Space Rogue

Companies will put up all kinds obstacles to responsible disclosure for researchers to get around to make their own lives easier. But they often forget that in the end it is researcher who calls the shots. It is the researchers vuln and they can do whatever they want with it.

https://www.bleepingcomputer.com/news/security/disgruntled-researcher-leaks-bluehammer-windows-zero-day-exploit/#comments

#vulnerability #disclosure #responsibledisclosure #windows #microsoft

FYI: if you use the handle on your #rsac badge or unusual nickname expect to have to get your badge reprinted and wait in the super long and slow line. They’re verifying that badge names exactly match government ID. Worse than TSA. (I was still able to get her to put “Space Rogue” on it, but she didn’t want to.) #rsac2026

What if instead of trying to patch stuff that’s broken we fix it before it gets to the user? What if we got security tools to devs that were easy to use, and that could catch, flag, and fix real vulns before they ship?

That’s what excited me about Semgrep, their clarity of vision to build security tools that devs will actually use, and that security teams can trust.

Excited to share that I’ve joined Semgrep as a Staff Security Advocate!

I will be at RSA and BSidesSF, feel free to say hi!

The latest episode of 'Where Warlocks Stay up Late" dropped yesterday. Featuring yours truly. The interview goes pretty deep from growing up in Maine, working at Lotus, stories about L0pht you may not have heard before to getting fired from @stake@mastodon.social. Probably the most personal interview I have ever given.

https://www.youtube.com/watch?v=j6jhAugNqvE

#l0pht #spacerogue #warlocks

Three hours of blowing, Did six driveways and eight houses worth of sidewalk.
#snow #blizzard

The arena is empty, except for one man
Still driving and striving as fast as he can

The sun has gone down and the moon has come up
And long ago somebody left with the cup
But he's driving and striving and hugging the turns
And thinking of someone for whom he still burns

- Greg Brown
#cake #distance

Reminder to open and setup any gift gaming consoles before Christmas morning. Switch2 took 23 agonizing minutes to transfer data over from the first switch and several hours to download and install old games. #gaming #switch #christmas

How am I only now just finding this subreddit?
https://www.reddit.com/r/ISO8601/

I’ve been in this game long enough to watch the cybersecurity industry reinvent the same mistakes over and over.

I helped found one of the earliest public vulnerability research groups, L0pht Heavy Industries. I have sat in front of Congress and told them the internet was fragile, before it became daily news.
I’ve hacked systems, defended networks, led threat intelligence teams, and advised executives who finally realized security is a business issue.

(1/4)

I've decided to stop pussy footing around and I am now openly looking for my next challenge.
Interested in a company on the small to mid-size range with a cool story. Ideal position would be a combination of customer outreach, marketing and thought leadership. What ya got? #CyberSecurity

I know the conventional wisdom, and the historically popular choice, for a candy bag is a pillowcase, but as the person who hands out the candy, let me tell you, it is a very poor choice. It has large capacity, but it’s too hard to open, it drags on the ground and is difficult to carry. The best candy bag is a 2 1/2 gallon bucket. Easy Cary you can set it down easy access.