Nostr notes by Haroon Meer

Dan Geer (waaaay back in 2015¹) predicting: - Our current mess; ...

2026-08-28T13:14:58Z

Dan Geer (waaaay back in 2015¹) predicting:

- Our current mess;
- Tokenomics;
- The popularity of Tim Nolan's Odyssey.

__
¹https://geer.tinho.net/geer.issa.13x15.txt

An odd side effect of decades in infosec, is having visited Las ...

2026-07-25T10:37:43Z

An odd side effect of decades in infosec, is having visited Las Vegas more times than normal people would expect.

If you built a company in the past decade you probably received ...

2026-07-04T16:21:24Z

If you built a company in the past decade you probably received advice from the Eric Ries classic: “The Lean Startup”.

His new book, “Incorruptible” is more important.

We’ve been told constantly how choices we made at Thinkst Canary (npub1fcx…kjeh) are unique/non-repeatable. He shows otherwise.

If you are building a cyber-startup, you should read this book.

You will always be told that it’s too early to think about building a company that aims to do good (until you are told it’s too late).

There are heaps of examples that just aren’t talked about as often.

I’ve mentioned this before: this is one of the oncoming trains ...

2026-05-31T20:02:53Z

I’ve mentioned this before: this is one of the oncoming trains for corp-security. We’ve long failed at least-privilege, but weren’t often punished for it.

Helen in HR (or Bob in accounts) didn’t know what to do with the extra perms they didn’t know they had.

Their agents will.

It's worth catching one of the Pwn2Own OG's (Aaron ...

2026-05-29T16:08:34Z

It's worth catching one of the Pwn2Own OG's (Aaron Portnoy) on the latest Three Buddy Problem

Aaron with the timeless advice "level up.. get better"

(Also with props for Deception in Defense 💪💚)

https://pca.st/episode/5da764af-2a7e-4c03-9026-760e339b9d22

Niels Provos posting smart security stuff, Dave Aitel knows stuff ...

2026-05-02T22:00:08Z

Niels Provos posting smart security stuff, Dave Aitel knows stuff he can’t share, Halvar exploring the current space, and people arguing loudly about disclosure ethics..

This could totally be 2002..

As someone who has kinda questioned Apples constant push towards ...

2026-04-04T10:20:26Z

As someone who has kinda questioned Apples constant push towards thinner laptops, I have to admit: the iPhone Air is the first iPhone in a long time that makes you double-take every time you pick it up..

Just impossibly thin/light/beautiful..

We’ve always had a problem with least privilege, but users ...

2026-03-22T09:37:58Z

We’ve always had a problem with least privilege, but users needed to be owned for it to visibly hurt the enterprise.

Kevin didn’t know what to do with the extra creds, but his agent will.

Maybe the first run of the “paperclip” problem will be agents wiping shares to save us..

When we first showed up at BlackHat as unknown S Africans, we ...

2026-03-02T18:01:30Z

When we first showed up at BlackHat as unknown S Africans, we were kinda shellshocked (& awestruck) by it all.

FX was one of the first people to pull us in & hung out with us. We kept in touch but not nearly as much as I should have.

He will be missed.

https://blog.recurity-labs.com/2026-03-02/Farewell_Felix

-=[ PHRACK PROPHILE ON Gera ]=- ...

2025-08-19T00:17:26Z

-=[ PHRACK PROPHILE ON Gera ]=-

https://phrack.org/issues/72/2#article

That’s the whole post…

Props to the North Koreans who took all the “unfilled jobs in ...

2025-05-18T09:31:18Z

Props to the North Koreans who took all the “unfilled jobs in infosec” and turned it into an advantage..

Waiting for their “the obstacle is the way” best-seller to drop..

It's kinda been raised, but its nuts that (according to ...

2025-04-27T16:16:13Z

It's kinda been raised, but its nuts that (according to Mandiant/M-Trends) in 2025:

- vulnerabilities/exploits are the most frequently observed initial vector;

- the top 4 exploited vulns belong to security vendors.

What are we doing here? 🤯😱

It’s wild that some of the richest ppl who ever lived, in one ...

2025-04-05T10:45:57Z

It’s wild that some of the richest ppl who ever lived, in one of the richest nations that ever existed, feel so completely “cheated” by some of the poorest nations in the world..

If it was in a book, I woulda considered it exaggerated for effect.

I’m totally not a fan of the current circus, but you have to ...

2025-03-13T17:42:42Z

I’m totally not a fan of the current circus, but you have to admit that Biden was impressively bad.

Ceding the moral high ground to Trump shoulda been hard, but he managed it.

I do recall a massive Norse open-bar though!

2025-01-11T20:17:41Z

In reply to nevent1q…6mfr
_________________________

I do recall a massive Norse open-bar though!

Based on YouTube vids (I haven’t actually attended) - CES seems ...

2025-01-11T20:11:55Z

Based on YouTube vids (I haven’t actually attended) - CES seems to focus more on actual product demos than RSAC and similar security trade shows..

I think it’s a mistake that sec companies don’t use the floor for demos..

Spoke to a smart founder (successful exit under his belt) ...

2024-12-23T20:56:38Z

Spoke to a smart founder (successful exit under his belt) pondering his next infosec startup.

Amongst all the advice he’s gotten till now, nobody focused on “make sure the product actually works”.

I’d like to say it’s cause that’s table-stakes but I’d be lying.

Infosec ignores this too much.

Many try to mimic skunkworks. It’s interesting to read¹ Kelly ...

2024-11-24T18:39:46Z

Many try to mimic skunkworks.

It’s interesting to read¹ Kelly Johnson describe it:

“Skunkworks is a concentration of a few good people solving problems far in advance and at a fraction of the cost of other groups in the aircraft industry by applying the simplest most straightforward methods possible to develop and produce new projects.

All it is really is the application of common sense to some pretty tough problems”

¹ https://amzn.eu/d/6vqEPlW