Fernando Montenegro 

743 Followers
362 Following
440 Posts
work: Long-time security technologist, now industry analyst.
personal: family, friends, occasional sports.
CurrentWorkFuturum Group
LikesCloud-Native Security, Anti-Fraud, Economics, PKM, ...
DislikesWeb3 et al
QuirksReally bad at face recognition, makes cringe-worthy wordplay
"In 2025, the President, in an effort to alleviate the effects of a... Anyone? Anyone?... a prolonged period of economic growth, enacted the... Anyone? Anyone? The tariff order? The liberation day tariff order? Which, anyone? Raised or lowered?... raised tariffs, in an effort to collect more revenue for the federal government. Did it work? Anyone? Anyone know the effects? It did not work.
Happy Liberation Day! Incredible choice by the 49.81% of voters who voted for this outcome.
With respect, Jensen, telling the next generation not to study computer science is a dangerous message—especially now. We are in an era of ransomware, AI-driven threats, and global cyberwarfare. If we don’t cultivate deep expertise—if we don’t train engineers who understand memory, system calls, cryptography, and how software actually works—we lose. I’ve reverse engineered malware, built secure Rust systems, and automated defenses. That skill didn’t come from just using tools—it came from knowing why they work. We don’t need fewer computer scientists—we need more warriors with keyboards. #CyberSecurity #Ransomware #ComputerScience

👇🏼

Via @marcelias:

There are only 44 days until Election Day and in many states voting has begun! Please:

-Make sure you are registered to vote.
-Make a plan to vote.
-Vote!

If your vote didn't matter, Republicans wouldn't be trying to suppress it.

The new Georgia election-night ballot counting law is ill-advised for many reasons (it will create chaos, solves no actual problems, and creates a logistic nightmare to implement this late in the game, for starters). But the thing that bothers me the most is that it will put ground-level election workers - who were already viciously targeted in 2020 - in the spotlight and at the center of partisan disputes.

We need to do better by these dedicated public servants.

An important tl;dr takeaway from this whole story: These explosions were not caused by a software bug or cyberattack that could be arbitrarily repeated against ordinary pagers, radios, or phones. This was an extremely sophisticated, at least somewhat risky, and definitely expensive intelligence and sabotage operation that involved covertly getting special devices rigged with explosives into the hands of Hezbollah affiliates.

In other words, no one can just type a command to blow up your phone.

To everyone asking "what are Harris' chances? Is it going to be close?", here's the deal: if you commit yourself to the work she will win in a landslide. If you don't, she'll lose by a little. You have agency. Don't leave anything on the field.

A conversation today reminded me of something: I have come to see speaking badly about ones users as a sign of a bad programmer.

Disengagement, cynicism, callousness, suspicion… these things make bad software.

Simultaneously our industry has elevated these traits as signs of “rationality”.

Caring, empathy, curiosity, engagement, learning, compassion… these things make good software.

And they don’t get the hype they deserve.

Aside, but important: in my experience, disengagement especially, but also to some extent the others, are often an early warning sign of burnout. So if you feel you’re slipping into that, maybe get someone you can talk to, there might be more going on than you realize.

One of the nice ways of keeping @defcon memories alive is to have @somafm on background as I work. :-)

So here we go. On my way to LAS later tonight for my favourite week of the year - Security/Hacker Summer Camp! You can find me at the Omdia Analyst Summit and the Black Hat Innovators and Investors Summit on Tuesday, Black Hat Briefings on Wednesday and Thursday, then DEFCON Friday to Sunday (topics/villages of interest include Blue Team, Cloud, AI, Policy).

Hoping everyone attending is able to make the best of the week, be it in new learnings, new or rekindled connections, and more. Remember that one can't do it all and that pacing yourself is important.

I'm ecstatic about the opportunity to discuss the ongoing evolution of cybersecurity, be it the platform debate, trends in network/cloud/application security, and more. I'm really curious to hear perspectives on these and other topics. (Edit: near-term research-specific topics also include software supply chain security, DDOS prevention)

Also, a personal favour to ask, if I may: Like many others, I'm horrible with face-name mapping, particularly at events, so say a quick "hi, remember me, I'm <name>" as it helps me tremendously. Many thanks!!!!