Mike Williamson

287 Followers
424 Following
1.4K Posts

Digital Transformation = Agile + APIs + AppSec

Security Architect at the Public Health Agency of Canada. Formerly TBS Cyber security & part of the team that launched the Canadian Digital Service.

bloghttps://mikewilliamson.wordpress.com
githubhttps://github.com/sleepycat

That’s a dangerous misconception… (though widespread…)…

A more useful view: organizations have (intentional, to ensure attention) scopes of complexity and timespan of decision making

They are integration scopes. Scopes of responsibility, capability building, risk management, navigation and resilience.

They aren’t merely (resource and) information gates and conduits (though they may be used that way, as power moves)…

We’re happy to share that Mastodon has been awarded a service agreement from the Sovereign Tech Fund @sovtechfund 🎉

This covers five major initiatives through 2026 and 2027. We are very grateful for this support. Read about the details in our blog post.

https://blog.joinmastodon.org/2026/04/sovereign-tech-agency-funding/

Sovereign Tech Agency funding

Announcing a service agreement for new work to improve Mastodon and the broader ecosystem.

Mastodon Blog

"IIms have made the cost of code cheaper but the cost of engineering has stayed the same"

https://www.reddit.com/r/webdev/s/YA1sjjpMzv

Security and privacy controls and assurance activities catalogue (ITSP.10.033) - Canadian Centre for Cyber Security

Security and privacy controls and assurance activities catalogue (ITSP.10.033)

Canadian Centre for Cyber Security

"Security embedded in the data itself -- not the network, not the perimeter. Protection that persists wherever data travels, whoever holds it.

This site covers concepts, hands-on labs, reference architectures, and operational scenarios for implementing #DataCentricSecurity (DCS) in coalition and defence environments using AWS."

https://datacentricsecurity.org/

Data-Centric Security on AWS

Concepts, hands-on labs, reference architectures, operational scenarios, and solution patterns for coalition data sharing using Data-Centric Security

I already loved Helix (best editor in the world), but yesterday @haeckerfelix showed me that Language Servers can go much further than I thought.

TIL that Helix and Typst are a match made in heaven, thanks to the Language Server tinymist.

https://ergaster.org/til/helix-typst-match-in-heaven/

#helixEditor #typst

TIL that Helix and Typst are a match made in heaven

Helix makes extensive use of Language Servers, but tinymist pushes it beyond what I thought was possible.

Ergaster

L'État accélère son virage vers encore + de souveraineté numérique 🛡️

Retour sur le séminaire interministériel #SouverainetéNumérique qui s'est tenu hier à Paris visant à réduire les dépendances extra-européennes de l'État. #GAFAMDetox

En savoir plus → https://www.numerique.gouv.fr/sinformer/espace-presse/souverainete-numerique-reduction-dependances-extra-europeennes/

"Our internal evaluations showed that Opus 4.6 generally had a near-0% success rate at autonomous #ExploitDevelopment But #MythosPreview is in a different league.

For example, Opus 4.6 turned the vulnerabilities it had found in Mozilla’s Firefox 147 JavaScript engine—all patched in Firefox 148—into JavaScript shell exploits only two times out of several hundred attempts. We re-ran this experiment as a benchmark for Mythos Preview, which developed working #exploits 181 times, and achieved register control on 29 more."

https://red.anthropic.com/2026/mythos-preview/

Claude Mythos Preview \ red.anthropic.com