Groups

friam

1–30 of 2291

0 selected

Dec 11

Topic for tomorrow

I've been "talking" to a guy who has developed a least privilege delegation system that

unread,

Topic for tomorrow

I've been "talking" to a guy who has developed a least privilege delegation system that

Dec 11

William ML Leslie, … Mike Stay4

Dec 10

TIL "hair" is a 1500s alternate spelling of "hare", ie both "harebrained

unread,

TIL "hair" is a 1500s alternate spelling of "hare", ie both "harebrained

Dec 10

Dec 8

Fwd: [security-lunch] Dec 10 | Nurullah Demir on "Broken Security and Privacy Governance at Web Scale"

-------------- Alan Karp ---------- Forwarded message --------- From: Michael Leo Paper via security-

unread,

Fwd: [security-lunch] Dec 10 | Nurullah Demir on "Broken Security and Privacy Governance at Web Scale"

-------------- Alan Karp ---------- Forwarded message --------- From: Michael Leo Paper via security-

Dec 8

Alan Karp, Tom Van Cutsem6

Dec 8

UCAN web site is live

On Mon, Dec 8, 2025 at 1:38 AM Tom Van Cutsem <tomv...@gmail.com> wrote: Thanks Alan for

unread,

UCAN web site is live

On Mon, Dec 8, 2025 at 1:38 AM Tom Van Cutsem <tomv...@gmail.com> wrote: Thanks Alan for

Dec 8

Alan Karp, William ML Leslie3

Dec 4

How not to manage agent permissions

On Thu, Dec 4, 2025 at 6:25 PM William ML Leslie <william.l...@gmail.com> wrote:

unread,

How not to manage agent permissions

On Thu, Dec 4, 2025 at 6:25 PM William ML Leslie <william.l...@gmail.com> wrote:

Dec 4

Douglas Crockford

Dec 4

JavaScript servers running React have a major vulnerabilty. It seems that it can be tricked into

unread,

JavaScript servers running React have a major vulnerabilty. It seems that it can be tricked into

Dec 4

Alan Karp, Raoul Duke5

Dec 2

An interesting use case

I guess it could, but I was thinking it would be more like the functionality. -------------- Alan

unread,

An interesting use case

I guess it could, but I was thinking it would be more like the functionality. -------------- Alan

Dec 2

Alan Karp, Tony Arcieri2

Dec 1

Fwd: [security-lunch] Dec 3 | Paul Flammarion on "Hop: A Modern Transport and Remote Access Protocol"

Curious if they'll take any lessons from mosh, which is connectionless and capable of sending

unread,

Fwd: [security-lunch] Dec 3 | Paul Flammarion on "Hop: A Modern Transport and Remote Access Protocol"

Curious if they'll take any lessons from mosh, which is connectionless and capable of sending

Dec 1

Nov 28

Fwd: Fuchen Ma on Dec 4

-------------- Alan Karp ---------- Forwarded message --------- From: Aditi Partap via security-

unread,

Fwd: Fuchen Ma on Dec 4

-------------- Alan Karp ---------- Forwarded message --------- From: Aditi Partap via security-

Nov 28

Alan Karp, … Douglas Crockford6

Nov 27

Meeting Friday?

In E https://www.crockford.com/ec/dining.html On Wednesday, November 26, 2025 at 11:27:16 AM UTC-8

unread,

Meeting Friday?

In E https://www.crockford.com/ec/dining.html On Wednesday, November 26, 2025 at 11:27:16 AM UTC-8

Nov 27

Alan Karp, Mike Stay2

Nov 25

An interesting capability use case

On Tue, Nov 25, 2025 at 11:19 AM Alan Karp <alan...@gmail.com> wrote: > > I'm

unread,

An interesting capability use case

On Tue, Nov 25, 2025 at 11:19 AM Alan Karp <alan...@gmail.com> wrote: > > I'm

Nov 25

Alan Karp, Raoul Duke2

Nov 18

What I'm up against

Do they not have any valid concerns? Just because you know whom to blame for launching the nukes

unread,

What I'm up against

Do they not have any valid concerns? Just because you know whom to blame for launching the nukes

Nov 18

Alan Karp, William ML Leslie3

Nov 18

A potential LinkedIn post

Thanks for the suggestion. I've moved the Bottom Line to the front. The post now starts with If

unread,

A potential LinkedIn post

Thanks for the suggestion. I've moved the Bottom Line to the front. The post now starts with If

Nov 18

Tom Van Cutsem, … Tony Arcieri8

Nov 17

Fil-C: a memory-safe C/C++

On Fri, Nov 14, 2025 at 3:59 PM Tom Van Cutsem <tomv...@gmail.com> wrote: As for Fil-C vs Rust

unread,

Fil-C: a memory-safe C/C++

On Fri, Nov 14, 2025 at 3:59 PM Tom Van Cutsem <tomv...@gmail.com> wrote: As for Fil-C vs Rust

Nov 17

Nov 17

Fwd: [security-lunch] Nov 19 | Georgios Smaragdakis on "A Haystack Full of Needles: Detecting and Understanding Botnets in the Wild"

-------------- Alan Karp ---------- Forwarded message --------- From: Michael Leo Paper <mpaper@

unread,

Fwd: [security-lunch] Nov 19 | Georgios Smaragdakis on "A Haystack Full of Needles: Detecting and Understanding Botnets in the Wild"

-------------- Alan Karp ---------- Forwarded message --------- From: Michael Leo Paper <mpaper@

Nov 17

Nov 14

Page 15 looks like they don't know they've reinvented certificate capabilities. I expect they

unread,

Page 15 looks like they don't know they've reinvented certificate capabilities. I expect they

Nov 14

Nov 14

Fwd: Rahul Ilango on Nov 18

Not a Security Lunch talk, but one some of you might find interesting. -------------- Alan Karp -----

unread,

Fwd: Rahul Ilango on Nov 18

Not a Security Lunch talk, but one some of you might find interesting. -------------- Alan Karp -----

Nov 14

Nov 10

Fwd: [security-lunch] Nov 12 | Anh Vu on "Beyond Whack‑A‑Mole: Disrupting Online Crime and Harms through Law Enforcement and Industry Efforts"

-------------- Alan Karp ---------- Forwarded message --------- From: Michael Leo Paper <mpaper@

unread,

Fwd: [security-lunch] Nov 12 | Anh Vu on "Beyond Whack‑A‑Mole: Disrupting Online Crime and Harms through Law Enforcement and Industry Efforts"

-------------- Alan Karp ---------- Forwarded message --------- From: Michael Leo Paper <mpaper@

Nov 10

Nov 9

A really good talk on AI access management

https://track.pstmrk.it/3s/events.goldcast.io%2Fauth%2Flink%2Ff186a06e-20f6-41e3-aecb-69cf1d6dc150%

unread,

A really good talk on AI access management

https://track.pstmrk.it/3s/events.goldcast.io%2Fauth%2Flink%2Ff186a06e-20f6-41e3-aecb-69cf1d6dc150%

Nov 9

Nov 3

A question that has nothing to do with security (probably)

I use the Chrome browser and have a couple of hundred tabs open. Maybe once a week or so, a Chrome

unread,

A question that has nothing to do with security (probably)

I use the Chrome browser and have a couple of hundred tabs open. Maybe once a week or so, a Chrome

Nov 3

Nov 3

Fwd: [security-lunch] Nov 5 | Charly Castes on "Securing Systems Foundations: The Design and Verification of a Virtual Firmware Monitor"

-------------- Alan Karp ---------- Forwarded message --------- From: Michael Leo Paper <mpaper@

unread,

Fwd: [security-lunch] Nov 5 | Charly Castes on "Securing Systems Foundations: The Design and Verification of a Virtual Firmware Monitor"

-------------- Alan Karp ---------- Forwarded message --------- From: Michael Leo Paper <mpaper@

Nov 3

Oct 31

Fwd: Jingxuan He on Nov 6

-------------- Alan Karp ---------- Forwarded message --------- From: Aditi Partap <aditi712@

unread,

Fwd: Jingxuan He on Nov 6

-------------- Alan Karp ---------- Forwarded message --------- From: Aditi Partap <aditi712@

Oct 31

Oct 31

Info on DigitalBazaar's use of capabilities in production

https://github.com/digitalbazaar/ezcap which is a convenience wrapper on top of https://github.com/

unread,

Info on DigitalBazaar's use of capabilities in production

https://github.com/digitalbazaar/ezcap which is a convenience wrapper on top of https://github.com/

Oct 31

Alan Karp, Dale Schumacher2

Oct 31

Fwd: [security-lunch] Oct 29 | Dale Schumacher on "Security All The Way Down"

For those who might be interested in the slides from my talk... On Mon, Oct 27, 2025 at 4:28 PM Alan

unread,

Fwd: [security-lunch] Oct 29 | Dale Schumacher on "Security All The Way Down"

For those who might be interested in the slides from my talk... On Mon, Oct 27, 2025 at 4:28 PM Alan

Oct 31

Alan Karp, James Diacono3

Oct 21

Apropos our discussion on Unicode

Oh wait, no they didn't. My bad. On Tuesday, October 21, 2025 at 8:17:18 PM UTC+11 James Diacono

unread,

Apropos our discussion on Unicode

Oh wait, no they didn't. My bad. On Tuesday, October 21, 2025 at 8:17:18 PM UTC+11 James Diacono

Oct 21

Vinícius dos Santos Oliveira

Oct 20

Type systems as macros

So I've stumbled on some interesting research from the Racket community. They found out how to

unread,

Type systems as macros

So I've stumbled on some interesting research from the Racket community. They found out how to

Oct 20

Oct 20

Fwd: [security-lunch] Oct 22 | Igor Tsyganskiy on "Global Cyber Conflict"

-------------- Alan Karp ---------- Forwarded message --------- From: Michael Leo Paper <mpaper@

unread,

Fwd: [security-lunch] Oct 22 | Igor Tsyganskiy on "Global Cyber Conflict"

-------------- Alan Karp ---------- Forwarded message --------- From: Michael Leo Paper <mpaper@

Oct 20

Jonathan S. Shapiro, ๏̯͡๏ Jasvir Nagra2

Oct 16

A moment's amusement

Heh - or only the successful bad guys know you're not a capability system. -- Jasvir Nagra On Thu

unread,

A moment's amusement

Heh - or only the successful bad guys know you're not a capability system. -- Jasvir Nagra On Thu

Oct 16

Alan Karp, … Pierre Thierry19

Oct 16

Capabilities in production systems

Le 26/09/2025 à 18:28, Alan Karp a écrit : I expect that many of you have heard someone say, "If

unread,

Capabilities in production systems

Le 26/09/2025 à 18:28, Alan Karp a écrit : I expect that many of you have heard someone say, "If

Oct 16

Vinícius dos Santos Oliveira, … Kevin Reid5

Oct 14

Revocable (proxy) file descriptors

Em sex., 10 de out. de 2025 às 22:00, Kevin Reid <kpr...@switchb.org> escreveu: > On Fri,

unread,

Revocable (proxy) file descriptors

Em sex., 10 de out. de 2025 às 22:00, Kevin Reid <kpr...@switchb.org> escreveu: > On Fri,

Oct 14

Search

Clear search

Close search

Google apps

Main menu