Sign in

Federico Maggi

@phretor.bsky.social
389 followers 116 following 57 posts

Cybersecurity engineer, researcher, and advisor with broad technical and scientific experience on designing, analyzing, and testing security-critical systems. 🔗 trustial.org

PostsRepliesMedia
Federico Maggi @phretor.bsky.social · 04/08/2026
I wanted a PCB badge for @defcon.bsky.social just for the heck of it. I’ve done this before @kicad.org, but this time I wanted to give LLMs a go. I went through this with an open mind: I wanted to see what LLMs were capable of, while having a little fun. trustial.substack.com/p/i-let-gpt-...
trustial.substack.com
I let GPT + Opus build a wearable PCB badge from a paper sketch
LLMs successfully designed hardware and firmware entirely, with human guidance, although they failed at detecting a loop between nets.
084
Federico Maggi @phretor.bsky.social · 24/06/2026
Dear paper authors, defining the formulas of TP, FP, F1-score and showing the CLI to call the Python script to run the experiment is a big, big turn off. Please, don’t do this in your papers. And if you really need to, use an appendix. 😕
000
Federico Maggi @phretor.bsky.social · 21/06/2026
The folks at @siderolabs.com made it a ONE line to secure booting a Talos Linux based Kubernetes node via PXE. No need to mess around with USB keys, even for small home setups it’s a breeze! Zero excuses for not enabling secure boot. ➡️ Start here factory.talos.dev
factory.talos.dev
Image Factory
052
Federico Maggi @phretor.bsky.social · 24/04/2026
Pi + DeepSeekV4 is next-level stuff folks.
000
Federico Maggi @phretor.bsky.social · 17/04/2026
"NVD is deprioritizing, EUVD is nascent but may go the same way, and other CVE programs, such as MITRE, have had funding scares." "That era is officially over." - way to go @nistcybersecurity.bsky.social www.aikido.dev/blog/nist-nv... by @campuscodi.risky.biz news.risky.biz/risky-bullet...
aikido.dev
NIST NVD changes 2026: what security teams need to know
NIST will no longer enrich most CVEs. Here's what changes, what breaks, and what comes next.
000
Federico Maggi @phretor.bsky.social · 11/02/2026
Try the ChatGPT version: chatgpt.com/g/g-69817ef7... Prefer Claude or other tools? Here we go: github.com/phretor/cybe... Based on my "Cybersecurity Needs Supercommunicators" blog series: trustial.org/blog/become-... #infosec #cybersecurity #publicspeaking #AI
chatgpt.com
000
Federico Maggi @phretor.bsky.social · 11/02/2026
I just made my myself a little less necessary this year. I open-sourced an AI coaching skill that guides you (as I would do) during a 2-months speaker coaching session. Works with ChatGPT, Claude, Gemini, or any LLM — just load the prompt and start preparing. [1/2] ⬇️
111
Federico Maggi @phretor.bsky.social · 26/01/2026
from my @blackhatevents.bsky.social session -> trustial.org/blog/become-... send me talks to dissect. I'll reverse the content design & delivery (not the content itself, that's yours truly). #infosec #BlackHat #PayloadDelivered
trustial.org
Become a Cybersecurity Supercommunicator
How to turn your deep technical expertise and knowledge into clear narrative, and how to deliver a memorable presentation.
000
Federico Maggi @phretor.bsky.social · 26/01/2026
Part 2 dropped. 🧵[1/2] tl;dr: your slides are not your talk. skip the template skip the agenda (no spoilers) skip the "about me" ego slide 💣 start from the LAST slide: your 280-char core message 😱 then work backward. Full framework + slides ...
trustial.org
120
Federico Maggi @phretor.bsky.social · 11/01/2026
Let's see how much this will cost...
010
Federico Maggi @phretor.bsky.social · 09/01/2026
000
Reposted by Federico Maggi
Federico Maggi @phretor.bsky.social · 09/01/2026
Zotero just beats all bookmarking apps/services on customizability, storage, data control, price. $120/year for unlimited storage, when you save resources (e.g., websites, PDF), you get a local and remote self-contained snapshot on an actual file, and you can full-text search
011
Federico Maggi @phretor.bsky.social · 09/01/2026
Zotero just beats all bookmarking apps/services on customizability, storage, data control, price. $120/year for unlimited storage, when you save resources (e.g., websites, PDF), you get a local and remote self-contained snapshot on an actual file, and you can full-text search
011
Federico Maggi @phretor.bsky.social · 09/01/2026
Without knowing it existed, that’s what I used to iteratively get to that point.
000
Federico Maggi @phretor.bsky.social · 08/01/2026
I'm thinking of a good classification system. I prompted GPT 5.2 (w/ deep thinking) with the famous timeline by @xenokovah.bsky.social and a hint of some must-have labels, and it proposed an extension, which I like. Happy to hear any feedback.
100
Federico Maggi @phretor.bsky.social · 08/01/2026
Moved to claude-haiku-4-5-20251001 as my local GPU was suffering. Result isn't bad at all. Will have to tweak the prompt to get it to spit out: - 1 TL;DR topic sentence - 3 keywords - 3 top topics
000
Federico Maggi @phretor.bsky.social · 08/01/2026
Let's see how qwen2.5:7b-instruct does with this prompt.
000
Federico Maggi @phretor.bsky.social · 08/01/2026
Let's cook something for 2026
000
Federico Maggi @phretor.bsky.social · 27/10/2025
I’ve had to fight with the ego of the author for the first 20% of the book. I’ve thought about dropping it a few times, but I’m glad I didn’t. The second half of the book is really inspiring.
010
Federico Maggi @phretor.bsky.social · 27/10/2025
I’ve had to fight with the ego of the author for the first 20% of the book. I’ve thought about dropping it a few times, but I’m glad I didn’t. The second half of the book is really inspiring.
010
Federico Maggi @phretor.bsky.social · 25/10/2025
I’ve been teaching my daughter how to solder and after we’re done with this last week, my wife reported that my daughter had a boost in her math scores. The stolen calculator is now back among the other assembled soldering kits.
020
Federico Maggi @phretor.bsky.social · 18/10/2025
Dedicated to all the folks at the defcon.run club. Next year we should bring defcon.run at @nohatcon.bsky.social strava.app.link/42XOKaJCyXb
010
Federico Maggi @phretor.bsky.social · 15/10/2025
I’m helping a friend going through this rough time while his father is passing away. Donate what you can. Forward if you can’t donate. Thank you. gofund.me/a6caedb15
gofund.me
Donate to Not all care is free in Italy, organized by Federico Maggi
I’m helping a friend who’s counting the days of his father, before saying goodbye for the… Federico Maggi needs your support for Not all care is free in Italy
120
Federico Maggi @phretor.bsky.social · 13/10/2025
Oh boy this subreddit is so addictive www.reddit.com/r/Infographi...
reddit.com
Infographics
r/Infographics
000
Federico Maggi @phretor.bsky.social · 10/10/2025
Looks like someone tore down a BostonDynamics Spot and published a 200 pages detailed report. www.jiocloud.com/l/?u=jAMBhPd...
jiocloud.com
translated doc boston dynamics.pdf
View the files shared with you on JioAICloud.
100
Federico Maggi @phretor.bsky.social · 27/09/2025
“Dad, at school we’re not talking about actual bugs. We’re talking more about, like, …insects!”
000
Federico Maggi @phretor.bsky.social · 26/09/2025
“Dad, at school we’re not talking about actual bugs. We’re talking more about, like, …insects!” 🐜
020
Federico Maggi @phretor.bsky.social · 25/09/2025
Humbled to be part of @nohatcon.bsky.social and can’t wait to spend some time in motherland with Italian hackers and friends!
010
Federico Maggi @phretor.bsky.social · 24/09/2025
Hey, you guys, look at this. Hey, you guys ever heard of this guy? Okay it says, "Chester Copperpot: Missing while in pursuit of local legend. Reclusive scavenger claims, 'I have the key to One-eyed Willy'." Whoa, do you guys realize what we could do?
000
Federico Maggi @phretor.bsky.social · 21/09/2025
Have a security talk you think could hit harder? Drop the link and I’ll dissect the delivery, not the content. (Assuming it’s already conference-grade 👀) #Cybersecurity #BlackHat #infosec #PublicSpeaking #Trustial #PayloadDelivered
000
Federico Maggi @phretor.bsky.social · 21/09/2025
You can drop the best 0-day or present a novel attack vector… But if the audience doesn’t get it, it didn’t land. A good talk isn’t just clear—it’s designed. → To make people care. → To move decisions. → To be remembered.
110
Federico Maggi @phretor.bsky.social · 21/09/2025
Cybersecurity doesn’t just need brilliant minds. It needs supercommunicators—people who can turn complex ideas into clarity, urgency, and action. Here’s what I tell the speakers I coach for Black Hat 🧵 trustial.org/blog/cyberse...
trustial.org
Cybersecurity Needs Supercommunicators
The skills cybersecurity needs most? Deep experts who can clearly explain the balance between security risk and business priorities.
110
Federico Maggi @phretor.bsky.social · 15/09/2025
Today we’re studying variables with Python. Using containers to hold paper notes with values scribbled on them. Ideally operands should be of a different color, but I ran out of post-its 🙂‍↕️ Highly recommending “Python for Kids” by Jason Briggs. nostarch.com/python-kids-...
030
Federico Maggi @phretor.bsky.social · 07/09/2025
You should visit Starbucks Reserve Roastery in Milan - archive.starbucks.com/record/starb...
archive.starbucks.com
Starbucks Reserve Roastery in Milan
The Starbucks Archive is our way of opening our story to you
000
Federico Maggi @phretor.bsky.social · 01/09/2025
Testing Buffer
000
Federico Maggi @phretor.bsky.social · 17/08/2025
010
Federico Maggi @phretor.bsky.social · 05/05/2025
When you confuse “m” with “M”.
000
Federico Maggi @phretor.bsky.social · 11/04/2025
Anyone has this MCU programmer by SONIX? www.sonix.com.tw/article-en-3...
000
Federico Maggi @phretor.bsky.social · 12/03/2025
Very happy to be keynoting at #NoHat2025 and talk about how to secure all that silicon, firmware, and hardware that powers modern AI datacenters. Thanks @nohatcon.bsky.social for this opportunity!
040
Federico Maggi @phretor.bsky.social · 04/03/2025
If you’re from the 80s and you’ve watched The Goonies at least once, stop what you’re doing and listen to this www.audible.com/pd/B0DY7THK52?sourc…
audible.com
The Goonies | Pop-Cult Parent | Podcasts on Audible | Audible.com
Check out this great listen on Audible.com. Does The Goonies still hold up? The Crew reviews The Goonies which celebrates its 40-year anniversary.Support the showFind us on all social media @popcultcrew Visit us at ⁠https://popcultcrew.buzzsprout.com Don’t forget to Rate us, Review, and Subs...
000
Reposted by Federico Maggi
Filippo Valsorda @filippo.abyssdomain.expert · 02/01/2025
I am convinced 99% of websites should use magic links + passkeys. It bypasses all (debatable) portability objections to passkeys, it’s at least as secure as email-based recovery, as fast as a password manager, it’s available to all users… and importantly, no passwords!
2015431
Federico Maggi @phretor.bsky.social · 01/01/2025
In the old times, TVs came with not only the instructions, but with the schematics AND gerber printout!
030
Reposted by Federico Maggi
Catalin Cimpanu @campuscodi.risky.biz · 10/12/2024
BadRAM - new CPU attack on AMD SEV modules badram.eu
032
Reposted by Federico Maggi
D̒͂̕ᵈăᵃn̕ᶰ Ť̾̾̓͐͒͠ᵗe͗̑́̋̂́͡ᵉn̅ᶰtᵗl̀̓͘ᶫe̓̒̂̚ᵉrʳ @viss.hax.lol · 07/12/2024
say, who remembers playing syndicate as a kid?
371
Federico Maggi @phretor.bsky.social · 04/12/2024
What a horrible time to be on the web
020
Reposted by Federico Maggi
Catalin Cimpanu @campuscodi.risky.biz · 03/12/2024
Industry Dive, the parent company of CybersecurityDive, is merging with TechTarget's Informa Tech www.cybersecuritydive.com/news/informa...
cybersecuritydive.com
Note from the Editor-in-Chief
A change in ownership and what it means for our readers.
001
Federico Maggi @phretor.bsky.social · 28/11/2024
I pay to be part of Strava in the same way I pay to be part of a gym or exclusive book club, because I like what I do and I perceive value. Anyone knows other interest-specific socials worth exploring?
020
Federico Maggi @phretor.bsky.social · 28/11/2024
Social networks like Strava work to build and sell value to their customers, as opposed to general-interest socials, who sell users’ attention to the highest bidders and work to maximize addictive content.
100
Federico Maggi @phretor.bsky.social · 28/11/2024
It goes deeply into the public and private incentive system that keeps the first generation of social networks running the way they do, how this is a problem for individuals and societies at large, examining causes and responsibilities.
100