Mastodawn

Erik Poll 1d ago

Gary McGraw 2d ago

A good posting reality check on Anthropic's mythos hyperbole around #swsec #appsec

#MLsec adjacent

https://blog.vidocsecurity.com/blog/we-reproduced-anthropics-mythos-findings-with-public-models

We Reproduced Anthropic's Mythos Findings With Public Models

Anthropic framed Mythos and Project Glasswing as proof that frontier AI vulnerability research now needs gated access. We tested the public, patched cases with GPT-5.4 and Claude Opus 4.6 and found that the key building blocks are already accessible outside Glasswing, while reliable operationalization remains the real moat.

Vidoc Security Lab

Erik Poll 1d ago

Vereniging NLUUG 2d ago

Op de NLUUG voorjaarsconferentie van 7 mei 2026 komen honderden professionele gebruikers van open systemen en open source software samen. Naast de ledenbijdrage zijn deze bijeenkomsten ook mogelijk dankzij sponsors. Is jouw organisatie ook actief met open source en open standaarden? Word dan ook sponsor!

https://nluug.nl/sponsoring/

(En schrijf je in voor de https://nluug.nl/evenementen/nluug/voorjaarsconferentie-2026/ )

Tot op de voorjaarsconferentie!

#NLUUG is dé vereniging voor (professionele) gebruikers van UNIX/Linux, #OpenSource, #OpenSystemen en #OpenStandaarden in NL.

Sponsoring

Sponsoring vormt samen met lidmaatschapsgelden de basis voor onze inkomsten. Op deze pagina beschrijven we welke opties er zijn qua sponsoring en de voordelen voor onze sponsors.

Erik Poll 1d ago

IFTAS Oct 5, 2025

Coordinated Pro-Russian Propaganda Network Targeting ActivityPub and ATProto Services

Indicators of compromise (IOCs) that identify accounts as likely being part of the network include: a single follow (the bsky.brid.gy @ bsky.brid.gy account), or first follow is the bridge an out-of-character bio line linking to pro-Russia Telegram channels, or Russian news sources posts that cut off mid-sentence disposable email domains used for the account registration Some servers are not removing these accounts, you can review what the accounts look like, and the content they post, […]

https://about.iftas.org/2025/10/05/coordinated-pro-russian-propaganda-network-targeting-activitypub-and-atproto-services/

Erik Poll 1d ago

Soverin Mar 18

Which email provider handles your municipality's official communications?

We built mxmap.nl to make that visible, all Dutch municipalities, mapped by email provider based on public DNS records.
Inspired by the Swiss original mxmap.ch by David Huser. We adapted it for the Netherlands. All credit for the concept goes to him.

Under the CLOUD Act, provider location matters. The map makes the current reality clear.

www.mxmap.nl

#DigitalSovereignty #GDPR #NIS2 #mxmap

Erik Poll 1d ago

Show thread

noplasticshower 5d ago

My view #MLsec #swsec #appsec https://berryvilleiml.com/2026/04/09/too-dangerous-to-release-again-software-security-and-ai/

Too Dangerous to Release (Again): Software Security and AI | BIML

Have you heard? The mythos model from Anthropic is so dangerously good at finding software vulnerabilities that its rele

Berryville Institute of Machine Learning

Erik Poll Apr 3

Tim Apr 2

De afgelopen periode hebben we gewerkt aan een meetlat waarmee je de digitale autonomie van je applicatielandschap in kaart kunt brengen. Vandaag hebben we die als @utrechtuniversity publiek beschikbaar gesteld.

Digitale autonomie is meer dan "weg bij big tech". Het gaat over geopolitiek, lock-in, weerbaarheid, contracten en academische vrijheid en nog veel meer.

Het Digital Autonomy Assessment Framework (DAAF) maakt dat inzichtelijk. #digitaleautonomie

https://www.uu.nl/nieuws/universiteit-utrecht-stelt-tool-beschikbaar-voor-meten-kwetsbaarheid-digitale-autonomie

Universiteit Utrecht stelt tool beschikbaar voor meten kwetsbaarheid digitale autonomie

We maken ons zorgen over onze digitale autonomie. Daarom brengen we nu onze digitale kwetsbaarheden en afhankelijkheden in kaart. Hiervoor hebben we een meetlat ontwikkeld.

Universiteit Utrecht

Erik Poll Mar 10

Gary McGraw Mar 9

It is both rewarding and daunting to be mentioned in this work along with Ken Thompson and Ross Anderson. Lots of ideas expressed in this essay are right on the money.

Have a read. Pass it on.

#MLsec #ML #swsec #appsec #security #infosec

https://medium.com/@maconstantino/trust-me-i-am-compiled-from-ken-thompson-to-the-age-of-poisoned-models-e172c852e408

Trust Me, I am Compiled: From Ken Thompson to the Age of Poisoned Models

How a three-page paper from 1984 predicted everything wrong with AI security — and why the people who warned us about software are now…

Medium

Erik Poll Mar 6

Luca Mar 6

prepping NATO-style cybersecurity competition with a handful of talented students @TUEindhoven

Real SOC and IT/OT env. It is going to be e-p-i-c!

If you have pointers or know of good resources to look at pls let me know!

Erik Poll Feb 27

L⭕️rd Quux RCX CCX Feb 22

Hear Ye! Hear Ye!

In about a week the Call for Papers will close!! So just a very limited time to submit your abstract and other necessary information to participate in this sole NLUUG conference for 2026!

So stop procrastinating and visit https://cfp.nluug.nl/ now!!

Erik Poll Feb 23

Frederik Borgesius Feb 23

The Netherlands. Today's TV show Radar (20:25, NPO 2) will air an investigation on data collection by big tech on Dutch pharmacy websites.

They interviewed me, so perhaps I’m on TV tonight.

Articles in De Groene and Investico (all in Dutch):

https://www.groene.nl/artikel/lonend-klikgedrag

https://www.platform-investico.nl/onderzoeken/drogisten-delen-massaal-gevoelige-informatie-met-facebook-en-google

About the TV show: https://radar.avrotros.nl/artikel/online-drogisterijen-en-webshops-delen-gevoelige-gezondheidsdata-met-big-tech-62391

#gdpr #avg #privacy #advertising #tech #law

Nederlandse drogisten versturen massaal gezondheidsgegevens naar Facebook en Google

Wie online een zwangerschapstest koopt, loopt de kans dat Amerikaanse techbedrijven weet krijgen van je kinderwens. Met geitenpaadjes verzamelen de drogisten gevoelige informatie over je gezondheid, om die vervolgens door te sturen aan Google of Meta. Daarmee overtreden ze de privacywet.

De Groene Amsterdammer