security operations | engineering | incident response
Joined November 2014
- Tweets499
- Following291
- Followers313
- Likes5.6K
“Moved my firm from Boston to Shenzhen”
Some of my smartest friends at Huawei in Shenzhen have gone quiet recently… quite a few appear to be in Hangzhou (DeepSeek)… they can only WeChat their spouses and parents. From what I’ve heard, V5 is already in pretraining: ~2T parameter ultra-sparse MoE on Huawei Ascend 950/950DT, no NVIDIA (!!!). If it converges, it’ll be the first frontier model trained entirely on Chinese silicon.
1
53
Loving all the commentary from people who have clearly never done investigations:
“Binance should have simply avoided being hacked”
“Who interviews for a new job on their work computer?”
“Their developers should have been reading the intel reports!”
2
139
Absorb cost
Update: SAFU fund transfer is complete - this was the large 7,499 $BTC transfer visible here: blockchair.com/bitcoin/trans…
89
“Security through obscurity is dead”
…is dead
DPRK isn't just scrambling the money trail — they're literally DDOSing the visual tracking tools:
they've automated the split of $6.3b into tens of thousands of microscopic, cascading peeling chains inside a few blocks.
the sheer volume of addresses is designed to crash the GPU/CPU of any tracker trying to render the multi-chain flow, rendering forensics screens totally useless.
"WTF are you even doing here" = 50,000 automated micro-transactions designed to give chainalysis' analytics server a meltdown.
🤓
2
102
Blue Magic that's a brand name; Like Pepsi, that's a brand name. I stand behind it, I guarantee it!
bro, you literally challenged us first.
you posted “one step ahead of you boss” and we took it as a friendly challenge.
so we accepted it and built our own Red Eyes Toon Dragon PCB.
now you’re publicly accusing us and throwing insults because we accepted your challenge?
what exactly did you expect us to do?
tech moves fast. people compete, build, learn from each other, and make things better. that’s how innovation works.
we love challenges. if someone builds something better than us tomorrow, we’d happily accept that challenge too.
we don’t beg, and we’re not going to apologize just for competing. competition is fair.
what i don’t understand is why you keep attacking us over a challenge you started.
you can’t challenge someone to a race and then get mad when they show up.
that’s just poor sportsmanship.
we’re here to build cool stuff, not fight over who gets to build it first.
Readers added context they thought people might want to know
Will's "One step ahead of you boss" post replied to a general collectible PCBs idea by showing boards he was already making and selling; it did not challenge anyone to copy his specific design.
x.com/realwillreil/s…
x.com/realwillreil/s…
1
88
And you get the MOST leverage by absorbing the cost of an intrusion with your bank account
Most of the cybersecurity world is focused on the risks and vulnerabilities that lead to initial access, but defenders get *way* more leverage from making lateral movement impossible. You want to get to where the most an attacker can do is screen-scrape the victim's workstation.
1
94
If a company has a button, that when pushed, liquidates six billion dollars, ISO and SOC 2 are just the things that distract you from actually protecting your environment
Founded in China, holding company registration in the Cayman Islands, targeted by infinite hordes of high end craven attackers…ISO has no power here tbh
By the way, in case anyone was still wondering whether they are completely useless, Binance holds SOC 2 Type 2, ISO 27001, and several other certifications.
98
Difficult to reconcile messaging that “security is effective” when defenders are served the fruits of illegal technology transfer as means for combatting illegal technology transfer
Technical security may be effective but the messaging falls apart when surrounding layers are not
It’s wacky that the Chinese have pillaged US firms for decades and now blue teams are being funneled to Chinese LLM’s for defensive work
1
159
Access to your environment is a solved problem
“Assume breach” is not actually helpful in practice
You need to automate your current response system and abstract it to a series of buttons that your entire roster is capable of pushing
1
108
Unfilled PA6 is known to be stringy, and tends to be melty on high infill parts. Support removal is also a pita because of this.
It took me a while but I think I’m finally dialed in on high infill PA6 with on-object PETG support interfaces.
101
Your handler at Peking University after you mention the Micro Center form
Micro Center is now asking some RTX 5090 buyers to sign an “Advanced Computing Product Purchaser Declaration.”
The form requires the customer to provide their name, address, government-issued ID information, intended use, and where the product will be used.
It also states “NO EXPORT — NO EXCEPTIONS”, with buyers agreeing that they won’t export, re-export, transfer, resell, or provide the product to anyone intending to export it from the United States.
1
168
People who complain online that their commercial LLM won’t allow them to do things are publicly declaring that they have one or more of these:
1) Access/connection issues
2) Skill issues
3) Money issues
1
3
320