Space Rogue

@spacerog
4.5K Followers
306 Following
1.8K Posts
I fight for the user. | L0pht Heavy Industries - ATStake - Whacked Mac Archives - Hacker News Network - Cyber Squirrel 1 | Semgrep
Personal Websitehttps://www.spacerogue.net/wordpress/
LinkedInhttps://www.linkedin.com/in/spacerogue/

First blog post for the new job!

Security Should Be the Path of Least Resistance

Security often creates friction that frustrates developers and users, this can actually make systems less secure because when security is difficult, noisy, or just gets int he way, people bypass or ignore the controls.

https://semgrep.dev/blog/2026/security-should-be-the-path-of-least-resistance/

Security Should Be the Path of Least Resistance

Security often creates friction that frustrates developers and users, this can actually make systems less secure because when security is difficult, noisy, or just gets int he way, people bypass or ignore the controls.

Semgrep

Companies will put up all kinds obstacles to responsible disclosure for researchers to get around to make their own lives easier. But they often forget that in the end it is researcher who calls the shots. It is the researchers vuln and they can do whatever they want with it.

https://www.bleepingcomputer.com/news/security/disgruntled-researcher-leaks-bluehammer-windows-zero-day-exploit/#comments

#vulnerability #disclosure #responsibledisclosure #windows #microsoft

Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit

Exploit code has been released for an unpatched Windows privilege escalation flaw reported privately to Microsoft, allowing attackers to gain SYSTEM or elevated administrator permissions.

BleepingComputer

PhoneCon 2026, the Mid-Atlantic Historical Telephony Conference & Expo
When: Sat/Sun July 25-26, 2026
Where: The Computer Museum - Baltimore MD
What: Presentations and talks on telephone history, collecting, and phreaking; displays and exhibits; telephones for sale; tours of the Computer Museum
Why: To celebrate the 150th anniversary of the telephone

Schedules and other event information is available at https://phonecon.org

#telephone #phone #hacker #phreaker #con

PhoneCon

PhoneCon - the premiere conference for telephone enthusiasts

Gen-X to Gen-Z Translation Matrix

Meaning Gen-X Gen-Z
That’s cool Dope Bussin
Lame Bogus Cringe
I agree Word Facts
Nonsense Whatever Cap
True For real No cap
Impressive Tight Goes hard
Weird Sketchy Sus
Funny That’s rich I’m dead
Attractive Fine Baddie

Any others?

I know I am very opinionated when it comes to booth design, but there are a lot of bad booths this year and I haven’t even walked half the floor yet. #rsac2026 #rsac
Is anyone else getting anti-Sec vibes from #teampcp ???
FYI: if you use the handle on your #rsac badge or unusual nickname expect to have to get your badge reprinted and wait in the super long and slow line. They’re verifying that badge names exactly match government ID. Worse than TSA. (I was still able to get her to put “Space Rogue” on it, but she didn’t want to.) #rsac2026
If you missed the keynote at #bsidessf then you missed @k8em0 actually singing part of her talk!
Nice to see an old school no-photo policy at #bsidessf. Reminds me of #shmoocon. Yes, in our hyper surveillance culture such a policy might be pointless but it’s a nice thought.
Damn, #bsidessf has to have one of the best venues in all of Bsides. Imagine your slides on a 50ft iMax screen.