Profile avatar
eikendev.bsky.social
Corp-speak translator, business therapist, professional proofreader with a serious love for cyber. Using magic PowerPoint macros to make problems disappear.
11 posts 16 followers 89 following
Prolific Poster

Trump/Musk just laid off the entire VA info security team, in the middle off the night, this weekend.

Once again I am leaving the Munich Security Conference in a low mood. Amongst all the noise, the US signalled their plans for Europe, so things are becoming clearer. But things are clearly not good. This is what we now know, and what we have to do about it:🧵1/17

Hey @parrotsec.bsky.social, it looks like the "current" symlink at deb.parrot.sh/parrot/iso/c... is returning a 404. Could you check what's wrong with it? Thanks for all your hard work!

The farcical "reciprocal tariff" memo Trump signed today explicitly promises tariffs in retaliation for a value-added-tax (VATs), which notably aren't a tariff/trade barrier It gives a pretext to "retaliate" against almost any country on earth—basically all of them have VATs

Very cool work from the team at Meta. A more comprehensive and valuable approach than purely asking an LLM to write a test. engineering.fb.com/2025/02/05/s...

🚨Trump’s first major tariff hike has officially gone into effect—a 10% tax increase on all imports from China, including the suspension of the “de minimis” exemption for small packages (like from Temu/Shein) is effective as of 12:01 am. That hits roughly $430B in US imports

Finally! Grats! datatracker.ietf.org/doc/rfc9700/

Good graphic from Pew on what the federal workforce actually looks like. “insurance company with an army” indeed

New attacks on load address prediction, affects Apple Silicon. predictors.fail

Curious what Kim Vorrath can do for Siri, now that she’s joined the AI team. Siri has always been underwhelming; maybe she’s the one to change that.

Baumol’s cost disease, defined in the 1960s, explains why costs rise faster in less efficient industries like teaching, childcare, and healthcare. As productive sectors like tech boost wages, these industries must follow, even without matching productivity. It’s as fundamental as supply and demand

DeepSeek is now a top 3 App Store app. The saying “necessity is the mother of invention” fits here. Biden’s chip bans pushed Chinese firms to innovate, leading to DeepSeek’s AI, trained for millions, competing with OpenAI’s model, which cost hundreds of millions to develop. There is no moat.

DeepSeek released a whole family of inference-scaling / "reasoning" models today, including distilled variants based on Llama and Qwen Here are my notes on the new models, plus how I ran DeepSeek-R1-Distill-Llama-8B on my Mac using Ollama and LLM simonwillison.net/2025/Jan/20/...

Data released today shows Chinese production of semiconductors finished the year at a new record high, up 12.5% over this time last year, as the country's chip industry buildout continues

There’s a new sheriff in town. Google has told the EU it will not add fact checks to search results and YouTube videos or use them in ranking or removing content despite a new law requiring them to do so.

The Digital Operational Resilience Act (DORA) becomes binding as for all financial entities across the EU. #cybersecurity #enisa www.enisa.europa.eu/news/eu-fina...

The EU is reassessing its DMA investigations of U.S. big tech in the wake of the Trump administration. The Financial Times reports all decisions and potential fines will be paused while the review is completed, but technical work on the cases will continue.

After an embargo of 8 months, we are glad to finally share our USENIX Security '25 paper! We found more than 4 MILLION vulnerable tunneling servers by scanning the Internet. These vulnerable servers can be abused as proxies to launch DDoS attacks and possibly to access internal networks.

Meta’s pivot toward Trump feels inevitable given their current struggles to innovate. Unlike Amazon or Apple, Meta seems to depend more on his support. If Trump blocks the TikTok ban, it could give him the leverage to push for a U.S. sale. And Meta might see it as their next big move.

The EU fined itself $452 for violating GDPR by hosting a site on AWS and using “Sign in with Facebook,” meaning EU citizens’ IP addresses and browser information was sent to U.S.. servers. GDPR’s implication that the U.S. is “The Bad Place” to host servers highlights a little-known quirk of the law

One of the clearest signs of learning is rethinking your assumptions and revising your opinions.

Here's my end-of-year review of things we learned out about LLMs in 2024 - we learned a LOT of things simonwillison.net/2024/Dec/31/... Table of contents:

@heuvy.bsky.social It appears that ENISA's RSS feeds are broken. Is there any chance to get them fixed? www.enisa.europa.eu/rss-feeds

Mossad's exploding pager op began 10 yrs ago with explosives in walkie-talkies. Hezbollah bought 16,000+ of these, but Mossad didn't detonate them until this yr. In 2022 Mossad began booby-trapping pagers too. Unlike walkie-talkies, which only got worn in battle, Hezbollah wore pagers all the time

Unfortunately, Revolut has banned GrapheneOS users from logging into the app because of an incorrectly implemented device integrity check based on the anti-competitive Play Integrity API. Our users need to put pressure on apps like this to get them to whitelist GrapheneOS.

Leadership and management are very different but often conflated. Leaders set direction and inspire. Managers coach and drive execution. Managers are appointed but being seen as a leader is earned.

Lithuania is training 1000 people every year to fly drones as this is considered relevant for citizen defence. Great short report on Lithuania‘s free #drone classes for civilians. (In German) www.deutschlandfunk.de/drohnenkurse...

AWS advertises 99.999999999% (11 nines) durability for S3. I think that's per object per year. Sounds great until you realise that S3 stores 280 trillion = 2.8*10^14 objects (source: www.allthingsdistributed.com/2023/07/buil...). That suggests S3 is corrupting somebody's objects many times per year.

A Stanford study of 50K engineers across hundreds of companies found ~9.5% are “ghost engineers” doing little to no work. Rates differ by work setup: • 14% remote • 9% hybrid • 6% in-office Sadly, this aligns with my 20+ years in tech, where such figures feel all too familiar.

I am not optimistic about Firefox, because apparently every realistic way of making money is unacceptable to its user base, and developing a secure useful browser is expensive. (No, individual subscriptions are not realistic. The finances are public, do the math. Capitalism sucks, yes, sorry.)