♦️ CSO of TPO Group ♦️EFF Board Of Directors♦️US/UK Fulbright Scholar in Cyber Security ♦️ Formerly Harvard, Brookings, Splunk, Symantec. ♦️she/her curmudgienne♦️standard disclaimer regarding personal opinions.♦️Searchable. t AT tarah DOT org
Public Key
npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Profile Code
nprofile1qqs8zd5k4nw6g8czejsydv3u3r7wex39h4mfuvstyeamrckrt0h4znqprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntvhxv40
Show more details
Published at
2026-08-06T01:57:20Z Event JSON
{
"id": "284004cf8aee4d531306dad550ee209663e5bcbe0cf80cd548b052a4aa0faa59" ,
"pubkey": "713696acdda41f02cca046b23c88fcec9a25bd769e320b267bb1e2c35bef514c" ,
"created_at": 1785981440 ,
"kind": 0 ,
"tags": [
[
"proxy",
"https://infosec.exchange/users/Tarah",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/Tarah",
"pink.momostr"
],
[
"-"
]
],
"content": "{\"name\":\"Tarah Wheeler\",\"about\":\"♦️ CSO of TPO Group ♦️EFF Board Of Directors♦️US/UK Fulbright Scholar in Cyber Security ♦️ Formerly Harvard, Brookings, Splunk, Symantec. ♦️she/her curmudgienne♦️standard disclaimer regarding personal opinions.♦️Searchable. t AT tarah DOT org\",\"website\":\"https://infosec.exchange/@Tarah\",\"picture\":\"https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/285/388/636/292/040/original/a34e80c94d6900d9.png\",\"banner\":\"https://media.infosec.exchange/infosec.exchange/accounts/headers/109/285/388/636/292/040/original/7ad4e5e3c45e393d.jpg\",\"nip05\":\"[email protected] \"}" ,
"sig": "b48d1dd41831fccc76a16213faa5ba9d625b3e44dedbb9e83fcf9848b8766b414806831e3e9cfaa668d32322c0621fa7d1a992094c728981ded92a352ce2f5ab"
}
Last Notes npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler I have a suggestion for folk watching The Odyssey. Treat it like a rock concert and wear earplugs. After the first three minutes I put them in and I heard dialogue much better. The music is So Loud in it, and the dialogue is more intelligible when you’re not wincing. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler Does anyone have any decent EDR running on an Apple Neo? Logging? I have a small nonprofit org that wants to roll out a fresh fleet of 15 Neos and the arm64 chip in the Neo isn't the same series as the M. I'm looking for actual A18 Pro / MacBook Neo validation, not "it should work" because I've already got Claude telling me "it shoudl work fine" and that reality is not manifesting for an MSP I know working with this issue. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler Happy ninth anniversary of my-butt-is-numb-and-I-haven't-moved-in-thirteen-hours-and-the-purple-and-orange-carpet-of-this-Orlando-convention-center-is-my-new-home-and-everyone-around-me-has-sunk-to-the-ground-and-everyone-at-this-infosec-con-are-all-sharing-power-outlets-and-cannibalizing-each-others-analogies-for-our-bosses-who-don't-know-what-the-red-screen-means-and-think-the-name-ShadowHunters-is-some-science-fiction-shit-we-all-made-up-and-this-is-so-much-worse-than-we-can-explain-and-oh-god-those-poor-people-in-England day. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler @npub19zc…jfcm is in the middle of an active incident. Issuance of new certs has ceased. Heads up. https://letsencrypt.status.io/ npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler No, you did not send a numeric code to my email to help me sign in "for my security." You did it because you couldn't be arsed to implement proper app-based authentication. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler v interested in this one npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler RE: https://recurse.social/@lindsey/116189776923604763 npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler PLEASE SHARE: Folks, I need *public domain* or *purchasable stock imagery* photos of especially older women holding signs in protests that essentially say "I can't believe I still have to protest this shit". They *cannot* be CC-licensed - they either have to be public domain or licensed for royalty-based purchase since they'll be in an e-book. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler So I hacked my way into being Cyber Policy Initiative Senior Fellow at the University of Chicago's Harris School of Public Policy. I'm workin on rural water critical infrastructure cybersecurity. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler If you have a risk register, and your organization does not have an SBOM for your built apps, the lack of an SBOM goes in your risk register. If you don't have a risk register, make one, and add your lack of SBOMs to it. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler I do this ish for a living, I am an AI developer and researcher, and *I* don’t fully understand the security implications. What hope do regular users have? npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler Good news, everyone! The password has been updated to "LouvreWinter2025!" and is now compliant with our password change policies. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler American critical infrastructure is ten thousand small businesses in a trenchcoat. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler On my way. #hackersummercamp #defcon #blackhat npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler Me, at lunch: npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler “Fuck you, I won’t do what you tell me” I whisper quietly so I don’t disturb the neighbors after hours while I’m processing payroll expense reports. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler It does bear repeating that “the only unhackable computer is one that’s running a secure operating system, welded inside a steel safe, buried under a ton of concrete at the bottom of a coal mine guarded by the SAS and a couple of armoured divisions, and *switched off*”. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler Today I explained a potential audience for a tech policy talk to someone as "The Establishmen" and I stand by my typo. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler Story time: This weekend, someone thought they could harass or hurt me by adding my Wikipedia page to the "Transgender Women Writers" category. You can see that here: npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler I protest. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler Gentlemen, I appreciate that courtesy isn't dead, and modesty won't forbid me from acknowledging that I look like a total smokeshow today but I beg you to cease holding doors open for me into secured facilities. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler "what's their email address?" IDK npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler Paste your favorite one liner that also says something about you as a person: npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler Was doomscrolling and husband says “name some Wayne Enterprises executive who isn’t Lucius Fox and is also kind of sleazy” and I instantly perked up and said “William Earle, at least until the stock buyback” and then realized I’d been nerdsniped. Excellent husbanding, top marks, ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler Dark have been my memes of late. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler Absolutely chuffed to hear that I'll be presenting at @npub1j3q…nnx8 with my good friend Dr. Jon Martin @npub1wch…spkp. He's the digital archivist for the University of Cambridge. We'll be talking about the creation of digital monasteries to preserve knowledge in this age of #enshittification. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler Slack channels can be 80 characters and "these-trivialities-demean-me-i-must-away-and-tend-to-my-ravens" is only 62 characters. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler I say this as a CEO: From now on, when children’s health data is compromised because multi factor authentication was not enforced, fire the CEO, not the CISO. I mean, sure, fire the CISO as well, but the CEO bears the responsibility. An update on the PowerSchool breach from the ever-incise @npub1z3l…qvzu https://arstechnica.com/security/2025/01/students-parents-and-teachers-still-smarting-from-breach-exposing-their-info/ npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler I know some truly wonderful infosec journalists but here's a thing I need help with: currently, there are essentially *no* news stories out there about MSPs, small business cybersecurity - anything really meaningful beyond "here's a puff piece on a commercial white paper that did sentiment analysis on 70 small biz owners and they're all scared of furrin hackerz" or PR releases on "Google just bought an MSP in Indonesia". npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler New Year’s resolution: when I’d like a table in a restaurant, I am alone, and I’m asked by the host “is a seat at the bar ok?” I will practice saying “No” as a complete sentence without apology. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler Clicking on a phishing email is not an “advanced cyberattack.” https://therecord.media/cyberhaven-hack-google-chrome-extension npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler It absolutely does not matter what movie, miniseries, Tv show, or play: whatever scene-chewing dame extraordinaire is playing Catherine of Aragon, she is going to steal the whole ass show from whoever is playing Henry VIII. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler I am a pilot and I am begging you: do not shine lasers at things in the air. You can kill us by blinding us at night. You’re not detecting UFOs; you’re blinding women like me driving beater SkyToyotas, animal rescue pilots, and Angel flights bringing rural cancer patients to hospitals. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler I'm just preemptively starting every conversation now with "say 'potato'". npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler This is Donation Week, and I want to see your Signature, Technical, and Showstopper donations as our @npub1m24…d9a3 Attack Lawyers defend your rights in a battle for the ages. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler Oh goodness…schadenfreude? For MEEEE? You shouldn’t have. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler oh my god this is a utter #infosec banger and it should be heard by every #SOC this wknd npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler In a world where enough women are searching “can my husband find out who I voted for” to make it trend in search engines and social media, there should never be a question again about the value of and right to end-to-end encrypted and private personal communication. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler Good evening to everyone except the excrement who just hacked the Internet Archive. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler Biden is shipping four more free Covid tests right now. https://special.usps.com/testkits npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler John Mulaney just absolutely burned Dreamforce to the ground. No crumbs. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler Dear internet: I would like your favorite movies about women overcoming huge/galactic obstacles. Those obstacles should not be dudes. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler This is a day where I’m LinkedIn-discovering a lot of people who are claiming to be cyber experts who’ve never held any role other than government policy or investment. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler I was talking to someone today who only knows Michael Sheen from Good Omens and his pandemic videos with David Tennant. All yall Gen Z babies who think Michael Sheen is an adorable blonde angel—you didn’t know Lucian. If you haven’t seen Underworld, I suggest you expand your horizons this lovely Halloween season. Bonus: Bill Nighy toothily fanging the scenery beyond all hope of dramatic redemption. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler #infosecjobs #hiring Alert: I'm hiring a career transition, entry-level, or intern-level web developer in Rust/Python at [@redqueen](https://infosec.town/@redqueen ). npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler “You’re going to a very special level of hell. A level they reserve for child molesters, people who talk at the theater, and the jackass who hacked and ransomedwared the Seattle Public Library.” npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler yeah, I have a great great grandfather who was a raging antisemite and we aren’t sure if that’s because he actually was Jewish. Would have been really extraordinary if he wasn’t…as his family would have been the only ones in their village who weren’t. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler Hey, today is a great day to call your oldest living relative or the relative that knows the most about genealogy to get some information that may not exist for long. npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler OH: The year is 2038. Standards body participants have finally achieved their ultimate dream: the Ur-Format, a grammar subsuming YAML, XML, CBOR, JSON, JSONB, X.509, protobuf, Cap'n Proto, Borgconf, all dialects of CSV including non-Euclidean ones, TOML, and http:// Sendmail .cf. It is now believed, Mr Anderson, that we no longer lack the necessary language to describe your perfect world npub1wymfdtxa5s0s9n9qg6erez8uajdzt0tknceqkfnmk83vxkl029xqj2dmr0 Tarah Wheeler People who call your phone immediately upon receiving a text instead of answering a simple Y/N shall be first against the wall.
