iiinova — where your digital self keeps evolving

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 10h

Today was adventures in project management. We're starting the planning and prep process for next year's dyke march. Trying YouTrack for this year, so I got that configured, added the team, and made the first hundred tickets, transcribing last year's lists plus various stuff from our after action.

010

Reposted by Eleanor Saitta

C. @cazabon.mindly.social.ap.brid.gy · 06/10/2026

Yesterday I saw someone say "Kubernetes is made out of attack surface" and I'm still chuckling about it. #Kubernetes #k8s #wiseacre

0110

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 06/10/2026

I just finished James C. Scott's last book, In Praise of Floods. It's a delightful, gentle book. I first read his Seeing Like a State something like fifteen years ago, and the way he sees the world has been a constant companion in my head and has shaped my thinking ever since. It seems weird […]

infosec.exchange

Original post on infosec.exchange

000

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 05/10/2026

Given that the device linking channel has been used for attacks against @signalapp users, should a user linking a new device be treated as a soft compromise, e.g. not something that undoes safety number verification, but still something that the user is notified about, possibly including the […]

infosec.exchange

Original post on infosec.exchange

100

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 03/10/2026

RE: mastodon.social/@wchr/1173734713221… It's a pity they weren't in a position to extend that analysis to the business and enterprise tiers. I'm assuming they would see differences, especially at enterprise. If they don't, uh, boy do I have some auditor questions.

mastodon.social

014

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 02/10/2026

Nice client compliment today, "Some of your guidance for me, particularly around release practices, was quite foundational about how I think about constructing the team, especially not having it spread so thin and constantly scrambling to put things together at the last minute."

110

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 02/10/2026

It's lovely that we're at a point where any polished long form writing is assumed to be AI, doubly so if the author dares to use an em dash. This civilization is cooked. Bring on the meteorites.

111

Reposted by Eleanor Saitta

Daniel Lakeland @dlakelan.mastodon.sdf.org.ap.brid.gy · 01/10/2026

Fediverse, the social media system for 40+ year old people who built the world wide web and regret it.

19115446

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 01/10/2026

Has anyone here dealt with ISO 27001 audits in the context of fast, broad-spectrum AI rollouts? What are you getting back from auditors? Are they just treating AI tools as an extension of the user, or are they actually looking for controls?

005

Reposted by Eleanor Saitta

Erik Uden 🚩 @erikuden.mastodon.de.ap.brid.gy · 03/08/2026

The current CEO of Identity Digital (_formerly Donuts Inc_) named Akram Atallah, used to be the president of ICANN, the folx that “own” and “run” the internet. Under his leadership, ICANN introduced the new generic Top Level Domain program, or new gTLD, giving the creation of a new domain […]

mastodon.de

Original post on mastodon.de

032

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 23/09/2026

Here's the second part of my essay on how to actually get security work done at your company when you've decided to start a security program: www.structures.systems/blog/how-to-… Please give it a repost so the folks who need […]

infosec.exchange

Original post on infosec.exchange

004

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 22/09/2026

Historical question — why did we as an industry decide that penetration tests needed to be outsourced, but that we didn't need outsourced application security tests or code reviews in the same way?

002

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 17/09/2026

So, now that the EU "KIDS" act has passed, is @signalapp going to leave the EU if forced to identify their users? Asking for several hundred million friends.

101

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 17/09/2026

That moment when you're making breakfast and you want some fruit but the fruit bowl is empty and then you remember that you have plums waiting in the fridge and to go over and open the door and...

012

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 14/09/2026

Jace is the spouse of my partner's friend. He's a trans guy with late-stage Huntington's disease who came to Finland selling asylum. He is now unable to move and requires 24x7 care. He's being deported from Finland back to the US on a Finnair ambulance […] [Original post on infosec.exchange]

Letter to Migri explaining the laws that this deportation breaks and demanding explanations about medical care and safeguarding.

245

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 14/09/2026

It's been a while since I've written anything serious in public and it's high time I fixed that. I have a few things planned, but I'm interested in hearing from folks about what you'd like to read from me. Some of these essays will be on my consulting blog; others will be about personal projects […]

infosec.exchange

Original post on infosec.exchange

007

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 13/09/2026

Has anyone in the EU tech policy space considered just making it illegal for services to charge more for MFA, SSO, audit log streaming, and break-glass/split privilege accounts? If y'all are serious about improving SME security, that's an easy win.

0312

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 13/09/2026

I just finished Rodrigo Nunes's book Neither Vertical Nor Horizontal. It's the most useful piece of political writing I've read this year. It's theory-heavy, excavating the history of left organizing, its failures, and the theory that drove them beforehand and tried to explain them after. The […]

infosec.exchange

Original post on infosec.exchange

011

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 13/09/2026

There's that special feeling as the air gets crisp and the leaves start to turn and you realize it's time to start making plans for the fall of civilization.

0113

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 11/09/2026

Finally got around to making a bluesky account as well, only three years after getting an invite. I'm @dymaxion.org over there, but not going anywhere from here either. Nice to see old friends over there, though.

002

Reposted by Eleanor Saitta

jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 08/09/2026

> The route to the Clay problem through a smooth force, options c and d in Fefferman’s statement of the problem, is the route Luis and Diego opened and the one Levent and I had quietly chosen to attack. Almost nobody else I know of was working on it. It is not the direction one arrives at in a […]

neuromatch.social

Original post on neuromatch.social

2029

Reposted by Eleanor Saitta

ceej @ceej.online · 03/09/2026

I do think “every rich person went insane during covid because it was the first time they’ve been inconvenienced in decades” felt a little reductive at first but damn if isn’t more and more compelling as the years drag on

193218924413

Reposted by Eleanor Saitta

Matt Blaze @mattblaze.federate.social.ap.brid.gy · 03/09/2026

It's been widely reported that former Rep. Eric Swalwell, a longtime Trump critic under investigation for sexual assault, had his electronics confiscated at an airport by the FBI last month. It's messy story in which facts are still emerging. But what caught my eye as a surveillance nerd was […]

federate.social

Original post on federate.social

3122

Reposted by Eleanor Saitta

Caræsten 🇵🇸 @cara.city · 02/09/2026

hi, if you're a registered Part 107 holder, please please PLEASE file a comment on this change by the FCC to ban drones with LiDAR. comments close TOMORROW. do it RIGHT NOW!!! dronexl.co/2026/09/01/f...

dronexl.co

FCC Drone Deadline Is Tomorrow. Fewer Than 3,000 Comments Are In.

Fewer than 3,000 comments have been filed in PS Docket 26-189 against nearly half a million certificated remote pilots. The window closes September 2.

66642

Reposted by Eleanor Saitta

Anonymous @youranoncentral.bsky.social · 31/08/2026

We should have learned from Brexit; if you treat the propaganda and troll networks as a speech issue rather than a coercive and realtime security threat then the manipulation of the population will never end. Running factchecks isn’t enough; halting propaganda mills needs action.

9767207

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 30/08/2026

IAC/early teens speculative design folks, do any of you remember the phrase "The original sin of design is control"? Apparently one of us tweeted it back in like '14, and it sounds like any of us could have, but no clue who.

001

Reposted by Eleanor Saitta

Hrefna (DHC) @hrefna.hachyderm.io.ap.brid.gy · 18/08/2026

One thing that doesn't seem to penetrate the brains of most cis people much in this discourse, but which every trans person is keenly aware of, is just how _long_ the process with hormones takes. You don't take estrogen and suddenly ka-girl! That's not how any of this works when you medically […]

hachyderm.io

Original post on hachyderm.io

1116

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 20/08/2026

When a state tells you that something is "zero knowledge" and they don't say a) "for whom", b) provide independent proof, and c) provide clear assurances as to why it will stay that way, they're just lying to you with more steps. It is (almost) never about protecting the children.

002

Reposted by Eleanor Saitta

ncnvrgnt @inconvergent.net · 15/08/2026

cybercrime should probably be illegal regardless of how much linear algebra was involved

013730

Reposted by Eleanor Saitta

Glyph @glyph.im · 11/08/2026

to paraphrase Warren Buffett on leverage, If you know what you're doing you don't need LLMs and if you don't know what you're doing then it's too risky for you to be using them

0710

Reposted by Eleanor Saitta

Glyph @glyph.im · 11/08/2026

I can easily convince somebody that 100% code coverage is a worthy metric because it is necessary but not sufficient, I can wax rhapsodical about the merits of mocking at various scopes of testing. But I cannot convince them that they do not understand the fundamental degree to which all humans […]

mastodon.social

Original post on mastodon.social

212

Reposted by Eleanor Saitta

Glyph @glyph.im · 11/08/2026

But today, in an LLM debate, we say "it makes the defect rate unpredictable". But then the pushback comes back: "it's OK, we'll just add a little process fix. We'll do some code review. We are all Very Careful Engineers around here, it'll be fine." With other tools, we could do a little work […]

mastodon.social

Original post on mastodon.social

214

Reposted by Eleanor Saitta

Dieter Komendera @kommen.hachyderm.io.ap.brid.gy · 15/08/2026

Digital surveillance policy is in for a wild ride. „The demand for constructed, intentional backdoors will re-start in earnest. The result will be enormous pressure on industry to re-architect their systems to make their systems amenable to exceptional access.” […]

hachyderm.io

Original post on hachyderm.io

0010

Reposted by Eleanor Saitta

Lesley Carhart :unverified: @hacks4pancakes.infosec.exchange.ap.brid.gy · 07/08/2026

Oh yea bro, you’re going to fix security with raw milk and telling the three tired and underfunded people running your towns water towers to stop using distributed control. Galaxy brain shit. They need resources.

258

Reposted by Eleanor Saitta

Lesley Carhart :unverified: @hacks4pancakes.infosec.exchange.ap.brid.gy · 07/08/2026

Telling municipal water utilities to just not network their systems is the most RFK- calibre cybersecurity take possible by the way

2314

Reposted by Eleanor Saitta

spooky Deirdre Connolly¹ ² at a distance @durumcrustulum.com · 06/08/2026

"LLM-generated patches did not resolve the vulnerability, added a new vulnerability, or both, an average 53.9% of the time." 👁️👄👁️ 1password.com/blog/why-ai-...

LLM-generated patches did not resolve the vulnerability, added a new vulnerability, or both, an average 53.9% of the time. You can read further details about our findings, observations, and conclusions in the research paper we’ve published alongside this post.

3174121

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 06/08/2026

Signal can finally run on both Android and iOS as a linked device, including Android tablets! I've only been waiting for this for a decade

011

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 06/08/2026

Ouch, apparently Ryde just lost their entire customer database, and they were keeping first six and last four of CCs. Technically not banned under PCI, but zero chance they're passing their next audit. I'm guessing there's going to be some fallout when/if all the ride histories get dropped too.

000

Reposted by Eleanor Saitta

Quinn Norton @quinn.social.circl.lu.ap.brid.gy · 31/07/2026

RE: infosec.exchange/@0xabad1dea/117013… With just the right set of circumstances, you could end up saying "I had to go to The Hague for a parking ticket, those guys are harsh"

025

Reposted by Eleanor Saitta

Nemoralis @neriman.wikis.world.ap.brid.gy · 28/07/2026

The Wikimedia Foundation has declined to voluntarily recognize Wiki Workers United, despite the union announcing majority support among eligible US staff. A new community petition calls on the Board of Trustees to direct the Foundation to recognize the union and begin bargaining in good faith […]

wikis.world

Original post on wikis.world

1322

Reposted by Eleanor Saitta

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 24/07/2026

Availability and office hours! I've currently got room for an additional client. If you're a startup looking to build a security program or an for outside review or course correction for your existing efforts, this is your chance to get the help you need to do it right. I'm also re-opening my […]

infosec.exchange

Original post on infosec.exchange

015

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 24/07/2026

infosec.exchange

Original post on infosec.exchange

015

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 10/07/2026

Mozilla apparently shipped tab groups for Android in version 152, but as far as I can tell I still don't have them. Are they doing an A/B rollout or something? If so, how do I opt in?

000

Reposted by Eleanor Saitta

Julian Sanchez @normative.bsky.social · 03/07/2026

People who spiral out overusing LLM chatbots are really just experiencing the kind of brain-damaging stream of unconditional validation that’s always been the norm for the hyper-wealthy, which explains a lot.

2479831791

Reposted by Eleanor Saitta

デイヴ @deivudesu.mastodon.social.ap.brid.gy · 02/07/2026

It’s wild and depressing that in the space of 20 years, we went from: “I can now share my furry fanfic or my penis puppetry show with the entire world without worrying about any government or tv channel censoring or gatekeeping me out.” To: “I can’t spell the word s*x, or anything a 1960s […]

mastodon.social

Original post on mastodon.social

2134