Erica Windisch

Building federated RSI agents that learn at the edge. Available to agent harnesses and physical AI systems. Powered by ATproto.

[Erica Windisch @birdhax]

picked up a new domain name

[Erica Windisch @birdhax]

@elonmusk 😎

[Erica Windisch @birdhax]

I'm cooking.

[Erica Windisch @birdhax]

impact of openai math on quantum stocks?

[Erica Windisch @birdhax]

That independent security audit used ~$20k in tokens over 2-3 days.

[Erica Windisch @birdhax]

@dotpem not patching or patching when there's a supply chain attack

[Erica Windisch @birdhax]

that's a true story

[Erica Windisch @birdhax]

I'm a boomer of early 00's hosting + colo, but many engineers have grown too soft and learned in books what we learned from simultaneous inbound and outbound DoS on flat L2 networks of pre-KYC tenants and Frontpage hacks. Assume compromise and always implement defense in depth.

[Kristoffer Aurdal @aurdal]

@deepestmoney93 @birdhax Don't get me wrong. Lateral movement is an issue. And I think it would be better if this had been disclosed to the devs first. But if you're letting untrusted people/programs into your network, that network is compromised. No way around it. Defense in depth is not optional.

[Erica Windisch @birdhax]

I didn't learn from SANS, I learned from keeping Suge Knight and Bin Laden from nuking each other across Linux 2.4 DAC with PaX and grsecurity.

[Erica Windisch @birdhax]

cybersecurity is art

[Erica Windisch @birdhax]

@dwahdany @GrahamHelton3 Because you don't have the PoCs that were privately disclosed

[Erica Windisch @birdhax]

Watching the github merges — @raggi is a hero.

[Matthew Green @matthew_d_green]

I don’t know how seriously to take this, but it’ll be pretty funny if every security researcher in the US gets pwned using open-weight models, because the frontier US labs wouldn’t give them access to their red-team models.

[Erica Windisch @birdhax]

Is today a good day to talk about bug bounties?

[Erica Windisch @birdhax]

@tilver @ThePrimeagen So many opportunities just falling into the lap of 45 year old self-employed transgender hackers these days... I'll just have to keep doing what I've been doing.

Anyway, the new normal is continuous disclosure.

[Erica Windisch @birdhax]

Some suggest I'll never work in this town again because I believe in and practice continuous disclosure.

Yet, I've never had so many SOC analysts and threat hunters connecting on LinkedIn.

[Erica Windisch @birdhax]

@xkhdc I later realized that the hash is of a PoC only disclosed to an affected vendor. 😭

[Erica Windisch @birdhax]

I have a tailscale zero day fyi

[Erica Windisch @birdhax]

@ZairKSM @HackForumsNet @NetworkChuck we didn't even bother abliterating glm-5.3 for this

[Erica Windisch @birdhax]

@tmuxvim @huntrr that can be broken into with nothing more than the number 4?

[Bones 🏳️‍🌈🕎 @drb0n3z]

Running SSH without a password was already a flaw. WTF are we doing?