Chris Whitlock

GRC & Tech Enthusiast | Privacy & Security Advocate

[Tim Urban @waitbutwhy]

[read about what’s happening with AI]

ME: Wow we’re actually legit fucked this is so bad.

[go outside]

ME: Wait those people are all acting like nothing unusual is happening. Maybe I was just in a paranoid bubble? Yeah it must be that. Phew.

[read more about what’s happening with AI]

ME: Wait no we ARE fucked. Shit. It’s all those people outside who are in a delusional bubble.

[go outside]

ME: Wait...

[Chris Whitlock @CWhitlock_GRC]

@__final__ Honestly, probably because the main site isn't the best and I couldn't find a media or press page either which typically contains such information.

I doubt many would somehow find it among the 198 repos and look that hard...

[Chris Whitlock @CWhitlock_GRC]

@grok @thdxr Great thanks but I also wanted total of all vulnerabilities as well, that includes everything by month and not just high-impact items.

[Chris Whitlock @CWhitlock_GRC]

Hey, @enteio . A game would be neat and all but key chains are functional and collectible.

What's the likelihood of making this happen?

[Ente @enteio]

All work and no play makes Jack a dull duck 🤫

[Chris Whitlock @CWhitlock_GRC]

@3LandObserver @lukechampine @seveibar https://t.co/8W1lsCriOH

[Chris Whitlock @CWhitlock_GRC]

I believe the point is defaulting to burn a key could have bigger consequences then it just remaining active.

It depends on many factors and it's never one fits all.

It would make more sense to call for more restrictive controls by default than all keys with a built-in kill switch.

Just trying to explain it differently in good faith here. It's a great topic.

[Chris Whitlock @CWhitlock_GRC]

@TGiffel @AIQuanting @lukechampine @seveibar https://t.co/8W1lsCqKZ9

[Chris Whitlock @CWhitlock_GRC]

I believe the point is defaulting to burn a key could have bigger consequences then it just remaining active.

It depends on many factors and it's never one fits all.

It would make more sense to call for more restrictive controls by default than all keys with a built-in kill switch.

Just trying to explain it differently in good faith here. It's a great topic.

[Chris Whitlock @CWhitlock_GRC]

I believe the point is defaulting to burn a key could have bigger consequences then it just remaining active.

It depends on many factors and it's never one fits all.

It would make more sense to call for more restrictive controls by default than all keys with a built-in kill switch.

Just trying to explain it differently in good faith here. It's a great topic.

[Chris Whitlock @CWhitlock_GRC]

Agreed and I'd prefer other more restrictive controls instead. But of course, that adds fiction. I'd prefer:

- Required rotation of full privileged keys
- IP allow listing for business accounts past a dollar amount
- Required budget alerts and limits

Providing the option to completely halt what it's running instead of just implementing reasonable controls over the key and properly managing them seems lazy and irresponsible.

And anyhow, this would fall into gray hat/black hat when your talking about making the choice yourself to shutdown operations. Legal and c-suite probably would never understand.

[Chris Whitlock @CWhitlock_GRC]

@YouHitYourHead @JohnDCook 💯 Always the most productive for me, even if traded with morning hours. No DMs, team meetings, emails, or other interruptions.

[Chris Whitlock @CWhitlock_GRC]

@JohnDCook I 💯 believe quiet uninterripted hours of an all nighter are more productive, even if it gets traded with morning hours.

It's an questionable addiction. Caffeine, music, and just getting work done until the daywalkers start to wake.

Easily my most productive times.

[Chris Whitlock @CWhitlock_GRC]

@umami_software Absolutely disgusting to see this in 2026. It's the digital version of the box getting smaller but the price going up

...but costs nothing.

[Chris Whitlock @CWhitlock_GRC]

@privacytests

[Chris Whitlock @CWhitlock_GRC]

@HPotoure @shannonical This is a pretty good point...
Especially if it is true theres no reason financially or otherwise.

[Chris Whitlock @CWhitlock_GRC]

@grok rate this 0-10 for sexism and very briefly explain. Discrimination sucks.

[Shannon Loys @shannonical]

No, not exactly the same. If I could somehow make it into a formula, I would factor in a family's given circumstances, how many kids they have already, I would weight woman's preference higher than the man's, and if that formula still turned out a true stalemate, I would have it default to having the kid over not. Because we regret things we don't do more than we do.

[Chris Whitlock @CWhitlock_GRC]

@psoidog @serbrutusbuck @shannonical @bacchal65965 I'm sorry your experience and perspective of fatherhood figures have been poor by them not putting work in.

It is unfair to apply that negative experience universally. Not every father is a deadbeat.

[Chris Whitlock @CWhitlock_GRC]

@shannonical @Nath_Rake More say over having children and default to having a child in stalemate?

That's a crazy position for what should be a mutual act. I wouldn't want to be raped.

[Chris Whitlock @CWhitlock_GRC]

@di_decoded Removed nearly a year ago.

Wasn't getting value out of it. Largely low-quality copy pasted AI to get views, and "influencers".

[Chris Whitlock @CWhitlock_GRC]

Emails are always Personally Identifiable Information (PII) right? Almost always.

If the email belongs to one person, including an alias address, it’s PII by itself.

But it's interesting because generic (e.g., [email protected]) may not be considered PII if it doesn't identify one individual, shared by many. It's a potential exception.

At least in accordance with @NIST SP 800-122 "Guide to Protecting the Confidentiality of Personally Identifiable Information (PII)", page 7. (see screenshot)

https://t.co/fFbxH4PeDM

Doesn't mean you should treat it differently, and I'm not a lawyer, not professional advice. I just love NIST. 🤓

---

Quoting the comment that sparked this, that was regarding why not just publicly post your email.

[Austere Grim @austeregrim]

@bruvimtired Its pii, it can identify your ip address.

[Chris Whitlock @CWhitlock_GRC]

@eddiejaoude @bruvimtired 💯 This
And the only option is to make a rule to send to spam/trash.