iiinova — where your digital self keeps evolving

Reposted by Eleanor Saitta

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 12/10/2026

Another essay! This time, I'm talking about what happens with social engineering now that voice cloning is a thing, and some basic tools to prevent it. This one is a fun one, and not just for corporate security, as these attacks are starting to be aimed at individuals too. Along the way, we'll […]

infosec.exchange

Original post on infosec.exchange

006 6

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 12/10/2026

infosec.exchange

Original post on infosec.exchange

006 6

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 10/10/2026

Oh, my sweet summer child. It's always the C++ programmers, isn't it?

Anonymized response from another network, quoting "Abstractions are fine as long as you never forget they're a lie" and then saying:
NO Abstractions are a layering of specializations.
The layer above does not need to know (and should not know) the implementation of the layer below.
With abstractions the layer below can be seamless be swapped out (based or your platform or need)s and your layer continues to function exactly the same.
One layer is protected from other layers messing with its internals.
Honor the interface. It is your contract that you will continue to work.
It is called encapsulation, look it up. And that is not a lie.

203 3

Reposted by Eleanor Saitta

Hynek Schlawack @hynek.mastodon.social.ap.brid.gy · 09/10/2026

holy shit I got a free NordVPN subscription and their macOS client installs an endpoint kernel extension that just hangs around after an uninstall. There was a constant com.nordvpn.macos.Shield process. I had to boot into recovery and disable SIP to get rid of it. Part of that is on macOS that […]

mastodon.social

Original post on mastodon.social

2125 25

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 08/10/2026

@sterophonick It would be amazing and terrifying to see something that could parse and respond to an http request made entirely out of discrete components

000 0

Reposted by Eleanor Saitta

Audrey @audreypenven.net · 08/10/2026

Every eviction should be seen as murder or attempted murder. Learning of #Maricarmen's death in Spain after being forcably evicted at age 87 is a reminder of this. Thinking today of a friend lost to similar violence, and dreaming of a future in which these kinds of deaths are unthinkable. 💔

troet.cafe

003 3

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 08/10/2026

@myx My god, privacy preserving technologies!? Terrifying! Although the idea of trusting a bot anywhere near a life-critical system sure the fuck is.

000 0

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 08/10/2026

Remember folks, digital logic is just a lie sold to you by big transistor! Everything is actually analog!

1011 11

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 08/10/2026

Abstraction is the original sin of technology. It's essential to do anything and we have taught two generations to treat abstractions as real, but not what's beneath the ones they use nor the implications of this lie, and we wonder why no one can see the impact the lie has on their work and world.

207 7

Reposted by Eleanor Saitta

Sam Stokes @five-eights.com · 07/10/2026

Coding agents reduce software development to a simple matter of: * specifying requirements * verifying correctness and quality * maintaining and operating software you didn't write As we all know, those have always been the easiest, most well-understood parts of the craft, so everything is fine!

214279 142

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 07/10/2026

Today was adventures in project management. We're starting the planning and prep process for next year's dyke march. Trying YouTrack for this year, so I got that configured, added the team, and made the first hundred tickets, transcribing last year's lists plus various stuff from our after action.

010 1

Reposted by Eleanor Saitta

C. @cazabon.mindly.social.ap.brid.gy · 06/10/2026

Yesterday I saw someone say "Kubernetes is made out of attack surface" and I'm still chuckling about it. #Kubernetes #k8s #wiseacre

0111 11

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 06/10/2026

I just finished James C. Scott's last book, In Praise of Floods. It's a delightful, gentle book. I first read his Seeing Like a State something like fifteen years ago, and the way he sees the world has been a constant companion in my head and has shaped my thinking ever since. It seems weird […]

infosec.exchange

Original post on infosec.exchange

000 0

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 05/10/2026

Now I really want the ability to write firewall rules for my phone camera, a totally normal and reasonable thing to want. Turns out if you scan a signal device link qr code with the normal phone scanner, even outside of the add linked device flow, you'll get jumped straight to approving it.

003 3

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 05/10/2026

Given that the device linking channel has been used for attacks against @signalapp users, should a user linking a new device be treated as a soft compromise, e.g. not something that undoes safety number verification, but still something that the user is notified about, possibly including the […]

infosec.exchange

Original post on infosec.exchange

100 1

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 03/10/2026

RE: mastodon.social/@wchr/1173734713221… It's a pity they weren't in a position to extend that analysis to the business and enterprise tiers. I'm assuming they would see differences, especially at enterprise. If they don't, uh, boy do I have some auditor questions.

mastodon.social

014 4

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 02/10/2026

It's interesting how much the job of a fractional CISO is coaching CTOs and CEOs on how to build good engineering teams and practices in general — often with the goal, on my side, of getting the company to the point where they can do security work, but also just so the company becomes stronger […]

infosec.exchange

Original post on infosec.exchange

000 0

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 02/10/2026

Nice client compliment today, "Some of your guidance for me, particularly around release practices, was quite foundational about how I think about constructing the team, especially not having it spread so thin and constantly scrambling to put things together at the last minute."

110 1

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 02/10/2026

It's lovely that we're at a point where any polished long form writing is assumed to be AI, doubly so if the author dares to use an em dash. This civilization is cooked. Bring on the meteorites.

011 1

Reposted by Eleanor Saitta

Daniel Lakeland @dlakelan.mastodon.sdf.org.ap.brid.gy · 01/10/2026

Fediverse, the social media system for 40+ year old people who built the world wide web and regret it.

20128447 447

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 01/10/2026

Has anyone here dealt with ISO 27001 audits in the context of fast, broad-spectrum AI rollouts? What are you getting back from auditors? Are they just treating AI tools as an extension of the user, or are they actually looking for controls?

005 5

Reposted by Eleanor Saitta

Erik Uden 🚩 @erikuden.mastodon.de.ap.brid.gy · 03/08/2026

The current CEO of Identity Digital (_formerly Donuts Inc_) named Akram Atallah, used to be the president of ICANN, the folx that “own” and “run” the internet. Under his leadership, ICANN introduced the new generic Top Level Domain program, or new gTLD, giving the creation of a new domain […]

mastodon.de

Original post on mastodon.de

032 3

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 23/09/2026

Here's the second part of my essay on how to actually get security work done at your company when you've decided to start a security program: www.structures.systems/blog/how-to-… Please give it a repost so the folks who need […]

infosec.exchange

Original post on infosec.exchange

004 4

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 22/09/2026

Historical question — why did we as an industry decide that penetration tests needed to be outsourced, but that we didn't need outsourced application security tests or code reviews in the same way?

002 2

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 17/09/2026

So, now that the EU "KIDS" act has passed, is @signalapp going to leave the EU if forced to identify their users? Asking for several hundred million friends.

101 1

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 17/09/2026

That moment when you're making breakfast and you want some fruit but the fruit bowl is empty and then you remember that you have plums waiting in the fridge and to go over and open the door and...

012 2

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 14/09/2026

Jace is the spouse of my partner's friend. He's a trans guy with late-stage Huntington's disease who came to Finland selling asylum. He is now unable to move and requires 24x7 care. He's being deported from Finland back to the US on a Finnair ambulance […] [Original post on infosec.exchange]

Letter to Migri explaining the laws that this deportation breaks and demanding explanations about medical care and safeguarding.

145 5

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 14/09/2026

It's been a while since I've written anything serious in public and it's high time I fixed that. I have a few things planned, but I'm interested in hearing from folks about what you'd like to read from me. Some of these essays will be on my consulting blog; others will be about personal projects […]

infosec.exchange

Original post on infosec.exchange

006 6

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 13/09/2026

Has anyone in the EU tech policy space considered just making it illegal for services to charge more for MFA, SSO, audit log streaming, and break-glass/split privilege accounts? If y'all are serious about improving SME security, that's an easy win.

0312 12

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 13/09/2026

I just finished Rodrigo Nunes's book Neither Vertical Nor Horizontal. It's the most useful piece of political writing I've read this year. It's theory-heavy, excavating the history of left organizing, its failures, and the theory that drove them beforehand and tried to explain them after. The […]

infosec.exchange

Original post on infosec.exchange

011 1

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 13/09/2026

There's that special feeling as the air gets crisp and the leaves start to turn and you realize it's time to start making plans for the fall of civilization.

0111 11

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 11/09/2026

Finally got around to making a bluesky account as well, only three years after getting an invite. I'm @dymaxion.org over there, but not going anywhere from here either. Nice to see old friends over there, though.

002 2

Reposted by Eleanor Saitta

jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 08/09/2026

> The route to the Clay problem through a smooth force, options c and d in Fefferman’s statement of the problem, is the route Luis and Diego opened and the one Levent and I had quietly chosen to attack. Almost nobody else I know of was working on it. It is not the direction one arrives at in a […]

neuromatch.social

Original post on neuromatch.social

2028 28

Reposted by Eleanor Saitta

ceej @ceej.online · 03/09/2026

I do think “every rich person went insane during covid because it was the first time they’ve been inconvenienced in decades” felt a little reductive at first but damn if isn’t more and more compelling as the years drag on

193218784409 21.9K

Reposted by Eleanor Saitta

Matt Blaze @mattblaze.federate.social.ap.brid.gy · 03/09/2026

It's been widely reported that former Rep. Eric Swalwell, a longtime Trump critic under investigation for sexual assault, had his electronics confiscated at an airport by the FBI last month. It's messy story in which facts are still emerging. But what caught my eye as a surveillance nerd was […]

federate.social

Original post on federate.social

3122 22

Reposted by Eleanor Saitta

Caræsten 🇵🇸 @cara.city · 02/09/2026

hi, if you're a registered Part 107 holder, please please PLEASE file a comment on this change by the FCC to ban drones with LiDAR. comments close TOMORROW. do it RIGHT NOW!!! dronexl.co/2026/09/01/f...

dronexl.co

FCC Drone Deadline Is Tomorrow. Fewer Than 3,000 Comments Are In.

Fewer than 3,000 comments have been filed in PS Docket 26-189 against nearly half a million certificated remote pilots. The window closes September 2.

66642 66

Reposted by Eleanor Saitta

Anonymous @youranoncentral.bsky.social · 31/08/2026

We should have learned from Brexit; if you treat the propaganda and troll networks as a speech issue rather than a coercive and realtime security threat then the manipulation of the population will never end. Running factchecks isn’t enough; halting propaganda mills needs action.

9766206 766

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 30/08/2026

IAC/early teens speculative design folks, do any of you remember the phrase "The original sin of design is control"? Apparently one of us tweeted it back in like '14, and it sounds like any of us could have, but no clue who.

001 1

Reposted by Eleanor Saitta

Hrefna (DHC) @hrefna.hachyderm.io.ap.brid.gy · 18/08/2026

One thing that doesn't seem to penetrate the brains of most cis people much in this discourse, but which every trans person is keenly aware of, is just how _long_ the process with hormones takes. You don't take estrogen and suddenly ka-girl! That's not how any of this works when you medically […]

hachyderm.io

Original post on hachyderm.io

1116 16

Eleanor Saitta @dymaxion.infosec.exchange.ap.brid.gy · 20/08/2026

When a state tells you that something is "zero knowledge" and they don't say a) "for whom", b) provide independent proof, and c) provide clear assurances as to why it will stay that way, they're just lying to you with more steps. It is (almost) never about protecting the children.

002 2

Reposted by Eleanor Saitta

ncnvrgnt @inconvergent.net · 15/08/2026

cybercrime should probably be illegal regardless of how much linear algebra was involved

013730 137

Reposted by Eleanor Saitta

Glyph @glyph.im · 11/08/2026

to paraphrase Warren Buffett on leverage, If you know what you're doing you don't need LLMs and if you don't know what you're doing then it's too risky for you to be using them

0710 10

Reposted by Eleanor Saitta

Glyph @glyph.im · 11/08/2026

I can easily convince somebody that 100% code coverage is a worthy metric because it is necessary but not sufficient, I can wax rhapsodical about the merits of mocking at various scopes of testing. But I cannot convince them that they do not understand the fundamental degree to which all humans […]

mastodon.social

Original post on mastodon.social

212 2

Reposted by Eleanor Saitta

Glyph @glyph.im · 11/08/2026

But today, in an LLM debate, we say "it makes the defect rate unpredictable". But then the pushback comes back: "it's OK, we'll just add a little process fix. We'll do some code review. We are all Very Careful Engineers around here, it'll be fine." With other tools, we could do a little work […]

mastodon.social

Original post on mastodon.social

214 4