iiinova — where your digital self keeps evolving

Cliff Barbier @cliffb-infosec.bsky.social · 11h

I wanted to make VSCodium prompt me for my YubiKey PIN when I do a git push. It “should” be easy, right? It works for you out of the box, after all. But that’s because you’re not as security-conscious as I am. 😉 #VSCode #YubiKey #SSH #Linux #LinuxDesktop cliffbarbier.com/articles/ssh...

cliffbarbier.com

SSH_ASKPASS: A Saga in 3 Parts

A journey through the world of git, ssh, VSCodium, GNOME, Ubuntu, and the realities of stale code & stale information on the Internet.

010 0

Cliff Barbier @cliffb-infosec.bsky.social · 11h

This is the year of the Linux desktop!

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 11h

Gentoo users are filthy casuals. Linux From Scratch FTW! www.linuxfromscratch.org

linuxfromscratch.org

Welcome to Linux From Scratch!

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 14/10/2026

Another day of using the #Bash command-line editor to make yourself faster… But are you faster? Stop manually changing filenames in sequential commands and start using `for`. Read more of this excerpt of my presentation Shells 225: Bash for Security Professionals. cliffbarbier.com/posts/2026/1...

cliffbarbier.com

For All the Files (Shells 225 excerpt)

Iterating over files in Bash with 'for'.

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 14/10/2026

The amount of money involved in these AI companies somewhat justifies it. I can't see it being an issue in most boardrooms, outside of the obvious like phones, audio recorders, AI transcription devices, all of them on-person. One of those "if this applies to you, you'll already know" situations.

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 14/10/2026

When I worked at the #FDIC, our field office's joke was "we've got to implement C.F.R. 1130" for our customary 11:30 lunchtime. The examiners had been to these banks so many times, they knew exactly the places to go. In the smaller towns, there were sometimes only 3 places to eat lunch out.

000 0

Reposted by Cliff Barbier

Bob Lord @boblord.bsky.social · 13/10/2026

Quality by Design: Security is a quality outcome — and should be built that way. In 1986, J.M. Juran presented the Quality Trilogy, a model for building better products:

Poker-sized card titled "Juran's Quality by Design" with text from the contents of the post.

143 0

Reposted by Cliff Barbier

SwiftOnSecurity @swiftonsecurity.com · 13/10/2026

Tragic: Discovers worst people in the world (people I disagree with on Bluesky) are real and not Russian bots

211922 0

Cliff Barbier @cliffb-infosec.bsky.social · 12/10/2026

I watched a talk at @lsu.bsky.social two weeks back about cyber-informed engineering. It's a new approach to OT, using engineering to mitigate cybersecurity incidents in ICS. As that's not my field, I learned how engineering approaches can inform IT security. cliffbarbier.com/posts/2026/1...

cliffbarbier.com

Cross-Pollination from Cyber-Informed Engineering | Cliff Barbier

Cyber-Informed Engineering is coming to secure OT. Can it secure IT as well?

000 0

Reposted by Cliff Barbier

Bob Lord @boblord.bsky.social · 11/10/2026

Secure by Design: Secure-by-design software has protections baked in, not bolted on. Modern cars have integrated airbags, crumple zones, and anti-lock brakes. Those features cannot be added after the product ships — they're built from the ground up.

Poker sized card titled "Secure by Design Software" containing text found in the post.

2113 0

Cliff Barbier @cliffb-infosec.bsky.social · 11/10/2026

That was a real fire line hidden in a bland TikTok/Reel about the arc of limousines. 😂❤️

050 0

Reposted by Cliff Barbier

SwiftOnSecurity @swiftonsecurity.com · 04/10/2026

I'm telling you if you're not married by like 20, it's over for you. Women are building their own boyfriends with Claude right now. You're not even gonna get an entry-level boyfriend job. It's tough out here even for principal boyfriends.

1212620 0

Cliff Barbier @cliffb-infosec.bsky.social · 03/10/2026

This right here. I've secured AI since before Google collected all of their AI into "Vertex AI" (and that name was changed recently to "Gemini Enterprise"). "AI" isn't a problem. LLMs is where we both are creating them inefficiently AND act like it's artificial general intelligence when it isn't.

020 0

Cliff Barbier @cliffb-infosec.bsky.social · 01/10/2026

Some sites won't let you view if you block ads. They'll sometimes act like there was a browser error. Or they'll send you to pages like that. Or they'll give you pop-ups. Or they'll do like @apnews.com and majorly degrade the UX. Some of these behaviors only happen with mobile DNS blocking.

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 01/10/2026

Sounds like me. I just bought a new suit, made-to-measure, of Loro Piana wool.

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 28/09/2026

Oh, I forgot that the host connection was the same. It's the drive side that used IDC or card-edge connections! (Damn, I've forgotten a lot for someone who has drives & disks and wants data off of them 😅)

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 28/09/2026

Does it do 5¼ or 8 inch floppy connections?

100 0

Cliff Barbier @cliffb-infosec.bsky.social · 28/09/2026

To unfortunately be fair this isn't an off button. He has discovered the watchdog system from traffic engineering Every traffic light has a watchdog system to stop the intersection from doing unsafe things I wrote about the concept, applied to LLMs, 1.5 weeks ago cliffbarbier.com/posts/2026/0...

cliffbarbier.com

LLMs Committing Cybercrimes, Again, and Traffic Lights | Cliff Barbier

Another LLM has committed a cybercrime. This doesn't have to keep happening.

000 0

Reposted by Cliff Barbier

Dr. Anna Kallschmidt @drkallschmidt.bsky.social · 25/09/2026

Bullies Grow Up and Get Jobs. Schoolyard bullies don't just disappear. They grow up, get jobs, and the stakes get way higher. Workplace bullying impacts livelihoods. This is from Chapter 8 in my book, The Unwritten Rules of Work: Social Class and Neurodivergent Identities, on the Unwritten Rules of

011 0

Cliff Barbier @cliffb-infosec.bsky.social · 23/09/2026

My dad's 286 made by… Hyundai. Yes. That Hyundai.

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 23/09/2026

That doesn't surprise me one bit. French people tried to rip Steve Mann's permanently attached AR system out of his skull mounts back in 2012. www.nbcnews.com/tech/tech-ne...

nbcnews.com

Cyborg Steve Mann details alleged McDonald’s assault

010 0

Cliff Barbier @cliffb-infosec.bsky.social · 23/09/2026

I bet that productivity across all sectors dips more than normal from Thanksgiving to New Years. Because #GTA6 releases November 19, and if it's at all playable and not trash, a large number will get distracted playing it. How can I trade on this in the stock market? 🤣

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 23/09/2026

This is the "threat" of the over-reliance on LLMs. Not that *it* will subjugate us. But that people will not relate to it properly, and those people will claim to be following orders.

000 0

Reposted by Cliff Barbier

SwiftOnSecurity @swiftonsecurity.com · 20/09/2026

One of the takeaways on AI in my professional role I'm tasked with is, "If AI is going to smash through failures at the fundamentals of InfoSec, we better be real freaking sure we're doing them." So I'm going in through like a newhire/implementer refreshing our eyes-on the current state.

24910 0

Cliff Barbier @cliffb-infosec.bsky.social · 20/09/2026

I believe the term for this is "anemoia". Nostalgia for something one never experienced. Weird that the article first mentions that term halfway in, when it's the core of the entire article.

010 0

Cliff Barbier @cliffb-infosec.bsky.social · 20/09/2026

"Nostalgia is inevitably a yearning for a past that never existed" —John Green

101 0

Cliff Barbier @cliffb-infosec.bsky.social · 20/09/2026

Baudrillard: "It is no longer a question of imitation, nor of reduplication, nor even of parody. It is rather a question of substituting signs of the real for the real itself... Never again will the real have to be produced: this is the vital function of the model in a system of death"

010 0

Reposted by Cliff Barbier

Timnit Gebru @timnitgebru.blacksky.app · 16/09/2026

Reading proofs from book & remembering what I wrote in 2015: "I am very concerned about the future of AI. Not because of the risk of rogue machines taking over. But because of the homogeneous, one-dimensional group of men who are currently involved in advancing the technology.”

6884256 0

Cliff Barbier @cliffb-infosec.bsky.social · 16/09/2026

Timing belt material is a trim feature? I thought it was a platform feature (unless the trim comes with upgraded platform features).

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 16/09/2026

There's a construction YouTuber who had a terrible accident and cut off most of each finger on his left hand. He now has a metal and plastic (or maybe carbon fiber) prosthetic. As best I can tell, it works just like this print, only shorter. And that's kind of cool!

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 16/09/2026

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 10/09/2026

The job search is just disheartening at times.

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 10/09/2026

Panem et circenses. Juvenal was insightful.

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 03/09/2026

Notice: I hate "ibid". That is all. 🤣

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 02/09/2026

She looks very 2000-2003 in a way I can't even define. 🤣

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 02/09/2026

That's the kind of thing that people in corporate America IT have had to experience. One time I even needed to count them up from the 1st century to now. All 21 centuries. No skipping. This PROGRAMMER couldn't understand the difference between an ordinal and cardinal number or how to count from 0!

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 01/09/2026

It's important to use a motor control, not a dimmer switch! 🤣

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 30/08/2026

The Google Pixel 11 is available in one of the most exciting colors I've seen on a phone in years—"hibiscus" (hot pink). And it's gorgeous. But it's only available on the low-end Pixel 11 plain, not my 11 Pro XL. It's not a cost thing bc even the Hibiscus cases aren't available for my phone. 😢

Sales image of a Google Pixel 11 in a hot pink, almost fuchsia color.

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 29/08/2026

I'm gearing up to try to do the creator thing. Today was going through the various proprietary platforms & fediverse platforms, and registering my username/account. So. Many. Platforms. And so few use real 2FA. Half use OATH-TOTP. No security keys. I forget, but maybe one allowed Passkeys.

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 29/08/2026

I loved this game as a kid… so when they had it at my local barcade, I played it every weekend for 3 months. 🤣 Seeing you talk about it has me wanting to play again!

000 0

Cliff Barbier @cliffb-infosec.bsky.social · 24/08/2026

Back in the (my) day, companies (software vendors or businesses that built their own software) either didn't care about security reports or denied them (sometimes while fixing them). We're seeing such bad behavior re-emerge. Microsoft comes to mind first, with famously ignored EntraID vulns.

001 0

Cliff Barbier @cliffb-infosec.bsky.social · 24/08/2026

They had to be stitch-perfect, too. But this was the only memory that could go to space for a long time.

010 0

Cliff Barbier @cliffb-infosec.bsky.social · 24/08/2026

Since cybersecurity is dysfunctional again, we're going back to one of the key resources that led to vendor/business cooperation in the first place: The threat of full, public disclosure on the equivalent of a billboard that everyone in the world can see!

static.klipy.com

Futurama: We're Back, Baby!

ALT: Futurama: We're Back, Baby!

120 0