Jarmo Lahtiranta
@naranek.bsky.social
Industrial product security in English and random hijinks in Finnish.
Reposted by Jarmo Lahtiranta
⚠️ update on #React2Shell
After the POC dropped ~21:04 GMT today, Fastly detected a profound proliferation in the # of requests triggering our NGWAF signal for React2Shell (see graph).
We strongly recommend you immediately identify and update your React / Next.js apps + apply proactive protection.
After the POC dropped ~21:04 GMT today, Fastly detected a profound proliferation in the # of requests triggering our NGWAF signal for React2Shell (see graph).
We strongly recommend you immediately identify and update your React / Next.js apps + apply proactive protection.
December 5, 2025 at 2:34 AM
⚠️ update on #React2Shell
After the POC dropped ~21:04 GMT today, Fastly detected a profound proliferation in the # of requests triggering our NGWAF signal for React2Shell (see graph).
We strongly recommend you immediately identify and update your React / Next.js apps + apply proactive protection.
After the POC dropped ~21:04 GMT today, Fastly detected a profound proliferation in the # of requests triggering our NGWAF signal for React2Shell (see graph).
We strongly recommend you immediately identify and update your React / Next.js apps + apply proactive protection.
Suomen yrityselämän diversiteettiä parhaimmillaan
Lähde: www.hs.fi/talous/art-2...
Lähde: www.hs.fi/talous/art-2...
November 28, 2025 at 11:55 AM
Suomen yrityselämän diversiteettiä parhaimmillaan
Lähde: www.hs.fi/talous/art-2...
Lähde: www.hs.fi/talous/art-2...
Cryptography turns any problem into a key management problem
Oops. Cryptographers cancel election results after losing decryption key.
arstechnica.com/security/202...
arstechnica.com/security/202...
Oops. Cryptographers cancel election results after losing decryption key.
Voting system required three keys. One of them has been “irretrievably lost.”…
arstechnica.com
November 23, 2025 at 7:57 AM
Cryptography turns any problem into a key management problem
Reposted by Jarmo Lahtiranta
Normalize asking what things mean
completely outside of politics, this is so charming
November 21, 2025 at 4:59 PM
Normalize asking what things mean
Reposted by Jarmo Lahtiranta
Reposted by Jarmo Lahtiranta
turn your globally distributed cdn into a single point of failure with this one weird trick
November 18, 2025 at 2:33 PM
turn your globally distributed cdn into a single point of failure with this one weird trick
fakeupdate.net was years ahead of its time 😁
November 13, 2025 at 2:40 PM
fakeupdate.net was years ahead of its time 😁
Reposted by Jarmo Lahtiranta
No no no begs every archivist. You are never going to be able to find anything. Please don’t start using emojis in file names. Who asked for this? What fresh hell is next?
November 12, 2025 at 10:38 AM
No no no begs every archivist. You are never going to be able to find anything. Please don’t start using emojis in file names. Who asked for this? What fresh hell is next?
My favorite so far:
"I'm on vacation. You have to fend for yourself."
"I'm on vacation. You have to fend for yourself."
Just got the best out-of-office message I've ever seen from a fellow academic:
"I am currently away on leave. If this is an emergency... well, I doubt it. What could possibly be an emergency in my line of work?"
"I am currently away on leave. If this is an emergency... well, I doubt it. What could possibly be an emergency in my line of work?"
November 9, 2025 at 7:29 PM
My favorite so far:
"I'm on vacation. You have to fend for yourself."
"I'm on vacation. You have to fend for yourself."
Reposted by Jarmo Lahtiranta
One of the reasons why Finland is the happiest country in the world is that the public broadcaster Yle sends a live feed of the first 8 weeks of a pack of puppies every fall. It’s already the fifth edition of ”Finland’s most therapeutic live feed”.
This is what I call value for my tax money
This is what I call value for my tax money
Pentulive 24/7 | Pentulive
Pentuliven pikkuiset kehittyvät vauhdikkaasti ja jokainen pentu on saanut nimensä! Kahdeksan viikkoa kestävässä suorassa lähetyksessä seurataan englanninspringerspanieli Murua ja tämän pentuetta.
areena.yle.fi
November 9, 2025 at 1:09 PM
One of the reasons why Finland is the happiest country in the world is that the public broadcaster Yle sends a live feed of the first 8 weeks of a pack of puppies every fall. It’s already the fifth edition of ”Finland’s most therapeutic live feed”.
This is what I call value for my tax money
This is what I call value for my tax money
Reposted by Jarmo Lahtiranta
is it inappropriate for me to make this joke every time we launch, or
November 7, 2025 at 8:21 PM
is it inappropriate for me to make this joke every time we launch, or
Reposted by Jarmo Lahtiranta
Talks from the USENIX Security 2025 security conference, which took place in August, are now available on YouTube
www.youtube.com/playlist?lis...
www.youtube.com/playlist?lis...
USENIX Security '25 (Paper Presentations) - YouTube
www.youtube.com
November 4, 2025 at 12:15 AM
Talks from the USENIX Security 2025 security conference, which took place in August, are now available on YouTube
www.youtube.com/playlist?lis...
www.youtube.com/playlist?lis...
Reposted by Jarmo Lahtiranta
I've been getting back into the Hitchhiker's Guide to the Galaxy series after many years, and the most relatable part is how everyday objects like doors and elevators have been imbued with artificial intelligence and it just makes them obnoxious and frustrating to use and everyone hates it.
November 1, 2025 at 8:55 PM
I've been getting back into the Hitchhiker's Guide to the Galaxy series after many years, and the most relatable part is how everyday objects like doors and elevators have been imbued with artificial intelligence and it just makes them obnoxious and frustrating to use and everyone hates it.
"Tietosuojavaltuutetun mukaan pankilla oli puutteita palvelun teknisen muutoksen suunnittelussa, toteutuksessa ja testauksessa."
...mutta muuten meni hyvin...
Olisikohan tämä saatu estettyä jos tuo 850 000€ olisi panostettu tietoturvaan etukäteen?
yle.fi/a/74-20190808
...mutta muuten meni hyvin...
Olisikohan tämä saatu estettyä jos tuo 850 000€ olisi panostettu tietoturvaan etukäteen?
yle.fi/a/74-20190808
Aktialle yli 850 000 euron rangaistus tietoturvalaiminlyönneistä
Aktian tunnistautumispalvelussa oli häiriö tammikuussa 2023. Sen myötä osa pankin asiakkaista pystyi näkemään toisten henkilökohtaisia tietoja esimerkiksi terveyteen liittyen.
yle.fi
October 28, 2025 at 12:28 PM
"Tietosuojavaltuutetun mukaan pankilla oli puutteita palvelun teknisen muutoksen suunnittelussa, toteutuksessa ja testauksessa."
...mutta muuten meni hyvin...
Olisikohan tämä saatu estettyä jos tuo 850 000€ olisi panostettu tietoturvaan etukäteen?
yle.fi/a/74-20190808
...mutta muuten meni hyvin...
Olisikohan tämä saatu estettyä jos tuo 850 000€ olisi panostettu tietoturvaan etukäteen?
yle.fi/a/74-20190808
I wonder what's the environmental impact of enabling / disabling Apple intelligence on an iPhone
October 18, 2025 at 3:08 PM
I wonder what's the environmental impact of enabling / disabling Apple intelligence on an iPhone
Reposted by Jarmo Lahtiranta
Tässä "hauska" fakta Facebookista, jonka laskin esimerkiksi, kun tuli väiteltyä erään kaikkea nettimoderointia vastustavan henkilön kanssa.
Facebookin poistamat feikkitunnukset 2017-2025:
𝟑𝟕,𝟐𝟕 𝐦𝐢𝐥𝐣𝐚𝐫𝐝𝐢𝐚
#botit
Facebookin poistamat feikkitunnukset 2017-2025:
𝟑𝟕,𝟐𝟕 𝐦𝐢𝐥𝐣𝐚𝐫𝐝𝐢𝐚
#botit
October 3, 2025 at 6:44 AM
Tässä "hauska" fakta Facebookista, jonka laskin esimerkiksi, kun tuli väiteltyä erään kaikkea nettimoderointia vastustavan henkilön kanssa.
Facebookin poistamat feikkitunnukset 2017-2025:
𝟑𝟕,𝟐𝟕 𝐦𝐢𝐥𝐣𝐚𝐫𝐝𝐢𝐚
#botit
Facebookin poistamat feikkitunnukset 2017-2025:
𝟑𝟕,𝟐𝟕 𝐦𝐢𝐥𝐣𝐚𝐫𝐝𝐢𝐚
#botit
En tiedä pelastaako tää blueskyn mutta aina voi kokeilla
www.youtube.com/watch?v=I3g6...
www.youtube.com/watch?v=I3g6...
The Lord of the Rings: The Fellowship Of The It's My Book They'll Walk If I Tell Them Too (ANIMATED)
YouTube video by Tom Cardy
www.youtube.com
September 16, 2025 at 6:38 PM
En tiedä pelastaako tää blueskyn mutta aina voi kokeilla
www.youtube.com/watch?v=I3g6...
www.youtube.com/watch?v=I3g6...
Reposted by Jarmo Lahtiranta
LOLs per Employee: a vital metric.
Shenanigans are a sign the team has sufficient energy in reserve, signaling readiness for handling emergencies and unplanned work. Play usually reflects underlying trust, cohesion, and resilience.
Encourage it.
Shenanigans are a sign the team has sufficient energy in reserve, signaling readiness for handling emergencies and unplanned work. Play usually reflects underlying trust, cohesion, and resilience.
Encourage it.
September 12, 2025 at 9:35 AM
LOLs per Employee: a vital metric.
Shenanigans are a sign the team has sufficient energy in reserve, signaling readiness for handling emergencies and unplanned work. Play usually reflects underlying trust, cohesion, and resilience.
Encourage it.
Shenanigans are a sign the team has sufficient energy in reserve, signaling readiness for handling emergencies and unplanned work. Play usually reflects underlying trust, cohesion, and resilience.
Encourage it.
Reposted by Jarmo Lahtiranta
Teams ymmärtää vihdoin käyttäjiä
September 8, 2025 at 10:09 AM
Teams ymmärtää vihdoin käyttäjiä
Nyt ollaan ytimessä www.hs.fi/talous/art-2...
Johtaminen | Asiantuntijoiden mukaan Suomen firmoissa on vakava vika: Johtajat
Suomesta puuttuu kyvykkäitä yrityspomoja. Menestyvä johtaja on kunnianhimoinen uudistaja, joka ymmärtää innovaatioita.
www.hs.fi
September 8, 2025 at 4:37 AM
Nyt ollaan ytimessä www.hs.fi/talous/art-2...
Reposted by Jarmo Lahtiranta
TÄSSÄ TARVITSEN apuanne ja ennen kaikkea jakojanne!
Juho Saari tekee Ylen kanssa ison kyselyn: kerro meille, miten juuri sinä pärjäät tässä taloustilanteessa
yle.fi/a/74-20179767
Juho Saari tekee Ylen kanssa ison kyselyn: kerro meille, miten juuri sinä pärjäät tässä taloustilanteessa
yle.fi/a/74-20179767
Suomalainen hyvinvointivaltio on nyt isossa murroksessa – tutkija Juho Saari kaipaa sinulta tietoa siitä, miten pärjäät
Yle uutiset kerää yhdessä tutkijoiden kanssa kokemuksia tavallisten ihmisten elämästä. Tämän jutun lopussa pääset kertomaan meille, mitä sinun elämääsi kuuluu juuri nyt.
yle.fi
September 1, 2025 at 4:26 PM
TÄSSÄ TARVITSEN apuanne ja ennen kaikkea jakojanne!
Juho Saari tekee Ylen kanssa ison kyselyn: kerro meille, miten juuri sinä pärjäät tässä taloustilanteessa
yle.fi/a/74-20179767
Juho Saari tekee Ylen kanssa ison kyselyn: kerro meille, miten juuri sinä pärjäät tässä taloustilanteessa
yle.fi/a/74-20179767
Reposted by Jarmo Lahtiranta
I don't get how people don't realize that a technology that replaces junior and entry level positions in a field destroys that field.
There's no skipping steps. You have to be a junior before you can be a senior, and if you don't have senior people, you don't have a field.
There's no skipping steps. You have to be a junior before you can be a senior, and if you don't have senior people, you don't have a field.
Remember, kids: A real big goal of "AI" is to entirely sever capital from labor, and no, there will be no universal basic income, you can all just starve and die, thanks
www.axios.com/2025/08/26/a...
www.axios.com/2025/08/26/a...
AI is already taking jobs away from entry-level workers
Software and customer service are most at risk right now and could be the canary in the coal mine.
www.axios.com
September 1, 2025 at 4:03 AM
I don't get how people don't realize that a technology that replaces junior and entry level positions in a field destroys that field.
There's no skipping steps. You have to be a junior before you can be a senior, and if you don't have senior people, you don't have a field.
There's no skipping steps. You have to be a junior before you can be a senior, and if you don't have senior people, you don't have a field.
Reposted by Jarmo Lahtiranta
Being the person they have to call when the LLM hits its limit and they're running in circles is already the position I and some of my peers are already in.
The problem here is the pipeline. You don't get to my capability, by replacing younger less experienced me with an LLM.
This is gonna be bad.
The problem here is the pipeline. You don't get to my capability, by replacing younger less experienced me with an LLM.
This is gonna be bad.
August 29, 2025 at 3:04 AM
Being the person they have to call when the LLM hits its limit and they're running in circles is already the position I and some of my peers are already in.
The problem here is the pipeline. You don't get to my capability, by replacing younger less experienced me with an LLM.
This is gonna be bad.
The problem here is the pipeline. You don't get to my capability, by replacing younger less experienced me with an LLM.
This is gonna be bad.