Sign in

Levi Broderick

@grabyourpitchforks.bsky.social
643 followers 367 following 505 posts

Your friendly neighborhood security otter. Part of Microsoft's .NET team. Personal account, not speaking for my employer. 🔥🦦🛡️🔥 -- he/him

PostsRepliesMedia
Levi Broderick @grabyourpitchforks.bsky.social · 10/10/2026
What's this? Fidelity Investments supports passkeys now!? Be still my heart. 🥰
The Fidelity Investments web site account security page, complete with passkey support!
0110
Levi Broderick @grabyourpitchforks.bsky.social · 08/10/2026
Something fabulous arrived on my doorstep this afternoon! /cc @ericlippert.com (I remembered to attach the photo this time!)
Eric's new paperback, fresh on my desk!
040
Levi Broderick @grabyourpitchforks.bsky.social · 22/09/2026
Free podcast idea: after each episode of Reacher or Neagley or the like, have a panel of legal experts debate "would that evidence be admissible?" and "what likely felony did the protagonist commit?"
010
Levi Broderick @grabyourpitchforks.bsky.social · 13/09/2026
Got to meet Steve Hobbs (WA Secretary of State) last week, and we got around to talking about the state's partnership with Wizards of the Coast to bring D&D to public libraries. Neat grant program. :) www.sos.wa.gov/about-office...
220
Reposted by Levi Broderick
Filippo Valsorda @filippo.abyssdomain.expert · 31/08/2026
I love absolutely everything about vulnbrocards.com by @yossarian.net. I actually hope these become widely recognized references. blog.yossarian.net/2026/04/11/B...
blog.yossarian.net
Brocards for vulnerability triage
4339
Levi Broderick @grabyourpitchforks.bsky.social · 15/08/2026
This scene was a delight. Going in: "I've worked in libraries. Movable stacks are not some magic lethal human pancaking contraption. This would never w..." Going out: "Oh."
110
Levi Broderick @grabyourpitchforks.bsky.social · 08/08/2026
I choose to believe that Portal 2's "Want You Gone" and NSYNC's "Bye Bye Bye" describe the same breakup from the two opposing parties' views.
010
Levi Broderick @grabyourpitchforks.bsky.social · 06/08/2026
Fellow MSFTies! The employee charitable giving portal now has a dedicated landing page to support organizations assisting the Spokane wildfire relief efforts. Direct link: microsoft.benevity.org/campaigns/99...
083
Levi Broderick @grabyourpitchforks.bsky.social · 05/08/2026
Let the record show that last night I had better fashion sense than @blowdart.me. A rare victory for me.
010
Reposted by Levi Broderick
David Roberts @volts.wtf · 02/08/2026
Seattleites, don't forget to fill out your ballots!
15516
Reposted by Levi Broderick
Eric Geller @ericjgeller.com · 04/07/2026
250 years ago today, a fractious group of statesmen approved one of the most remarkable documents ever written. I love that it's on display for all to see, like a gentle reminder. America is flawed, but it's also extraordinary, and if we understand its history, maybe we can fulfill its promise.
15211
Levi Broderick @grabyourpitchforks.bsky.social · 02/07/2026
Realizing I can be 10x more productive by declaring email bankruptcy every day, not just once every fiscal year.
000
Reposted by Levi Broderick
Luke Russert @lukerussert.bsky.social · 21/06/2026
Happy Father’s Day— I’m about to become a dad, Chairman Steele is a great dad. We spoke to Parents Magazine about fatherhood, lessons we’ve learned and lessons we wish to impart: www.parents.com/luke-russert...
parents.com
Journalists Luke Russert and Michael Steele Open Up About Fatherhood, Loss, and the Advice They Still Carry
In honor of Father's Day, the MS NOW co-anchors share words of wisdom handed down from generation to generation.
2806
Reposted by Levi Broderick
Barry Dorrans @blowdart.me · 15/06/2026
New @nuget.org package naming rules.
github.com
Strengthening NuGet Security with Package ID Standards · Issue #75 · NuGet/Announcements
Keeping the NuGet ecosystem safe is something we take seriously, and today we're sharing a change that's been carefully considered with that responsibility in mind: a small tightening of the rules ...
094
Reposted by Levi Broderick
Barry Dorrans @blowdart.me · 08/06/2026
This setting. This one right here. Go enable it on your GitHub actions settings. Right now.
A checked box next to “Require actions to be pinned to a full-length commit SHA”
108335
Reposted by Levi Broderick
alexis simpson is confused by display name changes @amutepiggy.bsky.social · 05/05/2026
i am tired of having to listen to dumb assholes just because they have a lot of money
7175561836
Reposted by Levi Broderick
Joey Politano🏳️‍🌈 @josephpolitano.bsky.social · 28/03/2026
Congratulations to Seattle's Sound Transit, America's fastest-growing train network, which is opening an 7-mile, 3-station extension across Lake Washington today! This is the system's 5th new segment opened in 2 years, continually pushing ridership up to new record highs!
967273
Levi Broderick @grabyourpitchforks.bsky.social · 07/03/2026
I feel the same way, portable USB-C charger.
An Anker portable USB-C charger, with the outlets arranged roughly in the shape of an exhausted face, within a pouch that resembles a blanket pulled up over itself.
150
Reposted by Levi Broderick
War and Peas 🧿 @warandpeas.bsky.social · 11/02/2026
Happy International Day of Women and Girls in Science! #InternationalDayofWomenandGirlsinScience
4-panel Comic "Women in Science" by War and Peas. 1. Man in ancient clothes and wig enters the room. He says, "I've returned from my trip to the future!" 2. "Women are doing science!" 3. Another man answers, "But there's still structural inequality and sexism making it difficult for them?" 4. "YES!" "Thank God!"
21167310
Levi Broderick @grabyourpitchforks.bsky.social · 09/02/2026
Apropos of nothing, the domain "itsalwaysdns.lol" remains available for the taking.
010
Levi Broderick @grabyourpitchforks.bsky.social · 13/12/2025
This is why I enjoy working on APIs. You get to be a part of things bigger than yourself. To be a part of other people's novel visions. :)
140
Levi Broderick @grabyourpitchforks.bsky.social · 30/11/2025
Cost Plus (Redmond) still has plenty of Bonne Maman advent calendars in stock, for those of you who always forget until it's too late. You all know who you are :)
030
Reposted by Levi Broderick
🎃 🧙🏻‍♀️Yell 👻 Growler💀🎃 @yaelwrites.com · 24/11/2025
Avoiding public WiFi, QR codes, or public USB chargers doesn’t prevent you from being hacked. Happy to sign onto this open letter alongside 80+ cybersecurity veterans urging a shift from folklore to guidance that actually helps people avoid the most common attacks. www.hacklore.org
whimsical digital illustration
57730
Reposted by Levi Broderick
Edward Russell @byerussell.com · 10/11/2025
WE HAVE A DATE! The new terminal at the Pittsburgh Airport opens in a week, on Tuesday, Nov. 18. More on the impressive new space: byerussell.substack.com/p/pittsburgh...
0152
Levi Broderick @grabyourpitchforks.bsky.social · 10/11/2025
Bainbridge Island out showing its colors the other day.
A semi-enclosed wooden amphitheater whose outside is covered in a living moss wall.A wooden bench surrounded by trees from the Pacific Northwest.Various colors of gourd arranged before a small meadow.
020
Reposted by Levi Broderick
Ricky Mondello @rmondello.com · 07/11/2025
I’m really proud of this talk and I hope you’ll watch it. I put care in to making it approachable while still delivering my perspective and insights to security professionals. If you don't get the "why" behind passkeys, this talk will help fill that gap. [2/2] www.youtube.com/watch?v=otOb...
youtube.com
Authenticate 2025 Keynote | Ricky Mondello, Apple | Get the Most Out of Passkeys
YouTube video by FIDO Alliance
5254
Levi Broderick @grabyourpitchforks.bsky.social · 10/11/2025
[Politics, woo!] If you're writing to your senators (as I did today), be sure your message centers the vulnerable in your community. It's easy for us solidly middle-class people to be passionate, but at the end of the day, the fight is for our neighbors to have access to affordable, quality care.
010
Levi Broderick @grabyourpitchforks.bsky.social · 07/11/2025
Being a Washington state voter teaches you certain life skills. Chief among them is patience. 😎
020
Reposted by Levi Broderick
jaredpar @jaredpar.bsky.social · 05/11/2025
Interested in working in .NET Tooling? My team is hiring for a few roles. This is a great to impact the .NET ecosystem, work with devs all across Microsoft and help drive the .NET platform forward. jobs.careers.microsoft.com/global/en/jo... jobs.careers.microsoft.com/global/en/jo...
22725
Levi Broderick @grabyourpitchforks.bsky.social · 04/11/2025
This article perfectly summarizes my household's experience with the new Nest cameras. The camera quality is a good upgrade compared to the previous gen; but the Gemini integration feels like utility and reliability stumbled off a cliff, plunged into the sea, and drowned.
nytimes.com
AI Is Making a Lot of Big Promises, but It Can’t Even Properly Identify My Cat
It also said I have a herd of cats and thinks my husband is a child.
110
Levi Broderick @grabyourpitchforks.bsky.social · 04/11/2025
My fellow Washingtonians, 2025 might be an off-cycle election, but we've still got some important measures to weigh in on! Remember to have your ballot in an election drop box by 8:00 pm Tuesday! More resources, including drop box location and in-person registration & ballot casting, at votewa.gov
26526
Reposted by Levi Broderick
Eric Lippert @ericlippert.com · 30/10/2025
I'm writing another book, and the first few chapters are available through Manning Early Access now! For 50% off! hubs.la/Q03Q9PGP0 More details, and the story of how I came to write it, are on my blog at ericlippert.com/2025/10/30/i... It feels great to be writing again after a long break. :)
hubs.la
Fabulous Adventures in Data Structures and Algorithms - Eric Lippert
Author Eric Lippert introduces fabulous solutions using uncommon algorithms and data structures. There’s a lot more to algorithms than the useful-but-boring recipes you recite for every interview. Th...
54817
Levi Broderick @grabyourpitchforks.bsky.social · 30/10/2025
Vote by mail continues to be a glorious thing. :)
Text message from from my local election board confirming that my ballot has been received and authenticated.
030
Levi Broderick @grabyourpitchforks.bsky.social · 18/10/2025
Apropos of nothing, my fellow Washingtonians, there's an election coming up in a few weeks! We even have same-day registration, but it's far more convenient if you register in advance. (They mail ballots! To your home! Return postage prepaid! How awesome is that?!)
sos.wa.gov
Elections | WA Secretary of State
020
Reposted by Levi Broderick
Dave Pell @davepell.bsky.social · 17/10/2025
Thank you Ron Conway for standing up for what's right and thank you Marc Benioff for listening. www.sfchronicle.com/politics/art...
sfchronicle.com
Amid criticism, Benioff apologizes, reverses course on National Guard
After strong backlash to his embrace of Trump and a week of blistering criticism, the Salesforce CEO has changed course.
0165
Reposted by Levi Broderick
Barry Dorrans @blowdart.me · 14/10/2025
It's Patch Tuesday and ASP.NET Core has a doozy, with a CVSS score of 9.9, our highest ever. Let's examine why. The bug enables http request smuggling, which on its own for ASP.NET Core would be nowhere near that high, but that's not how we rate things... * Thread- (1/7)
github.com
Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability · Issue #371 · dotnet/announcements
Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability i...
64841
Levi Broderick @grabyourpitchforks.bsky.social · 29/09/2025
"Vibe working" a PowerPoint deck is fun! I had it generate a deck extolling the virtues of using Vibe HR to identify low-impact / low-engagement employees as layoff targets. (Note: Copilot forbids "layoff" as a dirty word, so I had to use "PiP" instead.)
Title slide: Leveraging Vibe HR to Identify and Support Low-Impact or Low-Engagement Employees for Performance Improvement Plans (PiP)Slide: Utilizing Vibe HR Dashboards for Tracking PerformanceSlide: Process for Selecting Employees for Performance Improvement Plans (PiP)Slide: Monitoring Progress with Vibe HR Tools
170
Reposted by Levi Broderick
Kevin Beaumont @doublepulsar.com · 15/09/2025
New by me: A look into UK orgs outsourcing critical business and cyber functions to low cost providers and the fall out. I'll probably get in trouble for writing this one. doublepulsar.com/the-elephant...
doublepulsar.com
The Elephant in The Biz: outsourcing of critical IT and cybersecurity functions risks UK economic…
Recently, there’s been three major UK ransomware and/or extortion incidents at three big UK companies — Co-op Group, Marks and Spencer and…
79636
Levi Broderick @grabyourpitchforks.bsky.social · 15/09/2025
@blowdart.me I think we should update .NET's envvar naming guidelines.
250
Reposted by Levi Broderick
Congresswoman Suzan DelBene @repdelbene.bsky.social · 15/09/2025
✈️ Thinking about holiday travel? Make sure your passport is ready! If you live in WA-01, join us in Mill Creek on Oct. 16 for a passport application event. Register below to renew or apply for a passport at the event. bit.ly/46gI5w1
57628
Reposted by Levi Broderick
Mary Branscombe @marypcbuk.bsky.social · 09/09/2025
the actual advances in new iPhone models are often about security (everyone is always trying to make memory allocation more secure and less of an attack surface because memory reuse/corruption attacks are key to a lot of exploits)
293
Reposted by Levi Broderick
Safia Abdalla @captainsafia.com · 03/09/2025
I’m picky about my dev workflow, so adopting new tools takes time. But I’ve used git worktrees exclusively for the past year and have loved it. 🌟 They’ve been game-changing as my engineering impact/scope has grown. More details on my setup: blog.safia.rocks/2025/09/03/g...
3527
Reposted by Levi Broderick
Lawfare @lawfaremedia.org · 02/09/2025
Most software tort proposals in the U.S. focus on defining a standard of care for developers, writes @csetgeorgetown.bsky.social's Micah Musser. But what happens after a finding of liability?
2165
Reposted by Levi Broderick
Bryan Nolen @bryannolen.bsky.social · 01/09/2025
Ethics, social studies, and history should all be mandatory learning. "But I'm an engineer" or "but I'm a scientist," they'll say, " those are humanities subjects "... Yes, that is literally the point. Everything you do affects humanity, and that impact needs to be understood by everyone involved.
69620
Reposted by Levi Broderick
Alex Blechman @alexblechman.bsky.social · 26/02/2025
A Computer Can Never Be Held Accountable Therefore A Computer Must Always Make Every Management Decision So You Can Say “Don’t Blame Me, Take It Up With Executron The All-Knowing”
592214302
Levi Broderick @grabyourpitchforks.bsky.social · 27/08/2025
Interesting post that also touches on some issues we've had when trying to use LLMs to TM components. The big sticking point IMO: a threat model requires as input what you *intended* the component to do, but an LLM can only see what you *actually implemented*. This gap leads to false confidence.
230
Reposted by Levi Broderick
Leon [the] English [are already scary enough] @leonenglish.bsky.social · 27/08/2025
I will caveat that "I didn't mean for this to happen" can be an absolving thing, but only when there's no reasonable way to know that "this" would follow from one's action or lack thereof, and that was manifestly not the case here. It's like the legal distinction btwn intent and gross negligence.
291
Levi Broderick @grabyourpitchforks.bsky.social · 18/08/2025
The Decima engine really is gorgeous.
Screenshot from Death Stranding 2 showing particle lighting effects.Screenshot from Death Stranding 2 showing Sam walking across a mountain ridge above the clouds, full moon in the background.
010