Andrew Cowie

Andrew Cowie

@istathar.space

Dedicated to space exploration, platform engineering, Linux, Rust, and observability. Author of the Technique procedures language. Fmr 🇨🇦 army, 🇺🇲 and 🇬🇧 tech, 🇦🇺 banking. Supporting cause of peace and freedom at NAFO and trying to get better at Warhammer 40k

179 followers118 following421 posts

Pinned

The first rule of Soviet Russia is that when they deny something is going to happen, it's going to happen. Unless you deny that you're going to deny it. In which case you're not going to do whatever you said you weren't going to do, and instead are going to do it because you said you wouldn't.

WarTranslated (Dmitri)@wartranslated.bsky.social

Andrey Kostin, head of VTB, called rumors of freezing Russian bank deposits absurd, citing no economic basis: "Do you understand that this is essentially an absurd idea?' They told me: 'That's precisely why it could appear in Russia.' If we follow that logic, then sure, it's possible," Kostin said.

Andrew Cowie reposted

Replying to @garius.eurosky.social

Eventually, it was decided to proceed woth the work required to deal with the One Ring Problem unofficially, as the need was pressing. It was noted wryly by all, however, that on successful completion it was reported as "magnificent work by the Council of Elrond" in internal comms.

Andrew Cowie reposted

Starlinked /ˈstɑːlɪŋkt/ adjective Held back, restricted, slowed down or controlled by someone you were paying to support you. Usage: “We were making good progress, then we got Starlinked.”

You enter the room. There is a [RCE] in front of you. The robed and cowled [Security Researcher] stands in front of the altar, chanting [/ˌsiː viː ˈiː/]. Do you cast [ineffectual corporate Cyber Security Policy] at them, attempt to kill the messenger by [blame Open Source], or [rebuild everything]?

so... what's on tomorrow's wheel of misfortune? today's 0-day was caused by a [missing bounds check] in the [Javascript runtime] and has been assigned a CVSS of [8.5]

Andrew Cowie reposted

the fact that an intermediate CA in India that sells only into the Indian market, when compromised, can generate TLS certs for literally any website on the internet, that feels like a major trust boundary problem

Filippo Valsorda@filippo.abyssdomain.expert

After the firefighting is done (and a nap) we'll need to have a long, serious conversation about the state of non-browser non-platform X.509 verifiers. The Linux status quo is "a pile of PEM files behind a dumpster" and that's not an acceptable excuse for a root store in 2026.

Andrew Cowie reposted

"Ukrainians who have offered democracies a beacon of light in a world where the forces of authoritarian evil dim our hopes for a better future. The Ukrainians have given us more than we could ever repay." On Trump's "Ukraine has given us nothing" statement. mickryan.substack.com/p/what-has-u...

mickryan.substack.comWhat Has Ukraine Done for Us?A response to the US president’s claim that “We’ve given a lot to Ukraine. They’ve given us nothing!”

I have questions. Who washes their pet in a coin-operated washing machine? Admittedly the dog would probably love it, but can you imagine what a cat would have to say during the spin cycle?

Andrew Cowie reposted

A phone app (with mandatory account creation too!) to use the guest laundry in a hotel is one of the most unnecessary, solution-looking-for-a-problem, borderline dystopian things ever invented. 1/3

My kid wrote his first computer program today. I'm so proud. "Hello World", of course. I'm actually pretty torn, though. How does one teach programming in the AI era? The act of coding has certainly changed, but I've decided to just teach computing and how computers work, whatever interests him.

Andrew Cowie reposted

Replying to @astrokatie.com

Nothing makes me want to move permanently to the woods more than receiving endless 10-paragraph e-mails made entirely of sentences like "You have built a framework that is both intimately grounded in your own research and universally applicable."

Andrew Cowie reposted

Pompeii is a UNESCO world heritage site not because it was remarkable in its prime, but because it survived to our era untouched: one moment, preserved for all time. But future generations won't know what OUR world was like unless we do the same. This is why we MUST bury Toronto with a volcano

Today I learned that YouTube has an internal category for useless content called `brainrot`. They also noted that most AI generated slop ends up being tagged this way. They still serve it to people, but aren't you reassured that they know they're doing it?

This is a candidate for best sign of the year. In an era of demagogues, false profits, and mafia dons running countries, clear messaging and simple truths are priceless.

You know there's something special about the Universe because yesterday it let you make a release! only to find mere hours later that your release has a bug in it.

Andrew Cowie reposted

Russian admiral talking to Gerasimov. "So, you get them all to line up, in full view of the enemy, and have them march to a certain death by drone?" "Da. Exactly" "Get my ship captains on the phone. We have a new strategy!"

Andrew Cowie reposted

I think this is pretty serious: for several months the UNOOSA (UN Office of Outer Space Affairs) has not been making public new sat registrations apparently because of an IT policy issue. A month or two I could accept, but at this point it's a failure of the international space governance regime

We know the Devil exists because He created Continuous Integration and fixing CI is Hell. GitHub Actions are like the Fifth Circle of Hell, "wrath". Or maybe Seventh, because oh yeah baby, "violence". The sinner is doomed to re-run the same Workflow again, and again. And again.

@shashj.bsky.social my compliments for the choice to re-air, if that's the term, your interview with Sir Alex Younger. Watching again I was struck by his clarity of language and commitment over a lifetime of service. People such as he spend their lives in the shadows and are rarely recognised.

Andrew Cowie reposted

Asking the Attorney General's office this morning about this outrageous information - they intentionally delayed publishing FOI documents until 1 minute before our Estimates hearing in February commenced so we couldn't ask them about the documents released.

View full thread

it shouldn't be bloody listening on interfaces it wasn't told to. Even having Tailscale report the existence of those internal networks up to the control plane is unacceptable. Given the prevalence of zero-days it's no longer something we can hand-wave away.

I'm sorry to bother you @apenwarr.ca but please have someone consider this? We keep asking but no one @tailscale.com is reacting. Our CTO is at the "we should just do Wiregard ourselves" point and I'd be very disappointed to lose the benefit of all our hard work implementing Tailscale over this.

Doing discovery on all interfaces is a nice default but we have legitimate security reasons to not want Tailscale on gateway machines having anything to do with internal interfaces.

We're not using Tailscale for LAN hosts to talk to each other, so having direct local connections isn't an optimisation we need. Yes, sure, we can put firewall rules on the machines to only allow Tailscale egress on a specific net, but

In today's episode of cool-things-I-have-hallucinated-that-should-exist-but don't, we have "cryptobiological" links used to secure transfer of information. I'm trying to figure out what the biology part is. DNA coding? Pheromone sampling? Or maybe it's just "human enters passphrase". #cryptography

Andrew Cowie reposted

Replying to @weedle.bsky.social

Three months from now the average voter is lined up at a gas station waiting for their ration and still getting headline alerts on their phone about YUGE FREE MONEY CHECK HITTING BANK ACCOUNTS SOON where if you actually click the link it's an AI summary about a town in Iceland enacting a UBI program

Andrew Cowie reposted

Replying to @shipwreck75.bsky.social

Trump surprised Gulf allies by announcing “Project Freedom”, the officials said, angering leadership in Saudi Arabia. In response, the Kingdom informed the U.S. it would not allow the U.S. military to fly aircraft from Prince Sultan Airbase or fly through Saudi airspace to support the effort.