Sign in

Winnona

@winnona.bsky.social
1.6K followers 148 following 45 posts

@DistrictCon Founder. Hacker and attorney. @CyberStatecraft / @BelferCenter fellow, ex-Google threat research. Dog mom. Opinions=my own 👩🏻‍💻

PostsRepliesMedia
Winnona @winnona.bsky.social · 30/08/2026
Mark your calendars!! @districtcon.bsky.social tickets sold out in 10 seconds last year…
011
Reposted by Winnona
Jay Lagorio 🅅 @jay.lagor.io · 21/08/2026
Submit submit submit! Make me read your work whether I want to or not!
031
Reposted by Winnona
DistrictCon @districtcon.bsky.social · 21/08/2026
OUR CALL FOR PAPERS IS OFFICIALLY OPEN! We want to see all of your hacking magic, informing policy, or roundtable idea submissions. For more ideas, you can check out our page or submit directly! sessionize.com/districtcon www.districtcon.org/cfp
068
Reposted by Winnona
DistrictCon @districtcon.bsky.social · 13/05/2026
The Junkyard Call for Bugs is officially open! 👾 www.districtcon.org/junkyard For additional information, please reference our Disclosure Guidance doc: lnkd.in/ewjswJyf And if you missed last years presentations, check them out on YouTube now: www.youtube.com/@DistrictCon...
189
Winnona @winnona.bsky.social · 08/05/2026
LFG. Our all volunteer team is stoked to put another DisCo on for all y’all. 🪩✨🤘
060
Reposted by Winnona
DistrictCon @districtcon.bsky.social · 08/05/2026
DistrictCon Year 1 Talks are officially live on our YouTube Channel! Check it out: youtube.com/watch?v=RDqX... A HUGE shoutout to our incredible speaker line up that came out through the snow to share their amazing content with us.
youtube.com
Ian Levy (Keynote) : From protecting a country to security guard in a bookshop
YouTube video by DistrictCon
0410
Reposted by Winnona
Jay Lagorio 🅅 @jay.lagor.io · 03/02/2026
Just one week late posting this after being snowed into the hotel for two days longer than planned. How lucky was I to help get something new(ish) off the ground in its second year amidst its second calamity and to help speakers showcase their work in the CFP and on the mainstage!
121
Reposted by Winnona
DistrictCon @districtcon.bsky.social · 22/01/2026
DISTRICTCON IS STILL A GO! We are excited to see you all on Saturday, January 24 as we are still going through our normal programming! While we are unable to process refunds, we are adding virtual components to Saturday AND Sunday including a livestream for public sessions for ticket holders.
2168
Reposted by Winnona
DistrictCon @districtcon.bsky.social · 23/01/2026
Vibes are high for DistrictCon! We’ll see you tomorrow 😎
0143
Reposted by Winnona
Martin Wendiggensen @machinavelli.com · 19/01/2026
The @districtcon.bsky.social gods ask for their due. The conference may proceed but one natural crisis will occur
Screenshot of Snowstorm hitting east coast
061
Reposted by Winnona
DistrictCon @districtcon.bsky.social · 09/01/2026
HAPPY FRIDAY!!! Our Agenda is now live! Check it out! Check it out: www.districtcon.org/speakers
31712
Reposted by Winnona
Martin Wendiggensen @machinavelli.com · 11/11/2025
One fun thing the @dreadnode.bsky.social CTI agent is unearthing from the Great Firewall leaks is how many of the employees of this Chinese deep-packet inspection/malware intro/censorship company are also part-time (PhD) students If it can work for them, it can work for me! .
052
Reposted by Winnona
DistrictCon @districtcon.bsky.social · 31/10/2025
Interested in Jump The Wall? Applications close Nov 7 🔥 www.districtcon.org/jtw
034
Reposted by Winnona
Jenna McLaughlin @jennamclaughlin.bsky.social · 23/10/2025
Interesting paper out of Dartmouth about private sector's role in U.S. offensive cyber landscape. Recommends a national offensive cyber strategy and a pilot program for private sector access to "low-risk" targets like crypto scammers and ransomware operators: sergeybratus.gitlab.io/papers/Dartm...
sergeybratus.gitlab.io
0134
Reposted by Winnona
Jay Lagorio 🅅 @jay.lagor.io · 27/10/2025
This is going to be SO good!
041
Reposted by Winnona
DistrictCon @districtcon.bsky.social · 27/10/2025
We're officially announcing our speakers DistrictCon Year 1! Check out our incredible lineup: www.districtcon.org/speakers This also includes our Day 1 & Day 2 Keynotes from Ian Levy and Dan Ridge. And don't forget, GA tickets go on sale November 16! See you in January! 🪩
01113
Reposted by Winnona
Martin Wendiggensen @machinavelli.com · 27/10/2025
Come see ya boy
041
Reposted by Winnona
Martin Wendiggensen @machinavelli.com · 25/10/2025
In early 2019 while at the German Parliament‘s Foreign Affairs Committee, I imagined this exact scenario: China using the rare earth supply chain to get fully visibility and self-reinforcing leverage. When urged to develop other sources, such as Malaysia (where I even went), Merkel gov did nothing.
bloomberg.com
German Firms Hand Over Secrets That China Could Use for Leverage
As German firms wrestle with new Chinese controls on rare earths, they are handing Beijing sensitive supply chain information it could potentially use to squeeze manufacturers or shut down production ...
132
Reposted by Winnona
Dave Aitel @daveaitel.bsky.social · 20/10/2025
sergeybratus.gitlab.io/papers/Dartm...
sergeybratus.gitlab.io
031
Reposted by Winnona
Cynthia Brumfield @metacurity.com · 20/10/2025
So my other big piece of the day is an inside look at the struggle for the future of the CVE programthat just went live at CyberScoop. 1/2 cyberscoop.com/cve-program-...
cyberscoop.com
Behind the struggle for control of the CVE program
Following a funding scare that nearly shuttered the CVE program, outside experts and CISA are positioning to take charge of the 25-year-old system before the next funding crisis hits.
185
Reposted by Winnona
Martin Wendiggensen @machinavelli.com · 20/10/2025
Washington is rethinking the relationship between government agencies and the private sector in offensive cyber, considering giving the private sector a more active role. Perfect timing for @winnona.bsky.social & Sergey Bratus to put out this well-reasoned and legally grounded perspective:
ists.dartmouth.edu
Publications
011
Reposted by Winnona
Dave Aitel @daveaitel.bsky.social · 06/10/2025
#offensiveaicon
051
Reposted by Winnona
Eric Geller @ericjgeller.com · 30/09/2025
If the CISA 2015 info-sharing law expires tomorrow, CISA the agency may eliminate its real-time threat indicator sharing database, according to a new DHS OIG report. www.oig.dhs.gov/sites/defaul... Participation in sharing program has been declining since 2020. Post-expiration plans unclear.
11710
Winnona @winnona.bsky.social · 26/08/2025
Mark your calendars!! 💕
010
Reposted by Winnona
Ami @amidanruo.bsky.social · 21/08/2025
Speaking as a Chinese person, in the Chinese culture, money is often given to others in a gesture of bribery.
943925590
Reposted by Winnona
Supriya @supriyam.bsky.social · 15/08/2025
districtcon.org/cfp
districtcon.org
Call For Papers — DistrictCon
042
Reposted by Winnona
pronto @pronto.bsky.social · 15/08/2025
I stopped by DistrictCon earlier this year, (no ticket) but was able to borrow a badge and such. The vibes were awesome, the people were great, and even with a multi-block power outage at the venue, they were still able to keep it going. I recommend this one in DC
121
Reposted by Winnona
DistrictCon @districtcon.bsky.social · 15/08/2025
Our Call for Papers is officially OPEN! We are looking for - Hacking Magic 👾🪄 (cool research, novel TTPs, tool releases, etc.) - Policy Roundtable Topics ⚖️ (specific cyber topics focused on geopolitics, ethics, legal frameworks, governance, etc.) www.districtcon.org/cfp
1138
Reposted by Winnona
Kim Zetter @kimzetter.bsky.social · 18/07/2025
How did China's top APT hackers come to be? Many were early "Honkers" - patriotic hackers who in late 90s launched low-skill cyberattacks against nations deemed disrespectful to China. But once Honkers developed their skills, PLA/MSS came calling. Based on great research by bsky.app/profile/eube...
wired.com
How China’s Patriotic ‘Honkers’ Became the Nation’s Elite Cyber Spies
A new report traces the history of the early wave of Chinese hackers who became the backbone of the state's espionage apparatus.
05627
Winnona @winnona.bsky.social · 12/07/2025
Was a ton of fun to talk about the 0day market and Pall Mall at Summercon! Thanks for having me 💕
031
Winnona @winnona.bsky.social · 09/07/2025
“alignment with CCP priorities offers privileged access to state resources, regulatory favor, and expanded commercial opportunities [to hackers]." NEW Phenomenal report on Chinese civil military fusion and cyber militias by Kieran Green: margin.re/mobilizing-c...
margin.re
Mobilizing Cyber Power: The Growing Role of Cyber Militias in China’s Network Warfare Force Structure
This report examines how China’s cybersecurity industry fields reserve and militia units in support of the PLA and national mobilization system.
051
Reposted by Winnona
DistrictCon @districtcon.bsky.social · 27/06/2025
submit to districtcon.org/junkyard 🐞
072
Reposted by Winnona
DistrictCon @districtcon.bsky.social · 07/07/2025
We’re proud to announce the Review Board for DistrictCon’s call for papers! Our CFP will open next month, and we're excited to receive all your submissions! www.districtcon.org/cfp
186
Reposted by Winnona
Ian Campbell @neurovagrant.bsky.social · 28/06/2025
It's almost like surveillance capitalism is a problem for *everyone*
114151
Reposted by Winnona
Mark Griffin @seeinglogic.bsky.social · 25/06/2025
Extremely interesting comparisons in cybersecurity... The 1️⃣ thing to focus on? Talent. Talented people have outsize impacts in software and cybersecurity. And expertise drives better policy (eventually)! Pipelines to build more experts pay compounding returns.
031
Reposted by Winnona
Martin Wendiggensen @machinavelli.com · 25/06/2025
Winnona out here doing amazing work, as always! Definitely recommend reading!
121
Reposted by Winnona
Robert Wilson @frcolumba.bsky.social · 25/06/2025
I wonder how many students coming out of NSA CAE-CO programs are able to "do" this kind of work? Less than 100? "Peripheral" state schools, even R1s with CAE designations are probably producing zero. Our emphasis is completely on defense.
111
Winnona @winnona.bsky.social · 25/06/2025
🚨 NEW PAPER on the 0day Supply Chain 🚨: I gathered open source data & interviewed Gov employees, VR and china researchers to figure out what the zero day marketplace looks like in the U.S. and how it compares to China. key findings below ⬇️- 0/🧵 
www.atlanticcouncil.org/in-depth-res...
atlanticcouncil.org
Crash (exploit) and burn: Securing the offensive cyber supply chain to counter China in cyberspace
If the United States wishes to compete in cyberspace, it must compete against China to secure its offensive cyber supply chain.
22717
Reposted by Winnona
Joseph Cox @josephcox.bsky.social · 29/05/2025
New from 404 Media: a cop in Texas performed a nationwide search of license plate reading cameras for a woman who got an abortion, according to multiple sets of data we've reviewed. Included cameras where abortion is legal, like Washington and Illinois www.404media.co/a-texas-cop-...
404media.co
A Texas Cop Searched License Plate Cameras Nationwide for a Woman Who Got an Abortion
The sheriff said the woman self-administered the abortion and her family were concerned for her safety, so authorities searched through Flock cameras. Experts are still concerned that a cop in a state...
521272560
Reposted by Winnona
DistrictCon @districtcon.bsky.social · 28/05/2025
Submit via our Bugcrowd program to demonstrate real technical skill, support responsible disclosure, and bring joy (and chaos) to the hacker community. Thanks to @bugcrowd.com for their partnership and sponsorship of the contest! www.districtcon.org/junkyard
districtcon.org
The Junkyard — DistrictCon
071
Reposted by Winnona
DistrictCon @districtcon.bsky.social · 28/05/2025
🚨 CALLING ALL VULNERABILITY RESEARCHERS 🚨 The Junkyard is officially open! This is our live, on-stage pwnathon dedicated to end-of-life systems. Submit your bugs! Prizes range from $100 to $5,000 for categories like: ☄️ Most Impactful System 👾 Best Meme Target 👏 Most Engaging Presentation
12018
Winnona @winnona.bsky.social · 06/05/2025
IT’S HAPPENING!! So stoked to announce DisCo Year 1 - mark your calendars ❤️‍🔥❤️‍🔥❤️‍🔥
170
Reposted by Winnona
DistrictCon @districtcon.bsky.social · 02/04/2025
We are also aware that some of the video quality looks like it was filmed on a potato... we plan to fix that for next year. And have power! :)
041
Reposted by Winnona
DistrictCon @districtcon.bsky.social · 02/04/2025
🎥 DistrictCon Year 0 recordings are now live on YouTube! Check out the AMAZING content from our Track 1 Speakers, Junkyard competitors, and keynotes! www.youtube.com/@DistrictCon
youtube.com
DistrictCon
DistrictCon is a DC hacker con, focusing on hacking together and exchanging ideas over typical talk tracks. We want to grow the community through action and engagement that focuses on the greater go...
1106
Reposted by Winnona
John Pfaff @johnpfaff.bsky.social · 30/03/2025
Bunch shows how it is done. The way he points out what the EO *legally* does (directs the VP, acting as just one of many regents) vs what it claims to do (“change the Smithsonian!”—something POTUS can’t do) is fantastic. We need more of this, less ppl taking EOs as law.
272253769
Reposted by Winnona
Alexander Martin @alexmartin.bsky.social · 24/02/2025
This is a big deal. I suspect we'll be hearing more and more about China surpassing the US in terms of its cyber capabilities, both in quantity and quality, over the next few months and years. Great ✍️ from @timstarks.bsky.social
cyberscoop.com
Former NSA, Cyber Command chief Paul Nakasone says U.S. falling behind its enemies in cyberspace
In a wide-ranging speech and interview, Nakasone also talked about Trump administration moves and the shape of cyber offensive operations.
711146
Reposted by Winnona
Andrew (🎃) @athomashemlock.bsky.social · 23/02/2025
Look man, I'm not saying anything but I'm also not NOT saying anything
A meme about how it's weird this keeps happening
2215
Reposted by Winnona
Joseph Cox @josephcox.bsky.social · 24/02/2025
New from 404 Media: all 50 states have introduced right to repair legislation. Not all have passed, but it's just a massive milestone for the right to repair movement that just a few years ago was demonized by big tech www.404media.co/all-50-state...
404media.co
All 50 States Have Now Introduced Right to Repair Legislation
The legislation hasn't yet passed everywhere, but all 50 states introducing some form of right to repair legislation is a "tipping point” for the right to repair movement.
018742
Reposted by Winnona
Supriya @supriyam.bsky.social · 24/02/2025
Last week/end is still a blur, but I’m so grateful for the team and community that banded together to do this. #DistrictCon Year 0, you’re one for the books. @districtcon.bsky.social @winnona.bsky.social
3203