Jeff Moss

Founder of DEF CON & Black Hat. Member of the UK Gov Cybersecurity Advisory Board & The Council on Foreign Relations.

Working to get Hackers and Researchers a seat at the Policy table.

I'm interested in hacking, community, technology, privacy, security policy, and the intersection of civil society. (He/Him) Opinions are my own.

Previously member ONCD (2024-2025), CISA Cyber Security Advisory Council (2021-2025), and DHS Advisory Council (2009-2020)

2025-06-14

Big day today

Jeff Moss boosted:
2025-06-14

We now have a political assassin impersonating a police officer on the loose in Minnesota, which, aside from being horrifying in and of itself, underscores the danger of the proliferation of anonymous federal law enforcement deployments from a wide variety of unfamiliar agencies conducting aggressive immigration operations across the country.

Is that uniformed person who's stopping you or demanding entry to your home legit or a psychotic vigilante seeking to harm you? It's impossible to know.

Jeff Moss boosted:

To those who are participating in a #NoKings #protest tomorrow, thank you for standing up for #democracy. 💙 Please stay nonviolent, know your exits, and know your rights. Above all, please stay safe, my friends. ❤️

No Kings: nokings.org

Know Your Rights: aclu.org/know-your-rights/prot

Safe Protesting: hrc.org/resources/tips-for-pre

#ResistFascism #SaveDemocracy #ACLU #KnowYourRights #HumanRightsCampaign

Jeff Moss boosted:
2025-06-14

A cool write up from the @hackaday site, as well as a little history lesson to those too young to recongnize the dialer symbol in the #DEFCON logo

hackaday.com/2025/06/13/adapti

Jeff Moss boosted:
Maritime Hacking Villagemaritimehackingvillage@defcon.social
2025-06-13

☠️🏴‍☠️ YO HO! Meet the first character of our @defcon 33 cast: the infamous Pirate Queen herself.

Once just a sun-loving island cat swiping fish from tourists, Kitty Hegemon rose up when a greedy regime took over her tropical paradise. Upgraded by rebel tech wizards, she became Kitty the Pirate Hacker Queen, fierce leader of the cyber-pirate resistance.

Ready to join her crew? Grab your radios, fusion splicer, and phishing spear — the fight to free Isla Hexa begins.

#MaritimeHacking #DC33

Jeff Moss boosted:
2025-06-13

Less than two months until #DEFCON33! Time to start planning to make the most of your #DEFCON experience.

One of the best parts of DC is meeting other humans and bonding over shared interests. On the Parties, Meetups and Events page you’ll find a shockingly comprehensive list of group hangs. Whether you’re into Running or Ham Radio, Blanket Forts or Karaoke, we’ve got you covered.

Set aside some time for fun and
connection. Your people are waiting.

defcon.org/html/defcon-33/dc-3

#defconparties #defconevents #defcon meetups

Jeff Moss boosted:
Joseph Lorenzo Hall, PhDjoebeone@techpolicy.social
2025-06-13

Sen. Padilla Was Assaulted on Camera. Congress Must Defend Itself firstbranchforecast.substack.c

Jeff Moss boosted:
DEF CON Hardware Hacking Vill.DC_HHV@defcon.social
2025-06-13

HHV/SSV CFP acceptance emails have gone out. Please review and respond ASAP if you've received a response!
#defcon #defcon33

Jeff Moss boosted:
2025-06-12

Chris Hadnagy is appealing his lawsuit dismissal against us. We will post an update once we read it and have a better idea what the deal is.

On appeal you can argue matters of law, but not evidence, so we are guessing it will be a lot of complaints about how the judge must have misapplied legal precedent.
#DEFCON

courtlistener.com/docket/68094

Jeff Moss boosted:
2025-06-11

My drum and bass DEF CON 32 live set is finally out on my YT channel for you to enjoy! youtube.com/watch?v=1Cet7dqEPk
--
Miss Jackalope Twitch: twitch.tv/MissJackalope

DEF CON Music: youtube.com/@DEFCONMusicOffici

DEF CON Music Twitch twitch.tv/defconorg_entertainm

@defcon @Defcon_Music @dcparrot #defcon #defcon33

Hi! Screenshot of Miss Jackalope Djing at defcon 32 with a sort of crowd shot.
Jeff Moss boosted:
2025-06-11

@timbray @baldur @simon Google shows use of "AI" causes increased bug rate and marginally lower throughput (redmonk.com/rstephens/2024/11/) while Microsoft finds they reduce critical thinking (microsoft.com/en-us/research/u), but if you're surrounded by a culture that everything is obsolete within 6 months, it's easy to find a reason to disregard such work. Society's perception of this sociotechnical sector should not hinge on whether internal research groups at select companies publish reports that contradict their CEO's political and financial interests.

And yet, in this same survey we get these findings:

    if AI adoption increases by 25%, time spent doing valuable work is estimated to decrease 2.6%
    if AI adoption increases by 25%, estimated throughput delivery is expected to decrease by 1.5%
    if AI adoption increases by 25%, estimated delivery stability is expected to decrease by 7.2%

This report is showing that AI has a negative impact on throughput, stability, and time spent on valuable work.
Jeff Moss boosted:
2025-06-09

ICANN’s DNS Blocking Report Presents Three Key Recommendations torrentfreak.com/icanns-dns-bl

Jeff Moss boosted:
2025-06-08

A plane with no call sign is currently circling the area where the LA anti-ICE protests are taking place. It took off from March Air Reserve Base

Jeff Moss boosted:
2025-06-08

Your work in OSINT and Recon deserves a global stage.

@Recon Village at @Def CON 33 is calling for vendor-neutral, technical submissions — including case studies, automation, red team usage, and tracking innovations.

If your research can teach, challenge, or shift perspectives, now’s your time.

🗓 CFP deadline: June 15

🔗 zurl.co/AhAwU

#DEFCON #OSINT #ReconVillage #InfoSec #CyberIntel #CFP

Jeff Moss boosted:
2025-06-07

Cloudflare Warns EU About Extensive Piracy Overblocking, Calls for Safeguards torrentfreak.com/cloudflare-wa

2025-06-07

www-watson-ch.translate.goog/d

A friend sent me that as a heads up, apparently “W” is active in the conference & standards scene.

“Russia scandal at the Swiss secret service raises worrying questions

The Federal Intelligence Service (NDB) cooperated with the Russian IT security company Kaspersky for years and apparently ignored warnings from friendly intelligence agencies.”

Jeff Moss boosted:
2025-06-07

For many years, several of my colleagues, a few ex-students, and at least one former romantic interest have fervently hoped that I would become an extinguished professor.

Their prayers were for naught. I outlasted them.

cs.purdue.edu/news/articles/20

Jeff Moss boosted:
2025-06-06

In leaked audio we obtained, surveillance company Flock calls me an "activist reporter". I wrote about that here, and here is what the audio said: 404media.co/behind-the-blog-ac

To get the obvious bit out of the way: | am not an activist. | take my
independence from everyone incredibly seriously, to the point where | end up
annoying activists who provide me information. Over the years | have lost plenty
of sources—not sensitive ones, more like activists with tips—because | decide
to cover a particular story in my own way which I think is more accurate than
how they describe it, or fair, or in the public interest; or | don't do promotion for
whatever the activist's cause may be. One example: an activist said they wouldSomething else was in the leaked audio of the meeting we got. A Flock
executive described me as an “activist reporter.” Here's the relevant passage:
Garrett [Flock’s CEO is Garrett Langley] was talking about capabilities that were
possible to use with Nova, not that we were necessarily going to implement
when we use Nova. And in particular, one of those issues was around dark web
data, would Flock be able to supply that to our law enforcement customers, to
go solve really heinous crimes like internet crimes against children, child
pornography, human trafficking. Some really horrible parts of society. And
Garrett was looking at the potential of leveraging those tools. Unfortunately
what happened is, in the course of these internal, private meetings that we have
here at Flock, someone actually took that and leaked it to an activist reporter. If
you've seen some of the news that’s been coming out over the last couple
weeks, this same reporter is just circling around Flock, causing a lot of
distraction, and frankly reporting on things that are just not totally true. There's
maybe a hint of things that are true, of what's occurring, but it's not all there.
And so, what | wanted to just say is that we took this concept of using dark web
data in Nova and explored it, because investigators told us they wanted to do

it.
Jeff Moss boosted:
Fabio Manganiellofabio@manganiello.social
2025-06-06

Why Bell Labs worked so well, and could innovate so much, while today’s innovation, in spite of the huge private funding, goes in hype-and-fizzle cycles that leave relatively little behind, is a question I’ve been asking myself a lot in the past years.

And I think that the author of this article has hit the nail on its head on most of the reasons - but he didn’t take the last step in identifying the root cause.

What Bell Labs achieved within a few decades is probably unprecedented in human history:

  • They employed folks like Nyquist and Shannon, who laid the foundations of modern information theory and electronic engineering while they were employees at Bell.

  • They discovered the first evidence of the black hole at the center of our galaxy in the 1930s while analyzing static noise on shortwave transmissions.

  • They developed in 1937 the first speech codec and the first speech synthesizer.

  • They developed the photovoltaic cell in the 1940, and the first solar cell in the 1950s.

  • They built the first transistor in 1947.

  • They built the first large-scale electronic computers (from Model I in 1939 to Model VI in 1949).

  • They employed Karnaugh in the 1950s, who worked on the Karnaugh maps that we still study in engineering while he was an employee at Bell.

  • They contributed in 1956 (together with AT&T and the British and Canadian telephone companies) to the first transatlantic communications cable.

  • They developed the first electronic musics program in 1957.

  • They employed Kernighan, Thompson and Ritchie, who created UNIX and the C programming language while they were Bell employees.

And then their rate of innovation suddenly fizzled out after the 1980s.

I often hear that Bell could do what they did because they had plenty of funding. But I don’t think that’s the main reason. The author rightly points out that Google, Microsoft and Apple have already made much more profit than Bell has ever seen in its entire history. Yet, despite being awash with money, none of them has been as impactful as Bell. Nowadays those companies don’t even innovate much besides providing you with a new version of Android, of Windows or the iPhone every now and then. And they jump on the next hype wagon (social media, AR/VR, Blockchain, AI…) just to deliver half-baked products that (especially in Google’s case) are abandoned as soon as the hype bubble bursts.

Let alone singlehandedly spear innovation that can revolutionize an entire industry, let alone make groundbreaking discoveries that engineers will still study a century later.

So what was Bell’s recipe that Google and Apple, despite having much more money and talented people, can’t replicate? And what killed that magic?

Well, first of all Bell and Kelly had an innate talent in spotting the “geekiest” among us. They would often recruit from pools of enthusiasts that had built their own home-made radio transmitters for fun, rather than recruiting from the top business schools, or among those who can solve some very abstract and very standardized HackerRank problems.

And they knew how to manage those people. According to Kelly’s golden rule:

How do you manage genius? You don’t

Bell specifically recruited people that had that strange urge of tinkering and solving big problems, they were given their lab and all the funding that they needed, and they could work in peace. Often it took years before Kelly asked them how their work was progressing.

Compare it to a Ph.D today who needs to struggle for funding, needs to produce papers that get accepted in conferences, regardless of their level of quality, and must spend much more time on paperwork than on actual research.

Or to an engineer in a big tech company that has to provide daily updates about their progress, has to survive the next round of layoffs, has to go through endless loops of compliance, permissions and corporate bureaucracy in order to get anything done, has their performance evaluated every 3 months, and doesn’t even have control on what gets shipped - that control has been taken away from engineers and given to PMs and MBA folks.

Compare that way of working with today’s backlogs, metrics, micromanaging and struggle for a dignified salary or a stable job.

We can’t have the new Nyquist, Shannon or Ritchie today simply because, in science and engineering, we’ve moved all the controls away from the passionate technical folks that care about the long-term impact of their work, and handed them to greedy business folks who only care about short-term returns for their investors.

So we ended up with a culture that feels like talent must be managed, even micromanaged, otherwise talented people will start slacking off and spending their days on TikTok.

But, as Kelly eloquently put it:

“What stops a gifted mind from just slacking off?” is the wrong question to ask. The right question is, “Why would you expect information theory from someone who needs a babysitter?”

Or, as Peter Higgs (the Higgs boson guy) put it:

It’s difficult to imagine how I would ever have enough peace and quiet in the present sort of climate to do what I did in 1964… Today I wouldn’t get an academic job. It’s as simple as that. I don’t think I would be regarded as productive enough.

Or, as Shannon himself put it:

I’ve always pursued my interests without much regard for final value or value to the world. I’ve spent lots of time on totally useless things.

So basically the most brilliant minds of the 20th century would be considered lazy slackers today and be put on a PIP because they don’t deliver enough code or write enough papers.

So the article is spot on in identifying why Bell could invent, within a few years, all it did, while Apple, despite having much more money, hasn’t really done anything new in the past decade. MBAs, deadlines, pseudo-objective metrics and short-termism killed scientific inquiry and engineering ingenuity.

But the author doesn’t go one step further and identify the root cause.

It correctly spots the business and organizational issues that exist in managing talent today, but it doesn’t go deeper into their economic roots.

You see, MBA graduates and CEOs didn’t destroy the spirit of scientific and engineering ingenuity spurred by the Industrial Revolution just because they’re evil. I mean, there’s a higher chance for someone who has climbed the whole corporate ladder to be a sociopath than there is for someone you randomly picked from the street, but not to the point where they would willingly tame and screw the most talented minds of their generation, and squeeze them into a Jira board or a metric that looks at the number of commits, out of pure sadism.

They did so because the financial incentives have drastically changed from the times of Bells Labs.

The Bells Labs were basically publicly funded. AT&T operated the telephone lines in the US, paid by everyone who used telephones, and they reinvested a 1% tax into R&D (the Bells Labs). And nobody expected a single dime of profits to come out from the Bells Labs.

And btw, R&D was real R&D with no strings attached at the time. In theory also my employer does R&D today - but we just ended up treating whatever narrow iterative feature requested by whatever random PM as “research and development”. It’s not like scientists have much freedom in what to research or engineers have much freedom in what to develop. R&D programs have mostly just become a way for large businesses to squeeze more money out of taxpayers, put it in their pockets, and not feel any moral obligation of contributing to anything other than their shareholders’ accounts.

And at the time the idea of people paying taxes, so talented people in their country could focus on inventing the computer, the Internet or putting someone on the moon, without the pressure of VCs asking for their dividends, or PMs asking them to migrate everything to another cloud infrastructure by next week, or to a new shiny framework that they’ve just heard in a conference, wasn’t seen as a socialist dystopia. It was before the neoliberal sociopaths of the Chicago school screwed up everything.

The America that invested into the Bell Labs and into the Apollo project was very different from today’s America. It knew that it was the government’s job to foster innovation and to create an environment where genuinely smart people could do great things without external pressure. That America hadn’t yet been infected by the perverse idea that the government should always be small, that it’s not the government’s job to make people’s lives better, and that it was the job of privately funded ventures seeking short-term returns to fund moonshots.

And, since nobody was expecting a dime back from Bell, nobody would put deadlines on talented people, nobody hired unqualified and arrogant business specialists to micromanage them, nobody would put them on a performance improvement plan if they were often late at their daily standups or didn’t commit enough lines of code in the previous quarter. So they had time to focus on how to solve some of the most complex problems that humans ever faced.

So they could invent the transistor, the programming infrastructure still used to this day, and lay the foundations of what engineers study today.

The most brilliant minds of our age don’t have this luxury. So they can’t revolutionarize our world like those in the 20th century did.

Somebody else sets their priorities and their deadlines.

They can’t think of moonshots because they’re forced to work on the next mobile app riding the next wave of hype that their investors want to release to market so they can get even richer.

They have to worry about companies trying to replace them with AI bots and business managers wanting to release products themselves by “vibe coding”, just to ask those smart people to clean up the mess they’ve done, just like babies who are incapable of cleaning up the food they’ve spilled on the floor.

They are seen as a cost, not as a resource. Kelly used to call himself a “patron” rather than a “manager”, and he trusted his employees, while today’s managers and investors mostly see their engineering resources as squishy blobs of flesh standing between their ambitious ideas and their money, and they can’t wait to replace them with robots that just fullfill all of their wishes.

Tech has become all about monetization nowadays and nothing about ingenuity.

As a result, there are way more brilliant minds (and way more money) in our age going towards solving the “convince people to click on this link” problem rather than solving the climate problem, for example.

Then of course they can’t invent the next transistor, or bring the next breakthrough in information theory.

Then of course all you get, after one year of the most brilliant minds of our generation working at the richest company that has ever existed, is just a new iPhone.

https://links.fabiomanganiello.com/share/683ee70d0409e6.66273547

Jeff Moss boosted:
2025-06-06

Quite a number of people have asked why ‘dnst’ signs so much faster than ‘ldns’.

I should note that we didn’t have performance as an initial design goal, just compatibility. So, we haven’t fully investigated the reasons for the difference. Some running theories are:

- Though signing isn't multi-threaded yet, 'dnst’ does do multi-threaded sorting.
- ‘ldns’ does NSEC chain building while loading the zone while ‘dnst’ loads and sorts it first then does the NSEC chain
- 'dnst’ uses a sequential record store while 'ldns’ builds a tree
- ‘ldns’ may be doing more work allocating memory
- ‘dnst' can use the Rust ’ring’ crate for alg 13 signing instead of OpenSSL, which may boost performance

#DNS #DNSSEC #OpenSource #rustlang
fosstodon.org/@nlnetlabs/11463

Client Info

Server: https://mastodon.social
Version: 2025.04
Repository: https://github.com/cyevgeniy/lmst