Big day today
Founder of DEF CON & Black Hat. Member of the UK Gov Cybersecurity Advisory Board & The Council on Foreign Relations.
Working to get Hackers and Researchers a seat at the Policy table.
I'm interested in hacking, community, technology, privacy, security policy, and the intersection of civil society. (He/Him) Opinions are my own.
Previously member ONCD (2024-2025), CISA Cyber Security Advisory Council (2021-2025), and DHS Advisory Council (2009-2020)
Big day today
We now have a political assassin impersonating a police officer on the loose in Minnesota, which, aside from being horrifying in and of itself, underscores the danger of the proliferation of anonymous federal law enforcement deployments from a wide variety of unfamiliar agencies conducting aggressive immigration operations across the country.
Is that uniformed person who's stopping you or demanding entry to your home legit or a psychotic vigilante seeking to harm you? It's impossible to know.
To those who are participating in a #NoKings #protest tomorrow, thank you for standing up for #democracy. đ Please stay nonviolent, know your exits, and know your rights. Above all, please stay safe, my friends. â¤ď¸
No Kings: https://www.nokings.org
Know Your Rights: https://www.aclu.org/know-your-rights/protesters-rights
Safe Protesting: https://www.hrc.org/resources/tips-for-preparedness-peaceful-protesting-and-safety
#ResistFascism #SaveDemocracy #ACLU #KnowYourRights #HumanRightsCampaign
A cool write up from the @hackaday site, as well as a little history lesson to those too young to recongnize the dialer symbol in the #DEFCON logo
https://hackaday.com/2025/06/13/adapting-an-old-rotary-dial-for-digital-applications/
â ď¸đ´ââ ď¸ YO HO! Meet the first character of our @defcon 33 cast: the infamous Pirate Queen herself.
Once just a sun-loving island cat swiping fish from tourists, Kitty Hegemon rose up when a greedy regime took over her tropical paradise. Upgraded by rebel tech wizards, she became Kitty the Pirate Hacker Queen, fierce leader of the cyber-pirate resistance.
Ready to join her crew? Grab your radios, fusion splicer, and phishing spear â the fight to free Isla Hexa begins.
Less than two months until #DEFCON33! Time to start planning to make the most of your #DEFCON experience.
One of the best parts of DC is meeting other humans and bonding over shared interests. On the Parties, Meetups and Events page youâll find a shockingly comprehensive list of group hangs. Whether youâre into Running or Ham Radio, Blanket Forts or Karaoke, weâve got you covered.
Set aside some time for fun and
connection. Your people are waiting.
https://defcon.org/html/defcon-33/dc-33-pmne.html#nav
#defconparties #defconevents #defcon meetups
Sen. Padilla Was Assaulted on Camera. Congress Must Defend Itself https://firstbranchforecast.substack.com/p/sen-padilla-was-assaulted-on-camera
Chris Hadnagy is appealing his lawsuit dismissal against us. We will post an update once we read it and have a better idea what the deal is.
On appeal you can argue matters of law, but not evidence, so we are guessing it will be a lot of complaints about how the judge must have misapplied legal precedent.
#DEFCON
https://www.courtlistener.com/docket/68094183/hadnagy-v-moss/
My drum and bass DEF CON 32 live set is finally out on my YT channel for you to enjoy! https://www.youtube.com/watch?v=1Cet7dqEPkU
--
Miss Jackalope Twitch: https://www.twitch.tv/MissJackalope
DEF CON Music: https://www.youtube.com/@DEFCONMusicOfficial
DEF CON Music Twitch https://www.twitch.tv/defconorg_entertainment
@timbray @baldur @simon Google shows use of "AI" causes increased bug rate and marginally lower throughput (https://redmonk.com/rstephens/2024/11/26/dora2024/) while Microsoft finds they reduce critical thinking (https://www.microsoft.com/en-us/research/uploads/prod/2025/01/lee_2025_ai_critical_thinking_survey.pdf), but if you're surrounded by a culture that everything is obsolete within 6 months, it's easy to find a reason to disregard such work. Society's perception of this sociotechnical sector should not hinge on whether internal research groups at select companies publish reports that contradict their CEO's political and financial interests.
ICANNâs DNS Blocking Report Presents Three Key Recommendations https://torrentfreak.com/icanns-dns-blocking-report-presents-three-key-recommendations-250609/
A plane with no call sign is currently circling the area where the LA anti-ICE protests are taking place. It took off from March Air Reserve Base
Your work in OSINT and Recon deserves a global stage.
@Recon Village at @Def CON 33 is calling for vendor-neutral, technical submissions â including case studies, automation, red team usage, and tracking innovations.
If your research can teach, challenge, or shift perspectives, nowâs your time.
đ CFP deadline: June 15
Cloudflare Warns EU About Extensive Piracy Overblocking, Calls for Safeguards https://torrentfreak.com/cloudflare-warns-eu-about-extensive-piracy-overblocking-calls-for-safeguards/
A friend sent me that as a heads up, apparently âWâ is active in the conference & standards scene.
âRussia scandal at the Swiss secret service raises worrying questions
The Federal Intelligence Service (NDB) cooperated with the Russian IT security company Kaspersky for years and apparently ignored warnings from friendly intelligence agencies.â
For many years, several of my colleagues, a few ex-students, and at least one former romantic interest have fervently hoped that I would become an extinguished professor.
Their prayers were for naught. I outlasted them.
In leaked audio we obtained, surveillance company Flock calls me an "activist reporter". I wrote about that here, and here is what the audio said: https://www.404media.co/behind-the-blog-activism-and-evangelism/
Why Bell Labs worked so well, and could innovate so much, while todayâs innovation, in spite of the huge private funding, goes in hype-and-fizzle cycles that leave relatively little behind, is a question Iâve been asking myself a lot in the past years.
And I think that the author of this article has hit the nail on its head on most of the reasons - but he didnât take the last step in identifying the root cause.
What Bell Labs achieved within a few decades is probably unprecedented in human history:
They employed folks like Nyquist and Shannon, who laid the foundations of modern information theory and electronic engineering while they were employees at Bell.
They discovered the first evidence of the black hole at the center of our galaxy in the 1930s while analyzing static noise on shortwave transmissions.
They developed in 1937 the first speech codec and the first speech synthesizer.
They developed the photovoltaic cell in the 1940, and the first solar cell in the 1950s.
They built the first transistor in 1947.
They built the first large-scale electronic computers (from Model I in 1939 to Model VI in 1949).
They employed Karnaugh in the 1950s, who worked on the Karnaugh maps that we still study in engineering while he was an employee at Bell.
They contributed in 1956 (together with AT&T and the British and Canadian telephone companies) to the first transatlantic communications cable.
They developed the first electronic musics program in 1957.
They employed Kernighan, Thompson and Ritchie, who created UNIX and the C programming language while they were Bell employees.
And then their rate of innovation suddenly fizzled out after the 1980s.
I often hear that Bell could do what they did because they had plenty of funding. But I donât think thatâs the main reason. The author rightly points out that Google, Microsoft and Apple have already made much more profit than Bell has ever seen in its entire history. Yet, despite being awash with money, none of them has been as impactful as Bell. Nowadays those companies donât even innovate much besides providing you with a new version of Android, of Windows or the iPhone every now and then. And they jump on the next hype wagon (social media, AR/VR, Blockchain, AIâŚ) just to deliver half-baked products that (especially in Googleâs case) are abandoned as soon as the hype bubble bursts.
Let alone singlehandedly spear innovation that can revolutionize an entire industry, let alone make groundbreaking discoveries that engineers will still study a century later.
So what was Bellâs recipe that Google and Apple, despite having much more money and talented people, canât replicate? And what killed that magic?
Well, first of all Bell and Kelly had an innate talent in spotting the âgeekiestâ among us. They would often recruit from pools of enthusiasts that had built their own home-made radio transmitters for fun, rather than recruiting from the top business schools, or among those who can solve some very abstract and very standardized HackerRank problems.
And they knew how to manage those people. According to Kellyâs golden rule:
How do you manage genius? You donât
Bell specifically recruited people that had that strange urge of tinkering and solving big problems, they were given their lab and all the funding that they needed, and they could work in peace. Often it took years before Kelly asked them how their work was progressing.
Compare it to a Ph.D today who needs to struggle for funding, needs to produce papers that get accepted in conferences, regardless of their level of quality, and must spend much more time on paperwork than on actual research.
Or to an engineer in a big tech company that has to provide daily updates about their progress, has to survive the next round of layoffs, has to go through endless loops of compliance, permissions and corporate bureaucracy in order to get anything done, has their performance evaluated every 3 months, and doesnât even have control on what gets shipped - that control has been taken away from engineers and given to PMs and MBA folks.
Compare that way of working with todayâs backlogs, metrics, micromanaging and struggle for a dignified salary or a stable job.
We canât have the new Nyquist, Shannon or Ritchie today simply because, in science and engineering, weâve moved all the controls away from the passionate technical folks that care about the long-term impact of their work, and handed them to greedy business folks who only care about short-term returns for their investors.
So we ended up with a culture that feels like talent must be managed, even micromanaged, otherwise talented people will start slacking off and spending their days on TikTok.
But, as Kelly eloquently put it:
âWhat stops a gifted mind from just slacking off?â is the wrong question to ask. The right question is, âWhy would you expect information theory from someone who needs a babysitter?â
Or, as Peter Higgs (the Higgs boson guy) put it:
Itâs difficult to imagine how I would ever have enough peace and quiet in the present sort of climate to do what I did in 1964⌠Today I wouldnât get an academic job. Itâs as simple as that. I donât think I would be regarded as productive enough.
Or, as Shannon himself put it:
Iâve always pursued my interests without much regard for final value or value to the world. Iâve spent lots of time on totally useless things.
So basically the most brilliant minds of the 20th century would be considered lazy slackers today and be put on a PIP because they donât deliver enough code or write enough papers.
So the article is spot on in identifying why Bell could invent, within a few years, all it did, while Apple, despite having much more money, hasnât really done anything new in the past decade. MBAs, deadlines, pseudo-objective metrics and short-termism killed scientific inquiry and engineering ingenuity.
But the author doesnât go one step further and identify the root cause.
It correctly spots the business and organizational issues that exist in managing talent today, but it doesnât go deeper into their economic roots.
You see, MBA graduates and CEOs didnât destroy the spirit of scientific and engineering ingenuity spurred by the Industrial Revolution just because theyâre evil. I mean, thereâs a higher chance for someone who has climbed the whole corporate ladder to be a sociopath than there is for someone you randomly picked from the street, but not to the point where they would willingly tame and screw the most talented minds of their generation, and squeeze them into a Jira board or a metric that looks at the number of commits, out of pure sadism.
They did so because the financial incentives have drastically changed from the times of Bells Labs.
The Bells Labs were basically publicly funded. AT&T operated the telephone lines in the US, paid by everyone who used telephones, and they reinvested a 1% tax into R&D (the Bells Labs). And nobody expected a single dime of profits to come out from the Bells Labs.
And btw, R&D was real R&D with no strings attached at the time. In theory also my employer does R&D today - but we just ended up treating whatever narrow iterative feature requested by whatever random PM as âresearch and developmentâ. Itâs not like scientists have much freedom in what to research or engineers have much freedom in what to develop. R&D programs have mostly just become a way for large businesses to squeeze more money out of taxpayers, put it in their pockets, and not feel any moral obligation of contributing to anything other than their shareholdersâ accounts.
And at the time the idea of people paying taxes, so talented people in their country could focus on inventing the computer, the Internet or putting someone on the moon, without the pressure of VCs asking for their dividends, or PMs asking them to migrate everything to another cloud infrastructure by next week, or to a new shiny framework that theyâve just heard in a conference, wasnât seen as a socialist dystopia. It was before the neoliberal sociopaths of the Chicago school screwed up everything.
The America that invested into the Bell Labs and into the Apollo project was very different from todayâs America. It knew that it was the governmentâs job to foster innovation and to create an environment where genuinely smart people could do great things without external pressure. That America hadnât yet been infected by the perverse idea that the government should always be small, that itâs not the governmentâs job to make peopleâs lives better, and that it was the job of privately funded ventures seeking short-term returns to fund moonshots.
And, since nobody was expecting a dime back from Bell, nobody would put deadlines on talented people, nobody hired unqualified and arrogant business specialists to micromanage them, nobody would put them on a performance improvement plan if they were often late at their daily standups or didnât commit enough lines of code in the previous quarter. So they had time to focus on how to solve some of the most complex problems that humans ever faced.
So they could invent the transistor, the programming infrastructure still used to this day, and lay the foundations of what engineers study today.
The most brilliant minds of our age donât have this luxury. So they canât revolutionarize our world like those in the 20th century did.
Somebody else sets their priorities and their deadlines.
They canât think of moonshots because theyâre forced to work on the next mobile app riding the next wave of hype that their investors want to release to market so they can get even richer.
They have to worry about companies trying to replace them with AI bots and business managers wanting to release products themselves by âvibe codingâ, just to ask those smart people to clean up the mess theyâve done, just like babies who are incapable of cleaning up the food theyâve spilled on the floor.
They are seen as a cost, not as a resource. Kelly used to call himself a âpatronâ rather than a âmanagerâ, and he trusted his employees, while todayâs managers and investors mostly see their engineering resources as squishy blobs of flesh standing between their ambitious ideas and their money, and they canât wait to replace them with robots that just fullfill all of their wishes.
Tech has become all about monetization nowadays and nothing about ingenuity.
As a result, there are way more brilliant minds (and way more money) in our age going towards solving the âconvince people to click on this linkâ problem rather than solving the climate problem, for example.
Then of course they canât invent the next transistor, or bring the next breakthrough in information theory.
Then of course all you get, after one year of the most brilliant minds of our generation working at the richest company that has ever existed, is just a new iPhone.
https://links.fabiomanganiello.com/share/683ee70d0409e6.66273547
Quite a number of people have asked why âdnstâ signs so much faster than âldnsâ.
I should note that we didnât have performance as an initial design goal, just compatibility. So, we havenât fully investigated the reasons for the difference. Some running theories are:
- Though signing isn't multi-threaded yet, 'dnstâ does do multi-threaded sorting.
- âldnsâ does NSEC chain building while loading the zone while âdnstâ loads and sorts it first then does the NSEC chain
- 'dnstâ uses a sequential record store while 'ldnsâ builds a tree
- âldnsâ may be doing more work allocating memory
- âdnst' can use the Rust âringâ crate for alg 13 signing instead of OpenSSL, which may boost performance
#DNS #DNSSEC #OpenSource #rustlang
https://fosstodon.org/@nlnetlabs/114630692456617001