🎻 ➡️ BlueSky

I joined Twitter fifteen years ago. I had no idea that I would use it for more than throwaway tweets about my breakfast. Sadly, Elmo thought that $44B might buy him power, and X was born. I've moved to BlueSky.

This is what 65%+ disapproval looks like.

SEN. @ChrisCoons: “Anybody else brave enough to say the Constitution prevents President Trump from seeking a 3rd term?” TRUMP JUDGE NOMINEES: 🦗 🦗 Yikes.

There are many ways for individual apps to raise the bar against attackers, and some non-obvious mechanisms where Windows can protect you (e.g. security software watches cross-process memory shenanigans) but ultimately the (legacy)(winning) Windows model has little isolation.

@L1v1ng0ffTh3L4N @UjlakiMarci There's a further exploration of this space here: textslashplain.com/2020/02/11/bro… Ultimately, it all boils down to a fundamental law of Windows: If you run a malicious app on your device as you, you're gonna have a bad day.

Microsoft Edge loads all your saved passwords into memory in cleartext — even when you’re not using them.

@Ctoast1999 @L1v1ng0ffTh3L4N This has been a well documented threat vector for fifteen years or so. Encrypting creds in memory isn’t helpful when the decryption key is also, you guessed it, in memory.

@L1v1ng0ffTh3L4N @L1v1ng0ffTh3L4N the question is though, is this a Microsoft issue or a chromium in general issue? If the latter is the case, we have a ticking time bomb on our hands

@_brianclifton @brave That is indeed the most likely explanation. I’m gonna refrain from comment on the feature overall and just say that I’ve given that team feedback.

@brave Talking with a coworker - this might be expected behavior. @ericlaw wrote about that here: textslashplain.com/2025/06/12/fam… The recent change must be - Brave must have been added to this 3rd party list? It was working fine until today.

@Microsoft did you roll out a recent change to Microsoft Family Safety? All of the sudden, the @brave browser was blocked for my son. The account settings say "Unsafe browsers" are blocked.

TWO KINGS. 👑

“Oh do you think he was referring to you” BRILLIANT

Walkthrough of an RMM Abuse attack, with screenshots. textslashplain.com/2026/04/24/att…

"Token consumption" is the new "Story point". Companies are literally tracking how many tokens their teams use, like it means something. It doesn't. Using more tokens doesn't mean better work. It just means you spent more tokens. That's like measuring productivity by how many hours someone sat in a chair. We've seen this before: - lines of code - hours in the office - story points - number of meetings attended All garbage metrics that reward looking busy instead of actually doing anything now it's "ai adoption" measured by token usage. Same mistake, different dashboard. I've seen teams burn millions of tokens and produce nothing; literally nothing. Just people prompting for the sake of prompting because someone told them they need to "use ai more" The only question that matters is: did anything get better? Did you ship faster? Did quality go up? Did customers notice? Did engineers stop doing repetitive work they hated? Did support get less tickets? Did anything measurable actually change? If you can't answer that, your ai strategy is just a spending report. The worst part is when companies incentivize token usage directly. Now people optimize for visible activity instead of output. They confuse using the tool with getting results. You're literally training your team to waste money. Good metrics: time to ship, bugs caught, customer satisfaction, revenue per employee. Bad metrics: tokens consumed, number of prompts, "AI adoption rate". Stop measuring whether people touched the tool. measure whether the tool changed the result. Anything else is noise.

A quiet change arrived on Tuesday for Win11 users running the latest updates (not on the hotpatch branch). Users can now "bi-directionally switch", turning Smart App Control off & back on again w/o requiring a reinstall of Windows. (Hot-patched PCs get this with 4/14's baseline)

@FidelityChrtbl Yeah, I was naive to expect that the Fidelity Brokerage and Fidelity Charitable would actually, you know, work well together.

@ericlaw Thank you for reaching out. Form 8283 is completed by the donor, based on their individual circumstances. Cost basis information is typically retained by the delivering firm, not information Fidelity Charitable holds once the shares are (cont) spr.ly/l/6017B6oAvT

The folks @FidelityChrtbl send your Form 8283 without the information (share basis info) that you need to actually complete your taxes. WTF??

Windows is full of surprises. textslashplain.com/2026/03/24/win…

@ThinkstCanary Thanks!!

@ericlaw Sorry this took so long - Leighton has you covered: canarytokens.org/nest/create/svg

@ThinkstCanary Can we get a SVG canary on canarytokens.org/nest/

Here come the deepfakes. cnn.com/2026/03/13/pol…

Why the USA can't afford anything.

@AmericanExpress you are sending emails with broken Contact Us links.