Tarah Wheeler

PLEASE SHARE: Folks, I need *public domain* or *purchasable stock imagery* photos of especially older women holding signs in protests that essentially say "I can't believe I still have to protest this shit". They *cannot* be CC-licensed - they either have to be public domain or licensed for royalty-based purchase since they'll be in an e-book. This is an excellent example from Shutterstock: https://www.shutterstock.com/image-photo/older-woman-holding-sign-that-believe-1632293194 And here's another good example from Alamy: https://www.alamy.com/womens-rights-equal-pay-for-women-rally-trafalgar-square-london-england-image62186118.html What I really, really want is an image I can be sure is from 1912 but if you have any favorite images, show me?

So I hacked my way into being Cyber Policy Initiative Senior Fellow at the University of Chicago's Harris School of Public Policy. I'm workin on rural water critical infrastructure cybersecurity. Do you even hack utilities? Please chat w me. I need to quickly find out where I"m wrong about some of my assumptions. Still very entertained by the fact that I *finally* got into the University of Chicago. :D https://cpi.harris.uchicago.edu/2025/12/23/harris-cyber-policy-initiative-taps-top-hacker-to-design-new-security-model-for-water-utilities/

If you have a risk register, and your organization does not have an SBOM for your built apps, the lack of an SBOM goes in your risk register. If you don't have a risk register, make one, and add your lack of SBOMs to it.

I do this ish for a living, I am an AI developer and researcher, and *I* don’t fully understand the security implications. What hope do regular users have?

Windows Central

Your AI assistants in Windows 11 could be giving hackers your files

Microsoft warns that new AI agents, which access your Documents and Desktop, introduce novel security risks like Xpia.

Good news, everyone! The password has been updated to "LouvreWinter2025!" and is now compliant with our password change policies.

American critical infrastructure is ten thousand small businesses in a trenchcoat.

On my way. #hackersummercamp #defcon #blackhat Your only guarantee to see me is at the @Electronic Frontier Foundation poker tournament. Come one, come all. EFF.org/poker

Me, at lunch: *walks into bodega with screaming fire alarm going off in building* *shops for sandwich and Monster* Clerk: “don’t worry about the alarm; it’s just a test.” Me, dead-eyed, mid-cyber incident response: “I don’t care.” *exits stage left, pursued by a Jira ticket.* Yes, it really happened. I recommend the Knuckle Sandwich with pork and jam.

“Fuck you, I won’t do what you tell me” I whisper quietly so I don’t disturb the neighbors after hours while I’m processing payroll expense reports.

It does bear repeating that “the only unhackable computer is one that’s running a secure operating system, welded inside a steel safe, buried under a ton of concrete at the bottom of a coal mine guarded by the SAS and a couple of armoured divisions, and *switched off*”. ~ @Charlie Stross