Mythos feels a lot like Snowden. When Snowden dropped, everyone in the game already knew it was happening — but it was the first time the collective zeitgeist had had the thought — and it reshaped how everyone else thought about a lot of things. It was the trigger for cybersecurity being dinner-table conversation in the way it is today.
It's the same with Mythos and the realization of how vulnerable we actually are.
Or: what a bunch of us have been saying since Mythos dropped, in three RSAC interviews and most of the hallway conversations in between. DON'T PANIC If you work in security, you've spent the last month and a half in a conversation that won't
Everyone has a take on Moksha's 89-vuln XAPI drop. Almost everyone misses the same thing: it wasn't one decision, it was four: go public, go Day-0, withhold patches from Citrix, lean into the "shittrix" frame. Coordinated disclosure runs on goodwill, and the goodwill runs out sometimes.
Move over #vulnpocalypse — there's a new term we need to talk about: the #slopdemic. AI didn't invent low-quality vuln reports, but it just turbocharged them, and F/OSS is drowning.
Birbs, week two — what the system got wrong, four times, and what came back from the dead Follow-up to "Monitoring the Situation — The Internet of Birbs" When I hit publish on the birbs post last Wednesday, I described an "AI-powered nest monitor" with a straight face.
