Sign in

Stephanie So

@complicatedisok.bsky.social
227 followers 372 following 125 posts

Still trying to make sense.

PostsRepliesMedia
Reposted by Stephanie So
GeeqOfficial @geeqofficial.bsky.social · 06/07/2026
Counterparty risk works both ways.
011
Stephanie So @complicatedisok.bsky.social · 30/06/2026
Is this as huge as it sounds?
010
Stephanie So @complicatedisok.bsky.social · 12/06/2026
I believe independent verification has become a human right. Freedom of speech is non-negotiable. The ability to distinguish between assertions and evidence is another. A free society depends on both.
Diagram titled "A Self-Reinforcing Verified Economy".  Four quadrants - the horizontal axis runs from Information to Evidence.  The vertical axis runs from the Real World to Verification Infrastructure.  The diagram shows how information becomes evidence, evidence supports decisions, and decisions generate new events.
000
Stephanie So @complicatedisok.bsky.social · 10/06/2026
I thought this was a headline from The Onion at first. I am not enjoying this timeline.
000
Stephanie So @complicatedisok.bsky.social · 10/06/2026
This sounds like the beginning of a memorable Commencement address. You've captured the moment perfectly. Now describe the exhaustion, please.
000
Stephanie So @complicatedisok.bsky.social · 24/05/2026
This is what I do. I pour my whole self into building independent verification for the internet. If we let others control what we see, they can control what we believe. The only way to rein that in is by being able to check sources independently, which we can do now, with your help.
010
Stephanie So @complicatedisok.bsky.social · 20/05/2026
I really need a way to contact your editorial board (to help). Couldn't get there through the website. Please give me access, I have the t-shirts.
000
Stephanie So @complicatedisok.bsky.social · 10/05/2026
Thank you for clarifying!! I appreciate facts.
010
Stephanie So @complicatedisok.bsky.social · 10/05/2026
Would it be helpful to commit each one with more than a hash, meaning a hash signed by a verifiable human signature? I'd like to get versioning into a simple to understand, easily checked, verifiable environment so you don't have to trust what you're using is what you thought you're using.
000
Stephanie So @complicatedisok.bsky.social · 10/05/2026
I don't recall seeing that! The ones with the crossovers to real life were pretty funny. Handled completely differently than, say, real life personalities appearing on Saturday Night Live.
111
Stephanie So @complicatedisok.bsky.social · 10/05/2026
This was one of my favorite episodes. This, and Vitameatavegemin. Thanks for the good memories.
1161
Reposted by Stephanie So
Randall Munroe @xkcd.com · 28/11/2024
Neutrino Modem xkcd.com/3017
344286370
Stephanie So @complicatedisok.bsky.social · 20/03/2026
🚀Personal Best. I can say what we do in 10 words. Databases: store and update records DLTs: record transactions in order on a ledger We: structure events in order around objects across independent sources 💚
010
Stephanie So @complicatedisok.bsky.social · 20/03/2026
I'm so sorry I missed this, @at1c.bsky.social. This is a strong accountability framework. 💯 for producing verifiable receipts for agent activity. My concern generally is banking too much on identity as a control plane. Authority and delegated authority, especially in multi-agent systems is key.
120
Stephanie So @complicatedisok.bsky.social · 07/02/2026
Most online risks are structural. Who bears the consequences? We do. Digital transactions need receipts, we need proof of what's going on. Why haven't we had them before? Because the internet was built without worrying about accountability. It's gone on long enough. Put people first.
000
Stephanie So @complicatedisok.bsky.social · 19/12/2025
There is a core tension between privacy and verifiability. You can hide information. Or you can prove legitimacy. It’s hard to do both at the same time.
000
Stephanie So @complicatedisok.bsky.social · 07/12/2025
better or worse, which aligns incentives for the owner and the user. Agents may be assigned revocable digital identity and scoped access rights. "Burning" a right means it won't be found when the ledger updates. There's more, all combining zero-trust with a proof-enforced control plane.
010
Stephanie So @complicatedisok.bsky.social · 07/12/2025
I'd like to get in touch with the author. Our architecture @geeqofficial.bsky.social goes a few steps further to mitigate some of the remaining security concerns, e.g. Agents themselves may be tokenized as assets. The agent owner is identifiable by their public key. That situates liability, for
100
Stephanie So @complicatedisok.bsky.social · 07/12/2025
Enjoyed this. Hope these comments are helpful. I'm increasingly concerned about clicking through to an unfamiliar site, so I'd be more cautious about recommending that. Even better would be to authenticate sites, content, and sources on a verifiable shared ledger that has no executable code.
000
Stephanie So @complicatedisok.bsky.social · 05/12/2025
🖊️I’ve been working with 3 stunning individuals to rethink, realign, and refocus our efforts in healthcare. Imagine an app where - it's impossible to bypass individual consent - communications and actions are provable - proofs become reimbursable - your data is shared securely. You can make it.
010
Stephanie So @complicatedisok.bsky.social · 05/12/2025
It means everything to have a physician leading the way. #HealthcareInnovation #ContinuousCare #RuralHealth www.linkedin.com/pulse/contin...
linkedin.com
Continuity of Care Requires a Continuity Rail
For most of my career, I believed continuity of care was a workflow problem. A scheduling challenge.
000
Stephanie So @complicatedisok.bsky.social · 23/11/2025
Hi, a few questions: 1. How are compromised keys immediately detected and replays prevented? 2. Is there documentation about the kind of immutable log that's used? (I understand blockchain and DLTs, I'm very curious.) 3. Does the guarantee basically come down to Microsoft's trusted signature?
000
Stephanie So @complicatedisok.bsky.social · 23/11/2025
More details, please?
000
Stephanie So @complicatedisok.bsky.social · 13/11/2025
but clever, because once the malware is accepted, the blockchain is doing what it's supposed to do - make it available. So, here's the warning for smart contract blockchain users. This was a client-side problem. Don't let your applications execute smart contract data without checking. Be careful.
000
Stephanie So @complicatedisok.bsky.social · 13/11/2025
Malware + blockchain -> this concerned me, so I looked into it. To be clear, the hackers used smart-contract based blockchains (not Geeq). They hid fragments of malware code in the smart contracts, then used those blockchains as repositories and delivery vehicles across their networks. Not good -
120
Reposted by Stephanie So
tabmcleod.bsky.social @tabmcleod.bsky.social · 11/11/2025
I hadn't heard of this #CyberSecurity threat called #clickfix A good read. arstechnica.com/security/202...
arstechnica.com
ClickFix may be the biggest security threat your family has never heard of
Relatively new technique can bypass many endpoint protections.
021
Reposted by Stephanie So
Cyber Insurance News @cyberinsurancenews.bsky.social · 22/10/2025
Cyber Insurance Policy Limits Exposed: Only Resilience Restores Investor Trust Omega Systems’ 2025 report, The Survival Imperative: Cyber Resilience in Financial Services, reveals an industry under siege. Read all about it: cyberinsurancenews.org/cyber-insura... #cyberinsurance #cybersecurity
cyberinsurancenews.org
Cyber Insurance Policy Limits Exposed: Only Resilience Restores Investor Trust
Estimated reading time: 4 minutes Financial Leaders Warn: Cyber Incidents Now Threaten Investor Confidence In financial services, trust equals capital.
021
Stephanie So @complicatedisok.bsky.social · 22/10/2025
Have you heard the news about local public key infrastructure? We're working to make security less dependent on humans trying to outsmart AI. It would work (it's PKI without the trusted middles). We could use help to get adoption, all hands are welcome!
000
Stephanie So @complicatedisok.bsky.social · 01/10/2025
Please ask me to explain: 2-factor authentication fails to protect consumers. It asks you to give your credentials without knowing who is on the other side. That's what happens in help desk scams. We must have *mutual* authentication in order to be truly secure. You deserve it. We all do.
030
Stephanie So @complicatedisok.bsky.social · 19/09/2025
I remember that use case! Smart choice, discerning customers. So nice to meet you!
130
Stephanie So @complicatedisok.bsky.social · 19/09/2025
Hi! Yes! NFC technology! Much better than QR codes. Was that your invention? That's excellent. Supply chain is a natural for blockchains, I agree. We're applying that concept to the information supply chain. We have mints without smart contracts (more secure) and global state awareness. 🥂
010
Stephanie So @complicatedisok.bsky.social · 19/09/2025
I'm glad to boost your public service announcements. There's always something, please keep them coming! Happy Friday.
220
Reposted by Stephanie So
CyberLife Coach @cyberlifecoach.bsky.social · 19/09/2025
✈️ That crumpled luggage tag on your suitcase? It could be a scammer’s golden ticket. Learn how baggage tag fraud works and the simple steps to protect yourself when you fly. 👉 Read more: open.substack.com/pub/cyberlif... #TravelSafety #Cybersecurity #AirTravel #FraudPrevention #Privacy
open.substack.com
✈️ Your Luggage Tag Could Be a Security Risk: Here's What Travelers Need to Know
That crumpled paper tag on your suitcase? It might be a golden ticket for scammers.
131
Stephanie So @complicatedisok.bsky.social · 19/09/2025
I retweeted this article, thank you! I have a fix for this. Now I need to figure out how to sell it to an airline!
220
Stephanie So @complicatedisok.bsky.social · 08/09/2025
Very happy to answer!!
000
Stephanie So @complicatedisok.bsky.social · 01/09/2025
Awful. Yet each phase sounds like the same problem. A spoof. That's why I'd like our local public key infrastructure to be adopted. Check the blockchain ledger for the public key of whoever is requesting contact with you. If it's not there, don't reply. Lookup and challenge can be automated
000
Stephanie So @complicatedisok.bsky.social · 01/09/2025
Cool, yet another attack surface. I'm working on a secure communications layer where the sender of the message must use a public key. The recipient is able to identify the sender's signature and need only pay attention to those secret messages. Do that first, then enjoy steganography.
000
Stephanie So @complicatedisok.bsky.social · 28/07/2025
Right! I'm with Hank. #cybersecurity
000
Stephanie So @complicatedisok.bsky.social · 26/07/2025
Glad to meet you, @1obit.bsky.social. Thank you for saying you're on the same wavelength. I hope others are too - it's hard to know when people stay quiet ... But I believe.
000
Reposted by Stephanie So
Patrick Lambert @dendory.net · 12/07/2025
A pretty extreme example of a supply chain attack. I think at some point, these types of attacks will cause massive damage. #cybersecurity www.bleepingcomputer.com/news/securit...
bleepingcomputer.com
The zero-day that could've compromised every Cursor and Windsurf user
Learn how one overlooked flaw in OpenVSX discovered by Koi Secureity could've let attackers hijack millions of dev machines via an extension supply chain attack. The zero-day threat's been patched—but...
111
Stephanie So @complicatedisok.bsky.social · 12/07/2025
Should be required reading. Thanks for sharing it.
000
Stephanie So @complicatedisok.bsky.social · 08/07/2025
This is what we do. We're on a mission. geeq.io
000
Stephanie So @complicatedisok.bsky.social · 08/07/2025
Thank you very much, @at1c.bsky.social. That's very helpful and encouraging. I will take your advice. 🙏
000
Stephanie So @complicatedisok.bsky.social · 28/06/2025
I adore her. youtu.be/oHwb1MavsxE?...
youtu.be
Sara Bareilles: 2025 UCLA Commencement Speech
YouTube video by UCLA
010
Stephanie So @complicatedisok.bsky.social · 14/06/2025
Thanks for the warning.
000
Stephanie So @complicatedisok.bsky.social · 07/06/2025
Who is able to copy and preserve these kinds of records elsewhere? I assume there's the actual data that was released, which is public fair use, but what about the other files and records derived from those? Were releases signed that would allow reproduction elsewhere? Or is that a pipedream?
020
Stephanie So @complicatedisok.bsky.social · 07/06/2025
Sometimes it goes the other way
000
Stephanie So @complicatedisok.bsky.social · 05/06/2025
It's a coordination issue. I think we could re coordinate if there's a Blockchain equivalent where you could leave a forwarding address. I could provide the back end at least as a pilot. Would anyone write the app to get to an API and start the publicity?
000
Stephanie So @complicatedisok.bsky.social · 31/05/2025
intend to get into a debate about necessary or sufficient. Of course that's all true. Nothing is guaranteed and I'd also like some luck: "It's better to be lucky and stupid than unlucky and smart." Overall, though, we've collected nearly all the pieces. Nearly.
120
Stephanie So @complicatedisok.bsky.social · 31/05/2025
needed to find that last, simple, relatable pain that we can solve that people might understand. I started out with an appreciation of what you said: that despite doing everything wrong, startups have a chance when they have something so excellent, they can focus on getting that right. I didn't
100