Sign in

JD Work

@hostilespectrum.bsky.social
2.8K followers 300 following 1.2K posts

Former intel, now academic @NDU_CIC, @TheKrulakCenter, @SIWPSColumbia @ColumbiaSIPA, @CyberStatecraft, @ElliottSchoolGW, @PAISWarwick. Apolitical, views=own

PostsRepliesMedia
JD Work @hostilespectrum.bsky.social · 20/01/2025
Imagine for a minute how the adversary intrusion operators feel, who having put all of the work into another year’s campaign against Davos events, find that basically no one is attending this year because center of gravity is absolutely in DC at the moment.
220
JD Work @hostilespectrum.bsky.social · 19/01/2025
Going into a national security special event with a staggeringly bright communications footprint involving absolutely no fail missions, it sure would have been nice to have confidence that SALT TYPHOON has been evicted from US telecom networks before now.
110
JD Work @hostilespectrum.bsky.social · 19/01/2025
Apparent counterrevolutionary / revenge hits against Iranian judiciary figures involved in extrajudicial prisoner killings & moharebeh cases, reads like something out of John Wick, with edged weapon engagement used to acquire battlefield pickup small arms.
120
JD Work @hostilespectrum.bsky.social · 19/01/2025
Beyond a few idiots posting to Red Note in their military & other gov roles, there is substantial incentive for United Front to surge video exfiltrated from cyber espionage, in new placement under hijacked or synthetic identities.
120
JD Work @hostilespectrum.bsky.social · 18/01/2025
Claude instructed kitchen table nuclear ☢️ experimentation livestream is definitely a 2020s reboot of the Manhattan Project (1986) movie. Or perhaps that sad story about the Boy Scout who tried to build a neutron source by scraping together americium.
020
JD Work @hostilespectrum.bsky.social · 18/01/2025
One really ought to be concerned about the errors in Apple Intelligence presentation of news. Because when even Cupertino cannot get it right, the roll your own LLMs being pushed across agencies & services for national security missions almost certainly aren’t going to be better.
052
JD Work @hostilespectrum.bsky.social · 18/01/2025
State practice in offensive cyber countervalue targeting of objects of military - economic potential have defined international norms far more decisively than any number of aspirational prohibitions. This is the agreed fight, whether we like it or not.
020
JD Work @hostilespectrum.bsky.social · 18/01/2025
It is tempting to think that adversary actors exploiting BeyondTrust may getting nervous about possible attention following headline disclosures, & are rotating in other similar tooling for survivability. This would be an excellent example of discrete, measurable reaction suggesting additional
210
JD Work @hostilespectrum.bsky.social · 17/01/2025
One wonders what is so critical that GUGI recover, or destroy in place, when diving on the sunken hulk of a smugglers' vessel lost due to poor maintenance, incompetence in wartime retreat. As a first impression, one might assume exquisite cryptographic material, but this is table stakes
220
JD Work @hostilespectrum.bsky.social · 17/01/2025
A ransomware crew claiming hits on multiple medical targets, including hospital and psychiatric practices, and also hitting a historic convent operating since 1578, very much tells you what kind of scum you are facing off against.
040
JD Work @hostilespectrum.bsky.social · 17/01/2025
Framing Chinese government interactions with RedNote as meetings with “government relations” to discuss “concerns”, as if these were ordinary Western lobbyists, is a fundamental analytic error. The Communist Party issued orders to a subordinate Party cell, mandated as a mechanism
130
JD Work @hostilespectrum.bsky.social · 17/01/2025
One knows job markets are tough for those coming into the game, but distortions are becoming ever weirder. Saw a billet circulating for what is essentially an entry level analytic role that demanded specific intelligence professional certification, explicitly rejecting substitution
120
JD Work @hostilespectrum.bsky.social · 17/01/2025
The number of commentators that still don’t understand what they are watching when they see SpaceX launches is surprising. But this is so different from how most bureaucratic impulses function it deserves explanation. Every operational act requires
120
JD Work @hostilespectrum.bsky.social · 16/01/2025
One wonders what 74455 will do to commemorate the passing of Monsieur Lynch.
010
JD Work @hostilespectrum.bsky.social · 16/01/2025
It is regrettable that something so important as cyber would be reduced to a last minute afterthought of an executive order that is essentially for all political purposes, & operational outcomes, dead on arrival. There was no need for this, especially in this manner.
010
JD Work @hostilespectrum.bsky.social · 16/01/2025
A startup announcing its progress, and further funding rounds, towards thylacine de-extinction is precisely the future @GreatDismal anticipated. Would getting one be seen as too klept adjacent of an aesthetic and therefore gauche?
020
JD Work @hostilespectrum.bsky.social · 16/01/2025
New research into KV botnet pattern of life as ORB network raises question if inevitable delays imposed by attempting to treat counter-cyber operations actions as a law enforcement & judicial matter may have allowed the adversary to blunt counter-botnet takedown & remediation efforts...
120
JD Work @hostilespectrum.bsky.social · 16/01/2025
A no notice deployment of private military contractor seabed warfare assets to defend the Trans Pacific Express cable and other nearby undersea links from “accident” would be an interesting assertion of rights by international joint venture partners.
100
JD Work @hostilespectrum.bsky.social · 16/01/2025
The 🇨🇳Communist ideological apparat is almost certainly entirely unprepared to encounter the weight of the American cultural - political memespace, and the speed at which it shifts. Breaking down firewalls via app wars should be their worst nightmare. Our people are inherently an unruly bunch...
120
JD Work @hostilespectrum.bsky.social · 16/01/2025
Tally of recent munitions expenditures in Red Sea fight is just first accounting of real costs masked by the illusion that we could continue to indefinitely ride out enemy attack. Every empty rack in the shot locker will haunt us, & all the moreso the day we cannot assure perfect defensive fires.
120
JD Work @hostilespectrum.bsky.social · 16/01/2025
It is baffling to see naval designers continue to attempt to delete gun mounts when they are now proven to be a must have layer in lower end swarm defeat. No matter how nice a maybe sometime future laser mount may be. Add back in 5”, plus several Bofors for each engagement arc.
010
JD Work @hostilespectrum.bsky.social · 15/01/2025
More than seven years of known, disclosed options to directly degrade TYPHOON / PANDA implants at scale (and almost certainly in play quite a while before). So much wasted opportunity must be noted, even as we may be pleased to see effects this week.
020
JD Work @hostilespectrum.bsky.social · 15/01/2025
Over / under odds that a newly banned app suffers an "unexpected" & "mysterious" 0day resulting in breach or destructive effects against user base mobile devices, just as they are forced to exit market?
110
JD Work @hostilespectrum.bsky.social · 15/01/2025
Misread a line a “hostage compute” and now will be assigning operations design for future counter ransomware campaigns not merely against targeting of data encryption but selective control of chipset.
000
JD Work @hostilespectrum.bsky.social · 15/01/2025
Natsec law panel discussion I'd be interested in hearing: "Failing political parties, 18 U.S.C. § 951, and the special relationship." This is the intersection of some hard political science, foreign policy analysis, and intelligence studies puzzles
000
JD Work @hostilespectrum.bsky.social · 15/01/2025
Down the rabbit hole of DPRK energy targeting, once again. And as always, the arguments over strategic effects optionality are forefront of problem space. It is as if folks deliberately wish to ignore backbearings for anything other than arguments supporting KJ of mere espionage.
000
JD Work @hostilespectrum.bsky.social · 14/01/2025
I most dislike the prospective imminent return of the recurring fabrications of “news” about national security matters that simply did not happen, but arose out of Beltway chatter pervasive enough (or planted sufficiently well enough) to advance talking points for a cycle.
020
JD Work @hostilespectrum.bsky.social · 14/01/2025
DJI reportedly deliberating enabling drone ops in violation of prior flight restriction geofencing should be seen as preparation for large scale irregular attacks against critical targets, on a sufficiently near term timeline that they expect US policy to be unable to react.
120
JD Work @hostilespectrum.bsky.social · 14/01/2025
Naming carriers after living Presidents is a poor choice, as it may too heavily burden their namesake should we lose that ship in combat.
010
JD Work @hostilespectrum.bsky.social · 14/01/2025
Nothing says timely warning analysis like dissemination of product “anticipating” copycat threats around a high profile incident some 45 days later.
020
JD Work @hostilespectrum.bsky.social · 14/01/2025
It is a longstanding maxim that bad cases make bad precedent in law. Recent decisions in California civil litigation improperly touch upon matters that ought be confined to national security policy, and never should have come before a domestic court, let alone at the state level.
110
JD Work @hostilespectrum.bsky.social · 12/01/2025
Zoning discussions about rebuilding burned out LA are uncomfortably close to that long predicted pathway that results in dystopian arcologies.
010
JD Work @hostilespectrum.bsky.social · 12/01/2025
The end of an era. But it has brought so many folks out of the shadows, and given a rare opportunity to reunite with old friends. Something the community needed more than ever, given what is to come.
020
JD Work @hostilespectrum.bsky.social · 12/01/2025
The LA fires demonstrate nothing more clearly than the gap between those that are able to think about complex systems interactions, including under malicious pressure, vice those that cannot.
131
JD Work @hostilespectrum.bsky.social · 12/01/2025
One can only imagine the theological justification offered for the spate of copycat arson incidents throughout Los Angeles. AQ & Daesh media cell members that had previously called for similar attacks likely see this as retribution, as the mad and murderous rage free alongside looters
010
JD Work @hostilespectrum.bsky.social · 12/01/2025
When we trace the failure of deterrence in the Pacific, watching the complete inability of the US to plan and execute the Gaza pier operation almost certainly emboldened PLA leaders views of their own logistics over the shore capabilities, ...
100
JD Work @hostilespectrum.bsky.social · 12/01/2025
The first reported domestic air to air mission kill in the US, by drone against fire aircraft, ought occasion far more concern than has been yet evidenced. If this is beyond state & local C-UAS capabilities, it is time to deploy National Guard EW and air defense units.
110
JD Work @hostilespectrum.bsky.social · 10/01/2025
We talk a lot about the folks that build elaborate memory palaces, or play chess against themselves in their heads. But who plays 4x games from memory in meditation?
100
JD Work @hostilespectrum.bsky.social · 10/01/2025
If the crux of ByteDance objections to divesting the TikTok platform is that the CCP will not permit export of its algorithm, then surely an open source developed alternative would suffice to allow the service to operate entirely independent of China.
121
JD Work @hostilespectrum.bsky.social · 10/01/2025
To have the confidence of an Iranian air defense planner, boasting about bringing new SAM systems online, knowing these contain MODAFL sources components yet somehow believing this time they will work.
020
JD Work @hostilespectrum.bsky.social · 10/01/2025
It is not a negative judgement of a firm for a threat intelligence analytic product to note that an adversary has evaded a control or countermeasure implemented against prior iterations of exploitation TTP. This is the purpose of technical warning,...
110
JD Work @hostilespectrum.bsky.social · 10/01/2025
Whilst we are contemplating failure of all hazard management, it is worth again asking the question about specific threat activity: what "percentage containment" would USG and industry assess has been achieved for eviction & remediation of SALT TYPHOON intrusions?
130
JD Work @hostilespectrum.bsky.social · 10/01/2025
One does wonder whatever happened to those Black Hand hackers after ALlIED FORCE… or if the current intrusion set operators still commemorate the original AVET threat actors
000
JD Work @hostilespectrum.bsky.social · 07/01/2025
The Sukhoi design bureau getting so jealous of that Chengdu J-36 third engine that they are pushing AI generated imagery of the thing they wish they had built. Maskirovka, or self deception? But no faster way to attract APT31 targeting, one supposes.
000
JD Work @hostilespectrum.bsky.social · 06/01/2025
The story of a CES judge getting trapped in a self driving vehicle that refuses to let him leave at airport drop off sounds like a stunt hack harassing critics straight out of Oceans 13
020
JD Work @hostilespectrum.bsky.social · 06/01/2025
Is it still Five Eyes if two member governments fall amidst political disputes with others? Put another way, are we about to see enduring intelligence relationships tested as never before? Or does this strengthen continuity of institutions across inevitable & proper change of elected leadership?
0143
JD Work @hostilespectrum.bsky.social · 06/01/2025
It is common for many in government, and even more in industry, to misunderstand or misrepresent the fundamental argument over policy options in responding to cyber threats. 🧵
131
JD Work @hostilespectrum.bsky.social · 06/01/2025
The national policy alternative to deterrence by denial through vulnerability reduction (placing DCO and DFIR as primary if not in practice only response COA), is a mix of counter-cyber operations to erode adversary capabilities through persistent engagement ....
120
JD Work @hostilespectrum.bsky.social · 06/01/2025
That disconcerting moment out of the detritus of dead media, where someone appears to have taken the name of a former blog you once wrote and curated, and established some random spam on a different publishing platform with the same name.
120
JD Work @hostilespectrum.bsky.social · 06/01/2025
Is algorithmic enforced positivity essentially discrimination against Gen X? Discuss.
010