Richard Stiennon

Headed to RSAC to sign copies of Guardians of the Machine age: Why AI Security Will Define the Future of Digital Defense. Hit me up for the three venues where you can get free signed copies. amazon.com/dp/1945254165 #RSA #RSAC #AISecurity

Wall hacks in real life using augmented reality. New mad science experiment -- I used $300 Meta RayBan glasses and an iPhone to recreate EagleEye's "see-through-walls" tracking. The answer was visual positioning tech to build a shared spatial map. Code on GitHub. 0:00 - The Experiment 0:38 - Dumb Glasses, Smart Tracking 1:54 - No Street View? No Problem 3:17 - Seeing Through Walls With a Phone 4:24 - The Indoor Problem Nobody Solved 5:20 - This Is What It Can Do 6:38 - Use Cases Beyond the Flex 7:44 - The Double Edge 10:32 - Conclusion

@lisavsworld I love RLS. I was blown away by his essay on writing. Still can't tell if he was pulling our leg.

I remember being 15 and reading Treasure Island, loving the absolute crap out of it, and then turning around and reading The Strange Case of Dr. Jekyll and Mr. Hyde. I loved it even more. Two vastly different stories. I couldn't believe they were written by the same author. 20 years later, I remember telling my dad about this and he didn't believe me. He had to look it up and was equally blown away. Robert Louis Stevenson is one one of the GOATs. A children's adventure novel and a Gothic horror. THAT is talent.

@briansugar Really cool. Great analysis of our deck.

Founders. Send me your pitch deck. The one you're sending to investors right now. The one you've been iterating on for weeks. The one you think is ready. Arthur will read it. He's our AI partner at Sugar Capital, trained on every email, every meeting, and every deck we've ever seen. He comes back in 90 seconds with a verdict, a score, a steelman, and a pull quote you'll either frame or delete. Free. Honest. Useful. Find out what a fund actually thinks when they open your deck:

@Sumskillz @ConsulofRome_ Or macrame.

@ConsulofRome_ I always thought they were for knotting rope….

These are Roman Dodecahedrons. Hundreds have been found across Europe dating back to the 2nd century and they are used for

@rustaceans_rs This? #rust-standard-library-audit-findings" target="_blank" rel="nofollow noopener">github.com/Swival/securit…

Rust News: Rust stdlib unsoundness found… by AI 🦀 The Rust Foundation has been using Claude Mythos (from Anthropic) to audit the standard library, and it’s already turning up issues. Some lower-severity bugs are now public, and more serious findings are still under embargo.

@heynavtoor Thanks. Installed. Finally, no more ads in Yahoo business email. Sorry Rocket Mortgage. I won't be constantly reminded to check rates.

LINK: github.com/gorhill/uBlock

Google has a pirate enemy. He's one guy. His name is Raymond Hill. He built uBlock Origin. The world's best ad blocker. 63K stars. GPL-3.0. He literally refuses every dollar you try to send him. Then Google did the unthinkable. July 24, 2025. Manifest V2 disabled everywhere. The full uBlock Origin stopped working on Chrome. The world's biggest ad company nuked the world's biggest ad blocker on its own browser. They called it "security." Coincidence. Here's the wildest part: Raymond didn't fold. Latest release: March 11, 2026. Still alive on Firefox. Still alive on Edge. Still alive on Brave. Still GPL-3.0. Still refusing every dollar. One developer vs. the trillion-dollar ad empire. But DO NOT install it. We should all keep Google richer. 100% Open Source. (Link in the comments)

Subscribe to The Security Industry, by @stiennon stiennon.substack.com/?r=6a9m2&utm_c…

Congratulations to all our nominees in the Authority Award category 👏 Herb Blecher @stiennon @arnoldjon Vote here 👉🏻 docs.google.com/forms/d/e/1FAI…

Are we doing this? stiennon.substack.com/p/we-are-doing…

@mornings0da Similar to the cube at University of Michigan. wikimapia.org/2176780/The-Cu…

@ElliotKaufman6 You (the WSJ) helped put this numbskull in power. Now do something about it.

My wife: . . . you're still going to do the dishes tonight, right?

@Gaurab When I was in school (1981) my materials science prof. told us that the invention of grain-oriented electrical steel increased energy efficiency across the grid by 6%.

Half of America's AI data centers planned for 2026 are delayed or cancelled. They're waiting on transformers. I build chemical plants. Transformer prices have tripled in the last four years. Lead times are 2 to 4 years. Each new plant we build competes with AI data centers for the same grid equipment. Every large power transformer in America runs on grain-oriented electrical steel. It's made by rolling iron and silicon together until their crystals align in one direction. No other alloy works at utility scale and only one US company makes it: Cleveland-Cliffs. The average large power transformer on the grid is 38 years old. Service life is 40. Amazon, Google, Meta, and Microsoft committed $650 billion to AI infrastructure this year. Nvidia's most expensive GPU is useless without a transformer.

@WilliamShatner The number 11 kind of gave it away.

🤨You do realize that it was Apollo 11 that landed on the moon and there were previous Apollo missions that led up to the landing including a mission that ended in fatalities on the launchpad of the crew. 🤷🏼 🙄

First time in history. Apollo 17 was 1972, eleven years before the Sony Betacam existed. And 18 years before the first camera phone with video, the Sharp J-SH04.

@DanielMiessler Thanks for this. I am going to re-frame the IT-Harvest value prop as "context for the cybersecurity eco-system."

One of the biggest things I’ve learned from AI in the last 3 years is that context makes problems transparent. If you don’t know what the field looks like, or any of the players, and you’re supposed to compete, you kind of need to be an expert or a genius. But if you can see everything clearly...every aspect of things. Every weakness. Every strength. Every twist and turn. You barely need to think at all. 90% of any game is deeply understanding how it works. Context makes problems transparent.

@diego_DDT_ @OVRtheReality My wife gets the credit. She wants to ride her normal 20 mile route during the winter. :-)

@stiennon @OVRtheReality This is a quite cool idea!!!!

The first global, city-scale 3D map is taking shape, and it’s machine-readable. City-scale environments can now be reconstructed in high-fidelity, reaching a level of detail that is becoming almost indistinguishable from reality. This leap is made possible by large-scale mapping using just an Insta360 X5 and Over the Reality technology. So far, our dataset includes: - 220,000+ 3D mapped locations - 97M images - 1,000TB of spatial data Growing by more than 10,000+ newly mapped locations every week. Enabling Visual AI, Robotics, VPS, XR, and Digital twins.

@HackingLZ Spot on.

If you didn't read my blog here... What Defenders Should Actually Take Away Mythos is real. The capability shift is real. The hype is still wrong. Because the story is not that AI suddenly invented offensive asymmetry. The story is that defenders were already on the wrong side of exposure and remediation economics, and now the clock moves even faster. Attackers do not need a revolutionary future to beat most organizations. They are usually doing it with the infrastructure those organizations already forgot to fix.

@aakashgupta Must be why they completely removed any number you can call for KDP support from all of their web pages.

Amazon's internal metrics said customers waited under 60 seconds for customer service. Jeff Bezos picked up the phone in a meeting and waited more than 10 minutes. The head of customer service had been defending the number. Bezos said "Ok, let's call." He dialed Amazon's 1-800 line on speaker. The room sat there for over ten minutes before a rep answered. The metric didn't survive the meeting. Bezos has a saying: when the data and the anecdotes disagree, the anecdotes are usually right. Metrics don't measure reality. They measure what you designed them to measure. Customer service dashboards commonly filter out abandoned calls, cap hold time at the IVR timeout, and start the clock after the menu tree completes. Every one of those choices pushes the average down. The customers hanging up at minute 9 are not in the denominator. The 60-second number was technically accurate and practically wrong. That call broke through a defended metric in a way no spreadsheet could have. The head of CS had dashboards and a team whose job was to report that number going down quarter over quarter. Bezos had 10 minutes of hold music and a room full of people watching. This is the executive test almost nobody runs. Call your own 1-800 line. Try to buy your own product in incognito. Every senior leader can do it in under 15 minutes. Almost none do, because the dashboards feel like the truth and the dashboards say things are fine. The measurement got redesigned. Wait times actually fell. When your data says you're winning and your customers say you're losing, the customers are right. The data was built by people whose job depends on it going down.

@StephNass In dashboard.it-harvest.com we track 23,000 investments by 6,000+ investors in the 4,025 strong cybersecurity industry.

The first time I raised, I built spreadsheet with investor names. Now, I have something 10x better: Building an investor list is smart. Every great founder I know has a list of some kind. But manually checking if each investor actually deploys capital in your stage, vertical, and geography? It can take hours. And as a founder, you’re busy. So we came up with a better idea: OpenMap. A visual directory of 16,000+ VCs, angels, and family offices worldwide. Think of it as Google Maps for Venture Capital. Just search by city, stage, or vertical and it will: 1: Show you investors actively looking for deals 2: Find warm intros through your LinkedIn and Gmail connections 3: Let you submit your deck directly to investors who match your criteria Instead of spending weeks building a list from scratch, you get a live, searchable map of 16,000+ investors in seconds. Like + Comment "VC map" for free access I’ll send you a DM with the link. PS - If you're a VC, you should be on this map. If you're a founder, you need to know this map.

@Scobleizer @signulll Ironic that he spoke over 500 words trying to convey a simple concept.

LOVE THIS @signulll. Brilliant.