iiinova — where your digital self keeps evolving

Haroon Meer @haroonmeer.canary.love · 05/04/2026

Pointless Sunday InfoSec hot-take: One of the biggest, unsolved problems in infosec, is our incarnation of the Dunning–Kruger effect. This grows worse over time, because: - years in the industry ≠ skill; - this take is easily mistaken for gatekeeping.

170

Reposted by Haroon Meer

visi stark @invisig0th.bsky.social · 27/03/2026

"founder culture" is rife with perverse incentives which make "flipping the company" the goal rather than building something of lasting value. Looks like @haroonmeer.canary.love and I agree blog.thinkst.com/2026/03/rsac...

491

Reposted by Haroon Meer

ThinkstCanary @thinkstcanary.canary.tools · 16/02/2026

You can grab the latest copy of our quarterly security research roundup at thinkst.com/ts ¹ For this issue, we selected work from over 1,370 talks & 1,200 blog posts. Available as PDF, ePUB (or audio highlights) __ ¹ As always, completely free

024

Reposted by Haroon Meer

ThinkstCanary @thinkstcanary.canary.tools · 19/02/2026

The best thing about Canaries & Canarytokens, is when they surprise you: "printed some and put them round the office" "but then they were put into the bin, and at 21:43 someone scanned them… looks like this place has dumpster divers" "never thought that was still a thing"

072

Reposted by Haroon Meer

Whitney Champion 🍪 @whit.zip · 30/01/2026

these guys. always full of adorable surprises. love @thinkstcanary.canary.tools 💚 cc @haroonmeer.canary.love

1132

Reposted by Haroon Meer

ThinkstCanary @thinkstcanary.canary.tools · 20/11/2025

You can grab our Q3-2025 issue of ThinkstScapes at thinkst.com/ts For this issue, we tracked over 1,500 talks/papers, and almost 1,300 security blog posts. As always, available in PDF, ePub or a brief audio summary. (As always: completely free).

042

Reposted by Haroon Meer

ThinkstCanary @thinkstcanary.canary.tools · 30/10/2025

This quarter we announced two new platforms for Canary: Oracle Cloud Infra. (OCI) & Nutanix. Our v1 was a hardware device, but today, Canary also runs on - GCP, - AWS, - VMware, - Azure, - Docker, - Tailscale, - OCI, - Nutanix. Still dead simple. Still "just works!"

094

Haroon Meer @haroonmeer.canary.love · 16/10/2025

Startup Idea: A safe way for CEO's to request staff members to acquire gift-cards...

2153

Haroon Meer @haroonmeer.canary.love · 09/10/2025

I honestly don’t mind if Trump gets a Nobel for stopping the slaughter in Gaza. We’ve destroyed so many other post-war global institutions over this insanity, one more won’t hurt 🤷‍♂️

020

Reposted by Haroon Meer

Steven @stevenw.bsky.social · 26/09/2025

Canary tokens are incredible, bravo @thinkstcanary.canary.tools

192

Reposted by Haroon Meer

ThinkstCanary @thinkstcanary.canary.tools · 24/09/2025

Leighton & Sharukh just snuck a quick update into canarytokens.org to allow you to easily manage all the tokens you've previously created. Still just $0.00 Still one of the best things you can do to detect attackers before they dig in...

072

Haroon Meer @haroonmeer.canary.love · 21/09/2025

It’s so disingenuous to keep pushing Palestinian liberation further down the the road.. The “doing X now only hampers long term success” argument can’t be used after decades of failure.. We’ve tried the alternative - let’s try ending the occupation?

080

Haroon Meer @haroonmeer.canary.love · 20/09/2025

Rome takes their FLOSS licenses seriously..

130

Reposted by Haroon Meer

ThinkstCanary @thinkstcanary.canary.tools · 15/09/2025

Today we released our new (free) AWS Infrastructure Canarytoken on canarytokens.org. It catches attackers in your AWS account by putting tempting assets in their way and alerting you if they get probed. (1 of 3)

166

Haroon Meer @haroonmeer.canary.love · 06/09/2025

This talk by Ollie Whitehouse is worth watching for Cybersecurity vendors, startups and purchasers. 0 hype, with a bunch of plain-talk current and future challenges (and opportunities). Vendors: do better.. Buyers: demand better.. youtu.be/UVNMozEgYtY?...

youtu.be

The Wicked Problems and Opportunities of Cyber - Ollie Whitehouse

YouTube video by BSides Bournemouth

1123

Reposted by Haroon Meer

ThinkstCanary @thinkstcanary.canary.tools · 01/09/2025

Most of the company is in CapeTown this week for our annual ThinkstCon. This means lots of green stuff, and lots of padel. 💪💚

141

Reposted by Haroon Meer

ThinkstCanary @thinkstcanary.canary.tools · 29/08/2025

It's our birthday, so we created a tiny skunk(worksy) game for you to play.. Complete all 7 continents, and we will send you a limited-edition, 10-year t-shirt. Have fun!! (but watch out for the Canaries) canary.tools/10-year

082

Reposted by Haroon Meer

ThinkstCanary @thinkstcanary.canary.tools · 27/08/2025

In April this year, @grafana.bsky.social had a security incident due to an insecure GitHub Action. The attackers even tried covering their tracks. How were they discovered? Canarytokens.. Check out their post¹ on how they use our tokens at scale.. __ ¹ grafana.com/blog/2025/08...

grafana.com

Canary tokens: Learn all about the unsung heroes of security at Grafana Labs | Grafana Labs

Learn why the use of canary tokens let us spot a recent intrusion and swarm quickly in response, and find out why you should be using canary tokens to prevent serious security incidents in the future.

052

Haroon Meer @haroonmeer.canary.love · 26/08/2025

I know academic papers usually prefer to do vendor neutral studies, but it would be fun to see an empirical study of security-vendor-X through the ages. “Rarely is the question asked: Is our c̵h̵i̵l̵d̵r̵e̵n̵ vendors learning?”

020

Haroon Meer @haroonmeer.canary.love · 22/08/2025

At BlackHat this year we paid a student to walk the business hall (for both days) to collect as much swag as possible. We wondered if we would learn anything useful from it. Prelim. findings are not particularly interesting 🤷‍♂️

291

Haroon Meer @haroonmeer.canary.love · 19/08/2025

-=[ PHRACK PROPHILE ON Gera ]=- phrack.org/issues/72/2#... That’s the whole post…

phrack.org

.:: Phrack Magazine ::.

Phrack staff website.

1154

Reposted by Haroon Meer

ThinkstCanary @thinkstcanary.canary.tools · 15/08/2025

"We had good success with your canaries at ..." "I would like to intro my (new) team at ...." 10 years in && we still do 0 outbound sales. We've had the best customers since day-1! 💪💚

022

Haroon Meer @haroonmeer.canary.love · 13/08/2025

I thought Ezra Klein came across badly when he & Ta-Nehisi talked Israel/Palestine¹ - but he did the same discussing “Genocide” with Phillipe Sands². Sands: it’s not complex, splitting hairs is a distraction Klein: let’s split some hairs __ ¹ youtu.be/Tg77CiqQSYk?... ² youtu.be/RrhBypHFYPY?...

youtu.be

Ta-Nehisi Coates on Israel: ‘I Felt Lied To.’

YouTube video by The Ezra Klein Show

030

Reposted by Haroon Meer

ThinkstCanary @thinkstcanary.canary.tools · 11/08/2025

A friendly reminder from your Canary Console that if you are in the Northern Hemisphere, you can probably check out the Perseid meteor shower this week.. 💪💚💫

1122

Reposted by Haroon Meer

ThinkstCanary @thinkstcanary.canary.tools · 08/08/2025

BlackHat boothing was great. We got to hang-out with customers & chat Canary with a bunch of new folks.. Our booth has changed, our tech has levelled up (by orders of magnitude) but it's the same price¹ as always, & still "just works!" __ ¹ Still never increased prices since year-1

081

Haroon Meer @haroonmeer.canary.love · 08/08/2025

1) I totally think that LLMs are amazing; 2) The BlackHat showroom floor was embarrassingly covered in AI/Agentic/*

150

Haroon Meer @haroonmeer.canary.love · 08/08/2025

So long Vegas. Was leet meeting customers and old friends, but I’m out early.

030

Reposted by Haroon Meer

ThinkstCanary @thinkstcanary.canary.tools · 06/08/2025

The 2025, Q2 edition of ThinkstScapes is now available for download¹ at thinkst.com/ts If you are in Vegas for BlackHat, swing by our booth for a hard copy. This edition tracks "over 1,450 talks & papers & almost 1,400 blog posts" __ ¹ As always, completely free

031

Haroon Meer @haroonmeer.canary.love · 05/08/2025

It is mildly obscene how many times i've been to Las Vegas.

330

Haroon Meer @haroonmeer.canary.love · 04/08/2025

The momentum that Chromebooks (as a secure enterprise desktop) had a few years back seems to have waned.. Anyone still have faith?

240

Haroon Meer @haroonmeer.canary.love · 03/08/2025

I’m not sure what it means, but I think I see more “on my way to BlackHat” posts on my LinkedIn feed than on my Twitter timeline..

110

Haroon Meer @haroonmeer.canary.love · 31/07/2025

This Christine Amanpour interview with leaders of B'Tselem & 'Physicians for Human Rights Israel' is worth watching. It is insane that conscientious Israelis (inside Israel) are now calling this a genocide, while ppl outside are relying on played out tropes. youtu.be/kNJbNCCejvg?...

youtu.be

Israeli rights groups accuse government of genocide: 'We are doing it with a heavy heart'

YouTube video by CNN

052

Haroon Meer @haroonmeer.canary.love · 24/07/2025

Totally didn’t think it worked like that…

152

Haroon Meer @haroonmeer.canary.love · 23/07/2025

I don't think i've ever had an MS Teams call without a deep pit of stomach worry that the call setup will fail first time.. For me, it remains impressively bad..

340

Haroon Meer @haroonmeer.canary.love · 10/07/2025

Perplexity launched their own browser (Perplexity Comet) which reinforces the “next Google” vibe.. When Goog did Chrome, they had the best sec team on the planet, & part of their pitch was security, tab isolation, etc. It bodes badly that sec doesn’t get a mention now at all..

272

Haroon Meer @haroonmeer.canary.love · 02/07/2025

The AI boom has turned several SV maxims on their head: - Researchers don’t build companies; - You don’t make money selling developer tools; - You earn the big money being a founder (instead of deep tech researcher). Everything holds till it doesn’t

000

Haroon Meer @haroonmeer.canary.love · 25/06/2025

If you listened to Tesla-fans, you’d almost believe that Waymo’s weren’t using AI to drive..

030

Haroon Meer @haroonmeer.canary.love · 21/06/2025

It’s hard to miss that WHOOP is currently everywhere. Hard to catch a podcast/sport clip without seeing one. I wonder if people have gotten a little weary of notifications/a screen on their wrist.

110

Haroon Meer @haroonmeer.canary.love · 18/06/2025

It's kinda funny that as more hardware and software uses AI to "touch up" faces, it will get more difficult to tell real from fake, but in the other direction... Fun times...

130

Haroon Meer @haroonmeer.canary.love · 15/06/2025

New startup marketing playbook just dropped

23619

Haroon Meer @haroonmeer.canary.love · 05/06/2025

On the other hand.. Mars is probably looking a lot more attractive all of a sudden..

040

Haroon Meer @haroonmeer.canary.love · 03/06/2025

Alex Carp is straight outa central casting.. The problem is that it’s not completely clear what genre of movie this is yet..

000

Reposted by Haroon Meer

ThinkstCanary @thinkstcanary.canary.tools · 02/06/2025

We published an internal post¹ that our @marcoslaviero.bsky.social recently wrote "on caring". It's worth a read, because as he writes. caring about what is built is surprisingly fragile (and shockingly absent). __ ¹ blog.thinkst.com/2025/06/on-c...

031

Reposted by Haroon Meer

Geoff Belknap @geoffbelknap.bsky.social · 29/05/2025

I ❤️ Thinkst - When you ask real (aka salty) security people what security companies they respect - Thinkst is always on the list. Great work @haroonmeer.canary.love

162

Reposted by Haroon Meer

Patrick Gray @patrick.risky.biz · 28/05/2025

This wk’s show is up, w @dmitri.silverado.org, @metlstorm.risky.biz and @haroonmeer.canary.love We took an exclusive look at how a scattered spider-style crew is hijacking MX records, then taking over entire networks in minutes. We also explore the age old question: Bro, do you even waterboard?

3251