @bouldersec.bsky.social · 03/02/2025
Meep meep meep! Meep meep. Meep meep meep meep meep meep meep meep meep meep February 6, 7:00pm, meep Rayback Collective, meep meep.
132 0
Reposted by Andy Sayler
Joseph Lorenzo Hall, PhD @josephhall.org · 28/01/2025
Submissions are OPEN for the Enigma track at USENIX Security 2025; submit your killer talk by 7 March 2025! sec25enigma.usenix.hotcrp.com (CFP: www.usenix.org/conference/usenixsec… )
usenix.org
USENIX Security '25 Enigma Track Call for Participation
Submissions due: Wednesday, March 5, 2025 Notification to submitters: Wednesday, May 7, 2025
077 0
Reposted by Andy Sayler
Joseph Lorenzo Hall, PhD @josephhall.org · 08/01/2025
Want to connect with the brightest minds shaping the future of network and computer security? The NDSS Symposium (Feb 24-28) in sunny San Diego is THE place to be! We're talking 5 tracks, 220+ cutting-edge OPEN ACCESS papers, and world-class workshops. www.ndss-symposium.org 1/
11014 0
Reposted by Andy Sayler
BoulderSec @bouldersec.bsky.social · 27/12/2024
New year, new you, but like always it's the same old BoulderSec! That's right, the eternal security meetup from before time immemorial which will outlast us all is back on Jan 2, 7:00 at the Rayback, just like last month and every month before that.
111 0
Andy Sayler @andysayler.bsky.social · 27/12/2024
In case any #Boulder folks are looking to round out their end-of-year donations, the Boulder Weekly is running a fundraising drive to explore moving to an employee-owned co-op model. Kick in a few bucks to help to support sustainable local independent journalism! www.coloradogives.org/story/99mptf
coloradogives.org
Support Make Boulder Weekly a co-op on ColoradoGives.org
Help Boulder Weekly become employee- and community-owned!
010 0
Reposted by Andy Sayler
BoulderSec @bouldersec.bsky.social · 04/12/2024
Woah December already? Fuck, we gotta make the BoulderSec tweet. Uhhh... get ready everyone! The Boulder security Meetup will be this Thursday, Dec 5 at 7pm at the Rayback! ...and then Photoshop Meepy onto Santa or something. Or Krampus. Is that too stupid? Whatever, ship it.
131 0
Reposted by Andy Sayler
Runa Sandvik @runasand.bsky.social · 27/11/2024
I wrote a very timely introduction to digital security for journalists for @gijn.org, this guidance may also apply to activists, lawyers, and anyone else doing at-risk work these days. gijn.org/resource/int...
gijn.org
Introduction to Investigative Journalism: Digital Security
Digital security may seem a little daunting at first, but increased security will help investigative journalists build trust with — and protect — current and future sources.
815673 0
Reposted by Andy Sayler
Bob Lord @boblord.bsky.social · 20/11/2024
🔐🔐🔐 Got FIDO? 🔐🔐🔐 The USDA does! Check out their FIDO success story: www.cisa.gov/resources-to... Our blog: www.cisa.gov/news-events/...
cisa.gov
Phishing-Resistant Multi-Factor Authentication (MFA) Success Story: USDA’s Fast IDentity Online (FIDO) Implementation | CISA
This report details how USDA successfully implemented phishing-resistant authentication in situations where in the past only authentication methods vulnerable to phishing were feasible.
265 0
Reposted by Andy Sayler
April King @april.social · 21/11/2024
Handling Cookies is a Minefield: Inconsistencies in the HTTP cookie specification and its implementations have caused a situation where countless websites (including Facebook, Netflix, Okta, WhatsApp, Apple, etc.) are one small mistake away from locking their users out. grayduck.mn/2024/11/21/h...
facebook errornetflix errorokta errorwhatsapp error
1216953 0
Andy Sayler @andysayler.bsky.social · 13/05/2024
In case folks want to read more about what a 28-hour power outage is like with a battery backup system: aisforairship.com/posts/2024_s...
aisforairship.com
The 2024 Boulder Public Safety Power Shutoff
On the afternoon of Saturday, April 6th, 2024, at 12:51 PM, I (and a good chunk of Boulder’s other resident) received the following email from Xcel, our local power company: Public Safety Power Outage...
030 0
Andy Sayler @andysayler.bsky.social · 07/04/2024
Making good use of the battery-powered turntable for our preventative power outage. #boulder
A portable turntable and Bluetooth speaker in front of a copy of Ingred Michaelson's Lights Out album.
040 0
Andy Sayler @andysayler.bsky.social · 17/01/2024
And a final update now that temperatures have recovered. Heat pump held the house at 60-65 for three days of mostly continuous sub-0 F temps. Recovered to easily holding the house at 70 as soon as the outdoor temps went back above 20 or so. Given how rare these temps are, I consider this a success!
Outdoor temperature graph for 1/12 through 1/16 showing temps from from mid-30s to three days of sub-0 and then rebounding to mid-30s.Indoor temperature graph showing temps dropping from ~70F to three days hovering between 60 and 65 F before rebounding to 70 F.
010 0
Andy Sayler @andysayler.bsky.social · 14/01/2024
This install is 3 years old at this point. I've heard there are some newer air handler heads that have higher output now, so that might be an option for you. But the mini splits would definitely do the job as well.
110 0
Andy Sayler @andysayler.bsky.social · 14/01/2024
For me, ducts are the walls and floors, not attic. Air handler is in the basement. We added the mini splits to the upstairs bedrooms mainly for the summer AC use case where the central air handler similarly struggles to cool those rooms, but there's one week each winter where we use them to heat.
110 0
Andy Sayler @andysayler.bsky.social · 14/01/2024
Yeah, this is an air source just pump. Ground source wouldn't have any issues in this weather, but costs an order of magnitude more here.
110 0
Andy Sayler @andysayler.bsky.social · 14/01/2024
Yeah, having reasonably good insulation and air sealing definitely helps here. So I'd focus on improving those before adding a heat pump. This is 1999 construction with 6" exterior walls and fairly decent insulation (but certainly not as air tight as today's construction).
210 0
Andy Sayler @andysayler.bsky.social · 14/01/2024
The air handler and original ductwork is the limiting factor in this case. That ductwork was sized for a furnace that puts out much hotter air than a heat pump so needs less flow. I think they have higher flow air handlers available now that would help. But for a few sub-0 days each year, it's fine.
110 0
Andy Sayler @andysayler.bsky.social · 14/01/2024
Sure thing. This is Mitsubishi Hyper Heat MXZ-4C36 outdoor unit (36K BTU) driving three indoor head units -- two SLZ-KF09 mini splits in the upstairs bedrooms (9K BTU) and one SVZ-KP18 air handler on the original whole house ductwork (18K BTU). House is 1999 build and 1600 Sq Ft with three floors.
140 0
Andy Sayler @andysayler.bsky.social · 14/01/2024
Most people install resistive backups on their central air handler to deal with this situation. But I like to live dangerously so I didn't do that. 😂
030 0
Andy Sayler @andysayler.bsky.social · 14/01/2024
This is about as cold as it gets here. And it happens a few days each winter. It handles normal winter temps in the 20s no problem. And the limit really is the flow rate of the legacy ductwork; the outdoor unit itself does just fine (albeit with a lot of electrical usage in these conditions).
120 0
Andy Sayler @andysayler.bsky.social · 14/01/2024
The mini splits we have in the bedrooms have no problem heating their rooms up to 70 F despite this weather, so the limiting factor seems to be the central air handler and ductwork when it gets this cold, not the outdoor unit (which drives both the air handler and two mini splits).
140 0
Andy Sayler @andysayler.bsky.social · 14/01/2024
Update: heat pump is doing okay -- the central air handler is holding the house at 60-65, which is about what I'd expect given the ductwork was designed for a furnace, not a heat pump. This is pure heat pump heating too; no resistive or other backup installed. Normal weather vs current in graphs.
Outdoor temperature graph for 1/12 to 1/14 showing temps do from 34 F to -10 F on 1/13 and then hover in the negative single digits since.Indoor air temperature showing the house heading to 70 F on 1/12, but then hovering between 60 F and 65 F on 1/13.
4232 0
Andy Sayler @andysayler.bsky.social · 13/01/2024
Heat pump test weekend in Boulder. 🥶
The weather forecast for the next three days showing lows of -13 and highs of -3.
3120 0
Andy Sayler @andysayler.bsky.social · 30/11/2023
Death standing at a claw game with the words "There he is"
010 0
Andy Sayler @andysayler.bsky.social · 05/11/2023
Weekend raised bed construction: clipchamp.com/watch/2mD0lE...
clipchamp.com
Andy Builds a Raised Bed - Create and share your videos with Clipchamp
Watch videos made with Clipchamp, the best video maker for everyone.
010 0
Andy Sayler @andysayler.bsky.social · 30/10/2023
I didn't want to feed into their fear-driven narrative by elevating them with actual horrors. 😂
120 0
Andy Sayler @andysayler.bsky.social · 30/10/2023
2023 Pumpkins
Set of seven carved pumpkins, lit and glowing with the lights turned off.
120 0
Andy Sayler @andysayler.bsky.social · 28/09/2023
It's election season in Boulder, CO -- so that means time for OpEds in the local paper: www.dailycamera.com/2023/09/28/g...
dailycamera.com
Guest opinion: Andy Sayler: Safe Zones would redirect resources away from more effective solutions
When everything is a priority, nothing is. By prioritizing almost the entire city for encampment removal, the Safe Zones 4 Kids ballot measure effectively prioritizes nothing.
040 0
Andy Sayler @andysayler.bsky.social · 28/05/2023
They better offer a "Hail Satan!" license plate next: www.cpr.org/2023/05/27/colorado-in-…
cpr.org
The strange story of how Colorado is set to get ‘In God We Trust’ license plates
Did changing the sponsorship of a bill help keep the rest of the session moving more smoothly?
000 0
Andy Sayler @andysayler.bsky.social · 07/05/2023
Cargo bike FTW
An orange Tern GSD cargo bike loaded with three large bags of potting soil in the back and a basket of plants in the front.
090 0