Zack Glick

So this is a silly story, but for a year or two in 2013/2014 I went around telling everyone I could find about this little cryptography library called “OpenSSL” and how it was used everywhere, but had almost no developers or security budget.

Since this is getting a lot of comments, I'll give you one more hot take: I believe it's an abject failure of cybersecurity programs that we consider users so crucial to phishing defense that we feel the need to regularly phish them at all - regardless of the pretext used.

RIP Margaret Hamilton, software engineer extraordinaire. "We had to find a way and we did. Looking back, we were the luckiest people in the world; there was no choice but to be pioneers." news.mit.edu/2026/margare...

Tickets purchased for @www.bsidesto.ca 2026. Looking forward to infosec fun with our neighbors to the North 🇨🇦 ♥️ 🦬. See you all there Oct 3rd!

Got a chance to review the OpenAI / Huggingface technical report. Aside from the report details the real question is how are automated threat actors going to be referred to by the CTI industry? I’m proposing penguins for the crowdstrike animal, and Supercell for the Microsoft Weather effect

Down in Vegas for the next few days for fal.con. Talking SaaS security, AI controls, and security program building

Tonight at 7:16 PM is the start of Give716, one of the most unique days of the year in Buffalo. Charities in the area are reaching out to raise funds. If you are going to contribute tomorrow check out this list of "power hours" where donations are going to be matched give716.org/give/give716...

“I have usernames older than you.”. Holy shit

ICYMI: Tickets are on sale NOW for Buffalo's favorite hacking conference. Get them while you can, we sold out entirely in 2024 and 2025.

Excited to announce that I will be presenting "A Standard For Investigative Playbooks" at BSidesROC next month - always look forward to visiting the Flower City for garbage plates and hacker shenanigans.

On my way to SFO for the Pragmatic Summit. I’m super excited to be running a breakout session tomorrow “Compressing Time and Expertise with AI in Public Sector Systems” during the 1:30 time slot. See you all there

the Super Bowl ain’t been kind to Drakes lately

I maintain the Seattle Punter deserves MVP

No Kings includes Draft Kings

It’s not a viable market product in a market where big tech platforms control distribution and tip the scales towards an endless supply of teenagers working free. Every media company should be chasing the open social web to break that control wide open and reshape the market

This is going to be the quintessential legal struggle of the so called “agentic” ai wave I think.

NEW: Google’s “Auto Browse” AI tool includes a warning that attributes responsibility to users for the bot’s actions. “Use Gemini carefully and take control if needed,” reads a disclaimer on the demo version. “You are responsible for Gemini’s actions during tasks.” www.wired.com/story/google...

Respect for Kelsey for taking a firm stand. Another developer happily took part in this same crypto project: collected these “fees.” Now their name is dragged across social media after “their” coin (one named after them) collapsed overnight and made lots of people lost lots of money and are angry

Tickets, scholarships, and sponsor info TBA, but interested sponsors can reach us at sponsorship@fwdcloudsec.org fwd:cloudsec EU will be at the Park Plaza Victoria in London, UK on September 7 and 8. The Call for Sponsors is at: fwdcloudsec.org/assets/docs/...

@fwdcloudsec.org is an awesome conference. Looking forward to seeing lots of cool submissions into the CFP!

Cathy is an amazing part of the Buffalo/Rochester Infosec scene. Great profile subject

key #ces news for @reckless.bsky.social will.I.am and party speakers on the show floor

Here's Ep 1 of Better Offline's CES Coverage - I'm joined by Robert Evans, Ed Ongweso Jr., David Roth, Scott Stein, Lisa Eadicicco and Matt Binder to talk NVIDIA's tepid press conference, LLMs in TVs, smart glasses, and Robert's exoskeleton. open.spotify.com/episode/1a5P... linktr.ee/betteroffline

a “Space Force”, if you will

Senator Schumer is no longer effective and should be replaced. If you can’t lead the fight to stop healthcare premiums from skyrocketing for Americans, what will you fight for?

This thread does a better job of capturing why the cloud isn’t merely “renting a bunch of servers” than anything else I’ve seen recently.

If you told me I could have a great review of my new book from the NYT or from Cory Doctorow, I'd take the latter in a heartbeat pluralistic.net/2025/09/23/o...

The Ravens Achilles Heel www.thedrawplay.com/comic/the-ha...

The nerdiest but honest way to explain iPhone events in 2025: This is how Apple plans to squeeze 1% to 2% incremental growth from a smartphone market that stopped growing years ago. The company is a genius at making money from this kind of dull thinking.

Confession time: I've been working on a secret side project at Vox Media for the past 18 months and it launched yesterday

My closing remarks on Around the Horn. Sports is connection. And life is best when it is shared. Thank you for sharing for 23 years youtube.com/shorts/p45s-... Videos like this and more coming to my YouTube page. Please subscribe!

Once again @reckless.bsky.social strikes again, copyright is the only law that keeps tech inline

Wild to pull this move weeks before WWDC, the entire purpose if which is wooing developers www.theverge.com/news/667484/...

Welcome to May, everyone! With a little over a month to go until our 2025 event on June 7, we're excited to announce that we've finished our Call For Presenters and published our schedule.

Come join us for Buffalo's favorite infosec event. Swag, stickers, coffee, technical talks, lockpicking, soldering, capturing of flags, lunch, networking, shenanigans, and a tshirt for just twenty American dollars, it's the best deal going.

Buffalo Pro Soccer today announced plans to construct a 7,600-seat, privately-funded stadium near the Buffalo River in the city’s Valley neighborhood, located at Elk and Lee Street. #USLChampionship www.uslsoccer.com/news_article...

Hello friends. The dreaded and long awaiting blog on WHAT THE FUCK HAPPENED TO THE CYBERSECURITY JOBS MARKET has arrived. tisiphone.net/2025/04/01/l... I'm sorry.

Update your Traffic Light Protocol documentation with a new tier TLP:Signal

Huge shout out to our Thruway neighbors at BSidesROC! Have an awesome event today!

New details on the ByBit/Safe{Wallet} breach, and uhhh wow, some really silly blunders on the DPRK side. They still succeeded which is the most upsetting part of all of this. Let's bully some threat actor tradecraft! A🧵 x.com/safe/status/...

Anyone saying that GenAI could replace software engineers don't understand how software is created (and operated.) Tool innovations have always make the process of building software faster, cheaper: GenAI and AI agents will also do this. But these are tools and efficiency gains.

You know after Posts and Shorts, I didn't think YouTube could get any worse, but they've outdone themselves this time with "Playables" I simply do not understand who is making these decisions, YouTube is a video site, why does it need shitty phone games that keep putting themselves in my feed

More from from Chaos Communications Congress at the end of the year. Even though it was 'Stored on an unprotected Amazon Cloud server', it qualify VW for an @quinnypig.com bucket negligence award? cyberinsider.com/vw-suffers-m...

I’ve been working on the Zatik SaaS Safety Bar to help clients evaluate products. Super proud that Consumer Reports used the tool in their content to CISA on in support of their recently released ”Product Security Bad Practices” guidance innovation.consumerreports.org/charging-for...

My summary of the top announcements from re:Invent for security teams. www.wiz.io/blog/top-aws...

Always interested to see what @reckless.bsky.social and @theverge.com is getting up to when it comes to media. Super happy to be a week 1 Supporter. Feedly feeds are updated. Just wish my subscription came with a chance to sponsor The Lightning Round ! www.theverge.com/2024/12/3/24...

python-build-standalone has exploded in popularity, with over 70M downloads all-time. But what is a "standalone" Python build? It wasn't obvious to me at first! Initially, I didn't understand what problem was being solved or why it mattered...

Who wants to be next? www.therecord.com/news/waterlo...