Sign in

Jarmo Lahtiranta

@naranek.bsky.social
74 followers 154 following 267 posts

Industrial product security in English and random hijinks in Finnish.

PostsRepliesMedia
Reposted by Jarmo Lahtiranta
Hypervisible @hypervisible.blacksky.app · 29/09/2026
So wild to me that the entire economy is propped up by companies who think living your best life is being a middle manager to a collection of bots.
3590124
Reposted by Jarmo Lahtiranta
𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 @netresec.com · 21/09/2026
Malware family identification is hard, especially when samples are packed, encrypted or poorly classified. FlowCarp can help identify the correct malware family and reduce alert overlap. netresec.com?b=2692109
netresec.com
Unmasking Malware Families
Identifying malware families is hard. Malware samples are often packed, strings encrypted and configurations may only appear after several stages of execution. Even experienced reverse engineers can g...
022
Jarmo Lahtiranta @naranek.bsky.social · 15/09/2026
Armeijasta pitäisi tuoda työelämään kuntoisuuslomat. Ylimääräinen vapaapäivä olisi hieno palkkio kaikenlaisesta venymisestä ja keskimääräistä paremmasta suoriutumisesta. www.hs.fi/suomi/art-20...
hs.fi
Lihavuus | Tutkija: Armeijan kaltaista ympäristöä pitäisi tuoda myös työelämään
Tutkija Tuomas Tenkasen mukaan lihavuus saataisiin kuriin soveltamalla armeijan oppeja myös muualla yhteiskunnassa.
000
Reposted by Jarmo Lahtiranta
Eric Mill @konklone.com · 21/08/2026
We're hiring a new product security lead for Wikipedia! It's a new lead PM role that would steer our security engineering team and how we go about this work here at the Wikimedia Foundation. AND: it's fully remote, and open in a good number of countries. job-boards.greenhouse.io/wikimedia/jo...
We are hiring a Lead Product Manager to bring their experience dealing with modern threats to bear on Wikipedia’s security strategy in the AI era, and to drive a strong security culture throughout the Wikimedia Foundation and movement.

Though this is a senior role, prior experience in a product manager role is not required. This position is intended to bring strong technical and security experience, including some familiarity with AI in a security context, into a role focused on product and platform strategy. 

This position could be a good fit for a candidate with both strong technical skills and strong communication skills, who is interested in transitioning from engineering work to a strategic role.

This role is an opportunity to be at the center of a pivotal time for Wikipedia, as AI is not only changing security, but also how people access knowledge online. Responding to these changes requires us to plan ambitiously and act decisively, while working closely with the communities whom the project serves.
22119
Reposted by Jarmo Lahtiranta
Adrian Sanabria @sawaba.bsky.social · 11/08/2026
IMO, the most interesting thing to come out of #HackerSummerCamp is that no one should be using AI to patch vulns 1password.com/blog/why-ai-...
1password.com
Off-by-1 Labs Research: AI-generated vulnerability patches require human review | 1Password
Defenders are increasingly turning to LLMs to to generate vulnerability patches. But our research showed that LLMs only successfully generate patches (without materially changing application behavior)...
011
Reposted by Jarmo Lahtiranta
Steven (with a PH) @sjksalisbury.bsky.social · 10/08/2026
They did it, those sons of bitches actually managed to get them in a row.
A line of ducks all sitting in a row, on a partially submerged log in a pond.
502275303
Reposted by Jarmo Lahtiranta
Steffen Rayburn-Maarup @rayburnmaarup.bsky.social · 02/08/2026
I don't think people are ready for this kind of joke yet.
A town sign seen through a train window.
209109782166
Reposted by Jarmo Lahtiranta
Eliot Higgins @eliothiggins.bsky.social · 31/07/2026
Google Earth, a tool often used as a source of satellite imagery to verify photos and videos, has added a feature that allows you to alter satellite imagery with AI, for reasons. blog.google/products-and...
blog.google
Transform any place with Nano Banana in Google Earth
Custom images — generated from Google Earth satellite, aerial, and 3D imagery — help you redesign any location.
671667580
Reposted by Jarmo Lahtiranta
Javvad Malik @j4vv4d.com · 21/07/2026
Airbus is moving 900 critical apps off AWS to a French cloud provider. Not because American tech is bad. Because American law can demand access to it anywhere. Europe's sovereignty problem just became Europe's vendor opportunity. thenextweb.com/news/airbus-scaleway…
17030
Jarmo Lahtiranta @naranek.bsky.social · 14/07/2026
Mies on taistellut Ukrainassa, mutta Kelan kanssa taistelu on silti liikaa www.hs.fi/maailma/art-...
Kelan kuntoutuspsykoterapiaan Jarno ei ole hakenut, ainakaan vielä.

”Toistaiseksi on niin aikaa vievää ja haastavaa edes päästä julkisiin mielenterveyspalveluihin, että en ole vielä Kelan kanssa taistellut”, hän kertoo.

Taistelulla hän tarkoittaa prosessia, jonka Kelan kuntoutuspsykoterapiaan hakeminen vaatii.
010
Reposted by Jarmo Lahtiranta
Tiedetäti (Dr. Laura Nissin) @tiedetati.bsky.social · 24/06/2026
Muistatteko DOGEn, siis Elon Muskin johtaman viraston jossa pikkuelonit saksivat kaikkea tutkimusta mikä kuulosti heidän korviin sellaiselta joka voi tuottaa ikäviä tuloksia. Pikkasen samanlaiset vibat tässä
1117027
Reposted by Jarmo Lahtiranta
Vale @vale.rocks · 19/06/2026
There are only two file formats: disguised zips and renamed text files. JSON? Text. EPUB? Zip. CSV? Text. EXE? Zip. SVG? Text. DOCX? Zip. ICS? Text. APK? Zip.
451063264
Reposted by Jarmo Lahtiranta
Scott Jenson @jenson.org · 19/06/2026
I visited the Helsinki Library and it has a frigg'n makerspace in the middle of it! Laster cutters, 3D printers, Vinyl cutters, all for nearly free. It also has "video game rooms", general meeting rooms, 2 cafes and a restaurant! It's astounding what you can have if you fund public works.
3rd floor of the Helsinki Library
2456
Reposted by Jarmo Lahtiranta
Spooky Blaylock 🎃🕷️ @velodus.bsky.social · 29/05/2026
This is such a cool explosion. Like if you ever find yourself in a situation where you need to explode, do it like this.
824036
Reposted by Jarmo Lahtiranta
Adam Shostack @adamshostack.bsky.social · 28/05/2026
"Focus on high priority threats" sounds obvious. I'm not sure it is. New post on why unstructured prioritization is its own kind of risk, and what to do about it. shostack.org/blog/focus-o...
shostack.org
Shostack + Friends Blog > Focus on high priority threats(?)
It’s easy to think prioritization is an easy problem, but it’s one deserving careful consideration.
002
Reposted by Jarmo Lahtiranta
Democrat Cats @democratcats.bsky.social · 23/05/2026
Morning Kitten #Caturdayl
762584462
Reposted by Jarmo Lahtiranta
J. Michael Straczynski @straczynski.bsky.social · 11/05/2026
Remember when everyone was saying AI would replace/displace script writers and prose authors, and it was all over the news...then suddenly nobody was talking about it and it never happened? Here's part one of why...and why that was deliberate. jmichaelstraczynski.substack.com/p/silence-wh...
821261
Reposted by Jarmo Lahtiranta
Benn Jordan @bennjordan.bsky.social · 10/05/2026
Don't worry I shaved the beard.
15572161
Reposted by Jarmo Lahtiranta
Marcus Hutchins @malwaretech.com · 30/04/2026
Listening to infosec people freak out over Mythos is so tiring. Like, bro, your local water treatment plant runs Windows XP, your mobile provider's hardware is older than you are, and the protocol that routes internet traffic is secured by everyone just agreeing that hijacking it would be uncool.
28756180
Jarmo Lahtiranta @naranek.bsky.social · 23/04/2026
"Tämä riski tunnistettiin jo eduskunta­käsittelyvaiheessa, mutta muutosta opiskelijan velvollisuuksiin ei tullut, vaikka olimme opiskelijoiden tilanteesta huolissamme" Aika moniin asioihin ei ole tullut valitettavasti muutosta, vaikka olen ollut niistä huolissani. www.hs.fi/politiikka/a...
hs.fi
Sosiaaliturva | Kyllä: opiskelupaikasta pitää erota, jotta voi saada työttömyystukea
Jos opiskelija joutuu hakemaan työttömyysetuutta, ei opintojen edistämisen keskeyttäminen riitä. Pääsääntö on, että opiskelupaikka pitää jättää kokonaan.
000
Reposted by Jarmo Lahtiranta
Zach Rabiroff @zachrabiroff.com · 19/04/2026
49173483852
Jarmo Lahtiranta @naranek.bsky.social · 22/04/2026
Guess how many companies have gone out of business because of a cybersecurity incident since 2001. Then check this out.
010
Reposted by Jarmo Lahtiranta
Marie Le Conte @youngvulgarian.marieleconte.com · 12/04/2026
I'm blockading the strait of Hormuz and so's my wife
35103198
Reposted by Jarmo Lahtiranta
Scott Jenson @jenson.org · 12/04/2026
Good example of the particle-wave aspect of LLMs: These tools can allow you to do amazing things very quickly, but they are often the wrong things. Something is still missing. annaecook.com/writing/2026...
annaecook.com
AI Prototyping: Harder. Worser. Faster. Wronger. — Anna E. Cook
As teams use AI tools to generate high-fidelity prototypes, the focus shifts to output instead of purpose. Prototyping should be about testing ideas and learning what actually works before building.
0237
Reposted by Jarmo Lahtiranta
Dr. Skylar Grayson @skylargrayson.bsky.social · 04/04/2026
NASA just dropped this image of Artemis II astronaut Christina Koch looking back at us. The first woman to ever see our planet in its entirety. I’m not crying you’re crying 🥹🔭🧪 📸: NASA
345362957567
Reposted by Jarmo Lahtiranta
David Buchanan @retr0.id · 31/03/2026
have you seen the new supply chain vuln? don't update tubu. it's literally on heebee. they got poodee's deps. they infiltrated dippy. roll back weeno. disable scripts in ~/.gumpyrc. it's in poob. do not install poob. do not update poob. uninstall poob right now. poob has it in for you.
262844848
Reposted by Jarmo Lahtiranta
Johanna Kukka @johannakukka.bsky.social · 27/03/2026
Ihmiset, jotka lumoutuvat vakuuttavan kuuloisesta, mutta merkityksettömästä kielestä: - kyseenalaistavat vähemmän omia käsityksiä - ongelmanratkaisukyky on heikompi - tunnistavat huonommin loogisia ristiriitoja Nimenomainen ongelma myös tekoälyn kanssa. www.hs.fi/visio/art-20...
hs.fi
Johtaminen | Tutkimus: Bisnesjargonia rakastavat tekevät huonoja päätöksiä
Bisnesjargonia on pidetty pitkään lähinnä ärsyttävänä ilmiönä. Nyt tuore tutkimus osoittaa, että sillä on yhteys myös ajattelun laatuun: ihmiset, jotka pitävät tällaista puhetta vakuuttavana, tekevät ...
0397
Reposted by Jarmo Lahtiranta
J. Michael Straczynski @straczynski.bsky.social · 26/03/2026
A bit of news.... deadline.com/2026/03/vane...
deadline.com
Vanessa Kirby & Yahya Abdul-Mateen II To Star In 'Liminal' (EXCLUSIVE)
Vanessa Kirby and Yahya Abdul-Mateen are set to star in 'Liminal,' an Apple sci-fi thriller directed by Louis Leterrier.
813816
Reposted by Jarmo Lahtiranta
Johanna Kukka @johannakukka.bsky.social · 23/03/2026
Jos haluat tietää, miten korkea talo on rakenteilla, katso miten syvälle perusta kaivetaan. Jos haluat tietää, miten korkealle joku tähtää, katso miten syvälle hän perusasiat takoo. Mitä syvemmät juuret, sitä korkeammalle voi kurottaa. Kaivelua ja kurottelua tähänkin päivään😘
3383
Reposted by Jarmo Lahtiranta
ProPublica @propublica.org · 18/03/2026
NEW: Federal Cyber Experts Thought Microsoft’s Cloud Was “a Pile of Shit.” They Approved It Anyway. A program created to protect the government against cyber threats authorized a sprawling Microsoft cloud product, despite the company’s inability to fully explain how it protects sensitive data.
propublica.org
Federal Cyber Experts Thought Microsoft’s Cloud Was “a Pile of Shit.” They Approved It Anyway.
A federal program created to protect the government against cyber threats authorized a sprawling Microsoft cloud product, despite the company’s inability to fully explain how it protects sensitive data.
13781313
Reposted by Jarmo Lahtiranta
Active Measures, LLC @activemeasures.bsky.social · 10/03/2026
the tankers yearn for the mines
561095
Reposted by Jarmo Lahtiranta
Corn Anon @cornanon.bsky.social · 03/03/2026
TFW you put your main SIEM in the cloud for resilience but it was hosted in the datacenter that ate a ballistic missile.
43710
Reposted by Jarmo Lahtiranta
Moira Donegan @moiradonegan.bsky.social · 23/02/2026
Why do I have to pretend that I'm going to print something in order to save it as a PDF. Why do I have to engage in a little ruse.
335191502875
Jarmo Lahtiranta @naranek.bsky.social · 14/02/2026
Time for a rewatch? cordcuttersnews.com/babylon-5-is...
cordcuttersnews.com
Babylon 5 Is Now Free to Watch On YouTube | Cord Cutters News
In a move that has delighted fans of classic science fiction, Warner Bros. Discovery has begun uploading full episodes of the iconic series Babylon 5 to YouTube, providing free access to the show just...
000
Reposted by Jarmo Lahtiranta
WOR$T GIRL IN ACADEMIA @medievaliste.bsky.social · 12/02/2026
AI is not inevitable. If we had sane people in government that were not in thrall to billionaire tech CEOs, LLMs could be regulated, forced to obey existing copyright laws, and banned from places where their use is inappropriate, such as college classes. This should be a moderate position.
833994
Reposted by Jarmo Lahtiranta
stacksmashing @stacksmashing.bsky.social · 28/01/2026
The new AirTags 2 just arrived! Time to take them apart 🧵
414429
Reposted by Jarmo Lahtiranta
Jimmy Two Hands (summerjimbo era) @jimmytwohands.bsky.social · 27/01/2024
Happy large boulder the size of a small boulder day for all who celebrate
large boulder the size of a small boulder tweet from San Miguel sheriff, dated 1/27/20
6475083563
Reposted by Jarmo Lahtiranta
Henry Mance @henrymance.ft.com · 26/01/2026
Bluesky idea: if people who didn't agree with you change their opinions so that they do agree with you, why not be happy that you are making progress - rather than complaining that they are "only just catching up"?
7221709170
Reposted by Jarmo Lahtiranta
Lesley Carhart @hacks4pancakes.com · 16/01/2026
-hacks4pancakes- • 1d
The reason the good faith seniors on here are posting that the junior / mid level market is bad (it is) is because we have watched it crash in real time and a lotta of us are dealing with serious fallout as both hiring managers or mentors.
It's genuinely a good faith warning. It's not like, "don't get into the field we love". It's just that for a really long time you could get into cybersecurity with no degree and no IT experience because the demand was so high. And schools, influencers, and parents still play it off that it's like that. That people can work full time remote and make 80k entry salary.
It's not. It hasn't been for a couple years. We've been hit by "professionalizing" and oversaturation of graduates. Can you still get in with a sec+, a kali box and a dream? Maybe, if you really meet the right people and get lucky.
Pragmatically though, that won't be the case for 99.9% of young people now, and if we care at all we need to counter the "everything is rosy" message people are using to sell boot camps. We are getting hundreds of cybersecurity grads and laid off professionals with work rights applying for positions.
How can organizations even take the time to look beyond that at hundreds more juniors with no degree, criminal convictions, a GED, needing a' v sponsor, etc?You really need to take it seriously and make yourself a top candidate. And these days to be competitive you typically need a bachelors, certs, and some hands on IT work experience. You need a very good professional network.
That's not true of every case. People will get lucky.
Or they'll have a security clearance or live in the right remote place for an in person only job. It happens.
Not often. The best thing we can do is try to enforce that they need to work seriously hard and have solid professional credentials.
TLDR we aren't all assholes; some of us are trying to save 20yos from falling for Uncle Bob putting them in a bootcamp to make an easy six figures.
1010338
Reposted by Jarmo Lahtiranta
Matt Massarella-Gill @3788mg.bsky.social · 15/01/2026
Heard a lad earlier talking about ‘Belgian whistles’ “A basic website costs 10k or 25k upwards if you want all the Belgian whistles” BELGIAN WHISTLES
1563215710
Reposted by Jarmo Lahtiranta
OSINT Intuit™ @urikikaski.bsky.social · 07/01/2026
Yesterday I published an analysis on the tanker MARINERA arguing that this was not a routine sanctions evasion case and not a simple oil shipment problem because the behavior around this vessel did not fit commercial logic and instead tracked with mission logic. 1/9
15124
Reposted by Jarmo Lahtiranta
Barry Dorrans @blowdart.me · 23/12/2025
An excel spreadsheet with each cell filled with the word Gloria
29804289
Reposted by Jarmo Lahtiranta
derek guy @dieworkwear.bsky.social · 22/12/2025
FYI, if you're outside the US, you can come here and just collect $3,000
2064703627
Jarmo Lahtiranta @naranek.bsky.social · 21/12/2025
It's about time
010
Reposted by Jarmo Lahtiranta
Jufo Peltomaa @jufopeltomaa.bsky.social · 20/12/2025
Cool stuff! www.scientificamerican.com/article/the-...
scientificamerican.com
10 Fascinating Math Findings of 2025
Hidden Fibonacci numbers, a new shape and the search for a grand unified theory of mathematics are among our choices for most exciting findings of the year
171
Jarmo Lahtiranta @naranek.bsky.social · 18/12/2025
Jaksuhalit kaikille myyntihommia tekeville Paseille 😁
Kuvakaappaus hesarista: Se näyttää Pasilta, mutta myy kuin häkä.
010
Reposted by Jarmo Lahtiranta
Ian Coldwater 🧊🚫 @lookitup.baby · 17/12/2025
"Hello, We're Firefox, The Only Browser That Hasn't Hit Itself In The Dick With A Hammer. For years now, folks use us because of our un-hammered dick. Now, you may be wondering why today we've brought this hammer and pulled out our dick. Well I'm glad you asked-"
6675542915
Reposted by Jarmo Lahtiranta
Scott Jenson @jenson.org · 12/12/2025
My Ubuntu Summit talk is up! Where I talk about: 1. How Desktop UX is effectively dead 2. Why I hate the term UX/UI with the heat of 1000 suns 3. How OSS can actually innovate in #ux www.youtube.com/watch?v=1fZT...
youtube.com
Are we stuck with the same Desktop UX forever? | Ubuntu Summit 25.10
YouTube video by Canonical Ubuntu
1415332
Reposted by Jarmo Lahtiranta
securefirmware @securefirmware.bsky.social · 16/12/2025
🚀 Big news! EMBA 2.0.0 is here! 🎉 ✅ 95% firmware emulation success rate — crushing older tools like Firmadyne & FirmAE! ✅ New **4.14.336 LTS Kernel** for better performance in the emulation process. ✅ SBOM integration via Dependency Track API for seamless vulnerability tracking.
github.com
Release EMBA v2.0.0 - A brave new world of firmware analysis · e-m-b-a/emba
The last few weeks looked a bit more silent to the outside ... but cool things were going on in the background. Now, it is time to share all the great things we were working on ;) In the early day...
121
Reposted by Jarmo Lahtiranta
Kelly Shortridge @shortridge.bsky.social · 05/12/2025
⚠️ update on #React2Shell After the POC dropped ~21:04 GMT today, Fastly detected a profound proliferation in the # of requests triggering our NGWAF signal for React2Shell (see graph). We strongly recommend you immediately identify and update your React / Next.js apps + apply proactive protection.
Area chart displaying hourly volume of requests triggering Fastly's NGWAF signals for CVEs 2025-55182 & 2025-66478. The chart shows no signals prior to 7pm GMT, a small spike between 7-9pm GMT, followed by a spike at 10pm GMT, and a massive spike at 11pm GMT.
1188