Sign in

Dwight Spencer

@denzuko.mastodon.social.ap.brid.gy
4 followers 2 following 31 posts

Principal @ Da Planet Security (est. 2003) · RT4 Technology Chair · Internet Archive Systems design · infrastructure sovereignty · digital civil liberties […] 🌉 bridged from ⁂ mastodon.social/@denzuko, follow @ap.brid.gy to interact

PostsRepliesMedia
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 13/10/2026
All these #techbros running their startup in local llms and a sticky note on their macs saying dont close the lid got nothing on the og web server.
000
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 31/08/2026
​Released bknr.rate-limit — a thread-safe, zero-dependency rate limiting package for Common Lisp. ​Built for high-throughput SBCL/ECL backends, featuring: 🔹 In-memory token bucket & leaky bucket algorithms 🔹 Thread-safe state synchronization via atomic operations / locks 🔹 Clean macro interfaces […]
mastodon.social
Original post on mastodon.social
020
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 25/08/2026
#AI needs guardrails, #BDD is that guardrails. Just dropped sunny-side—a pure Common Lisp Gherkin parser and Behavior-Driven Development library! It cuts out external runtime dependencies and maps human-readable .feature files directly to Lisp macros, running test execution natively inside the […]
mastodon.social
Original post on mastodon.social
020
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 24/08/2026
Released three new #CommonLisp libraries designed for self-contained, low-overhead systems engineering: bknr.hashkv: Content-addressable key-value store and persisted job queue built on bknr.datastore. github.com/denzuko/bknr.hashkv bknr.ttl: Ephemeral data and TTL mixins for bknr […]
mastodon.social
Original post on mastodon.social
020
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 24/08/2026
CoC FM — Church of Computer Radio "Bob" would not shut up. Fine, I'll leak the playlist. CoC FM. Church of Computer Radio. Dadaist Discordian Slack, pirate signal, Jolt Cola fuelled. Fnord. A CoC morning. All CoC morning. Behold, Plato's man. 🕊️ Hail Eris. All Hail Discordia. Kallisti […]
mastodon.social
Original post on mastodon.social
000
Reposted by Dwight Spencer
Ember @isolte.bsky.social · 23/08/2026
Age verification will NOT make the internet safer! Pass it on! (Now with alt text because I care about about the importance of a safer internet AND those who rely on screen readers due to poor vision/blindness.) #SaferInternetDay #Privacy #AgeVerification #Encryption #OpenSource #InternetSafety
A 2 column chart with bullet points. The left, green colored side says: A safer internet IS MADE BY ✅ Encryption ✅ Privacy ✅ Open source. The right, red colored side says: A safer internet is NOT MADE BY ❌ Age verification ❌ Scanning communication ❌ Tracking & data collection. The tag #SAFERINTERNETDAY and a logo that appears prism-shaped is in the bottom right corner.
098
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 17/08/2026
#Hopeconf is officially wrapped! 🎉 My talk will be live on YouTube soon, with follow-up materials heading to the #Restorethe4th blog and @hpr. ​📚 Book Drop & Support the Cause: My book Turn The Lens drops next quarter in print + digital! A percentage of sales goes to Restore The Fourth to help […]
mastodon.social
Original post on mastodon.social
000
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 16/08/2026
#HOPEconf and #restorethe4th has the deck. After hope talk will be on @hpr
000
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 16/08/2026
Three 2026 court rulings say each licence plate read is a "momentary public observation." No Fourth Amendment search. National Lookup queries the full Flock network and returns a timestamped movement history. Courts have not addressed National Lookup. Crystal Ballroom 17:00. #HOPE26 #RT4NYCAP […]
mastodon.social
Original post on mastodon.social
011
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 16/08/2026
Hail #eris and may the demo gods be pleased
000
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 14/08/2026
And a hop skip away we go. Swing by and I'll sign an exclusive playing card
000
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 14/08/2026
On the way to the new Yorker hotel
000
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 14/08/2026
They do exist! #hacktheplanet #hope #phreaking #joltcola found in the wild
000
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 05/08/2026
Went to find a way to replicate both Redgate and Vagrant using only #lisp. After a #casual #programming sessionof actually building a full deploy and migration script against a live Roswell install + #Postgresql + #postgrest via cl-migrate and consfigurator. Found 10 real bugs -- wrong library […]
mastodon.social
Original post on mastodon.social
200
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 07/07/2026
Ran the same function through six languages and a real tokenizer. Go: 50 tokens. Java: 59. Lisp, hand-golfed: 27. A language's grammar decides what every call site pays for, whether the reader or the model needs it or not. #foss #programming #ai dwightaspencer.com/posts/26-lisp-token-cost/
100
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 02/07/2026
The most honest clanker in the room gets a gold star... And I quote: > The test "is this LLM language" applied by me to my own output has a structural flaw — I can't reliably detect my own patterns. > The honest answer is that this needs a human editing pass, not another LLM rewrite pass. You […]
mastodon.social
Original post on mastodon.social
031
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 13/06/2026
mlisp alpha is out: packages for Linux, FreeBSD, and NetBSD. A mailing list manager where the Maildir is the database. No separate state to drift out of sync, the archive is the audit trail. CAN-SPAM, GDPR, and CASL compliance are test-covered code paths, not a checklist bolted on after the […]
mastodon.social
Original post on mastodon.social
021
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 09/06/2026
Building a detailed target profile from public behavioral data used to require analyst time and domain expertise. Both constraints are being removed by the same capability change that mapped an ICS environment from scratch in one session this week […] [Original post on mastodon.social]
001
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 08/06/2026
SR.1 has two valid readings. Produce an SBOM, or demonstrate a verifiable chain of custody from source to deployed artifact. Phase 1 C3PAO assessments are not accepting the first as a substitute for the second. November 2026 is when that stops being a Phase […] [Original post on mastodon.social]
000
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 07/06/2026
96% of OT incidents originate in IT. An attacker with zero ICS knowledge, one commercial LLM, and access to the IT environment can now map industrial assets in a single session. The capability gap is the boundary with no monitoring. The vNode gateway was exposed. The session found it. #OT […]
mastodon.social
Original post on mastodon.social
100
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 06/06/2026
Even "private" apps like Signal use Apple and Google servers (APNs/FCM) to trigger alerts, leaking vital device metadata. The speaker warns about tracking risks, government surveillance, and outages, while offering a self-hosted solution: UnifiedPush and tools like ntfy. Watch it here […]
mastodon.social
Original post on mastodon.social
221
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 03/06/2026
Just caught @ThePrimeagen's video. geohot: "agents frontload progress but never achieve polish" Low performers using agents produce high-volume slop with no feedback loop to catch it. High performers use agents as multipliers and self-correct constantly. The layoff wave isn't AI replacing […]
mastodon.social
Original post on mastodon.social
011
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 03/06/2026
7 years of testimony. Near-unanimous legislature. TechNet rewrote it before Hochul signed. NY's Digital Fair Repair Act: — post-July 2023 devices only — assemblies instead of parts — business/gov devices exempt — no security codes required This is about manufacture control and enshitifcation […]
mastodon.social
Original post on mastodon.social
000
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 03/06/2026
New #noai whitepaper in the works; 🛡️ "You cannot have our users' data." SourceHut is blocking aggressive AI/LLM scrapers with a new system named Anubis. Drew DeVault states SourceHut is funded by user subs, not data sales, and will never sell out its users or the commons to AI companies. ✅ […]
mastodon.social
Original post on mastodon.social
031
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 31/05/2026
Spent the week automating things that usually require clicking. From OBS stream overlays that render via data files to MP4s that build themselves all in #cicd None of it required specialized tools or AI skills/MCP agents. Just Hugo, Playwright, ffmpeg, and […] [Original post on mastodon.social]
010
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 31/05/2026
TeamPCP breached GitHub's internal systems via a malicious VS Code extension on a developer's machine, then cloned ~3,800 internal repos. Customer repos unaffected. Corporate estate: yes. The attack path: IDE extension → developer device → internal network → mass repo clone. This is why your […]
mastodon.social
Original post on mastodon.social
010
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 27/05/2026
Microsoft and Uber are telling employees to stop using Claude and similar tools because the token bills are too high. The infrastructure sovereignty argument just got a budget line. Privacy people have been saying "own your compute" for years. Now the CFO is saying it too, for different reasons […]
mastodon.social
Original post on mastodon.social
021
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 27/05/2026
House Committee passed amendment 32-25 to close the data broker loophole — preventing law enforcement from buying location data and browser history without a warrant. Same reform passed the House in 2024 but died in Senate. It's back as an appropriations rider. This is the Fourth Amendment Is […]
mastodon.social
Original post on mastodon.social
000
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 27/05/2026
NY Assembly Bill A2228 would require criminal background checks to buy a 3D printer "capable of creating firearms." The bill text is broad. "Capable of" is not defined. Most consumer FDM printers can print gun components. So can a milling machine. So can a lathe. This is infrastructure for […]
mastodon.social
Original post on mastodon.social
085
Dwight Spencer @denzuko.mastodon.social.ap.brid.gy · 22/05/2026
New blog post: Rules, Types, and Glue: A Multi-Paradigm Architecture for Game Simulation 🎮🧱 A deep dive into combining classical AI and strict type systems for high-performance simulation engines. I evaluate: 🧠 Prolog for symbolic reasoning (Rules) 🧱 Coalton for static type-safety (Types) 🔄 […]
mastodon.social
Original post on mastodon.social
051