Jason Sinchak

I lead the product security practice for the healthcare cybersecurity firm
@l9group. Previous life as a cyber startup founder and advisor.

[Josh Zoffer @joshzoff]

I’m in @FT today making a simple argument: data centers are creating market-driven demand for American-made industrial tech. This is the kind of industrial renaissance Ds and Rs say they want, but politics are pushing hard the other way. /1

https://t.co/wrNTocQdNQ

[Amin @eCom_Amin]

https://t.co/ciiFjdioeb

[Jason Sinchak @j_synack]

When one of the largest banks sends you an SMS one-time code that, aside from a few incorrect numbers, closely mirrors your phone number, it’s a flash of an epic security flaw.

That usually means the “random” code isn’t actually random, parts of your deterministic data are being baked into it as a seed, which dramatically weakens security. Every once in a while the entropy isn’t great and the flaw is exposed. Just so happened to occur for a person in cybersecurity…

[ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ @DanielMiessler]

I don’t think AGI requires smarter models than we already have.

If you define AGI as I do, which is the ability to replace a human knowledge worker, the models are already smart enough.

What remains is a product that sufficiently orchestrates agents.

[Jason Sinchak @j_synack]

@wordgrammer Actual facts around the events today

[wordgrammer @wordgrammer]

Okay. Thanks for the nerd snipe guys. I spent the day learning exactly how DeepSeek trained at 1/30 the price, instead of working on my pitch deck. The tl;dr to everything, according to their papers:

[Jason Sinchak @j_synack]

@TJFIV Carta

[Jason Sinchak @j_synack]

Cylance was binary focused when the industry moved to script-based code exec, this is the ultimate result https://t.co/OfHoByv4Yk

[Jason Sinchak @j_synack]

Assuming you’ve seen the winamp source code fiasco https://t.co/ySuqTtMoRA

[Jason Sinchak @j_synack]

Refresh

[Dave @davebftv]

Matt Eberflus said he felt confident in the FG range for Cairo Santos and that’s why they didn’t fight for extra yardage.

No accountability. Fire him.

[Kyante Wilson 🦍 @kyantewilson_]

Travis Kelce whenever he is the last leg of my parlay

[Jason Sinchak @j_synack]

@vysecurity @0xfffff5 my favorite is when a known issue exists and there’s a request to not exploit it again on the upcoming test because it’s not going to get fixed

[Jason Sinchak @j_synack]

@startupsharma Hard to see why an idea is worth anything if it doesnt exist in reality (execution)

[Jason Sinchak @j_synack]

@startupsharma Not Crowdstrike

[Jason Sinchak @j_synack]

Security tools are all designed to ensure that companies can continue to operate in the worst-case scenario of a data breach, so to be the root cause of a global IT outage is an unmitigated disaster. The era of security as a third-party software add-on is over.

[Jason Sinchak @j_synack]

@thesamparr Lincoln Navigator L, must be the L as with the third row up there is still plenty of cargo, plus L gets a bigger gas tank

[Jason Sinchak @j_synack]

@HackingDave I spy a GM..LSx?

[Jason Sinchak @j_synack]

Folks, just own the flex instead of “I would like to thank X for [false narrative about how you were not in it for personal gain]” - especially common when a person does a conference/pod/etc talk, wants resume-boosting credit, yet thinks this method shields from self promotion

[Today In Infosec @todayininfosec]

2014: The Washington Post published an article which included a photo of TSA master keys. A short time later functional keys were 3-d printed using the key patterns in the photo. Oops.

(This is a modified version of the photo.)