Josh Yavor
@schwascore.evil.agency
Founding Partner, @credible-security.com
Recovering CISO and middle school teacher.
Would rather be coaching swimming.
I intend to keep singing.
https://evil.agency
Was @schwascore on Twitter
Recovering CISO and middle school teacher.
Would rather be coaching swimming.
I intend to keep singing.
https://evil.agency
Was @schwascore on Twitter
Reposted by Josh Yavor
We made a truly unique drill for subscribers this week — practicing how to anticipate & effectively communicate to business leaders the impact of accumulating tech debt on the company’s ability to respond to security incidents.
Subscribe to join!
Subscribe to join!
💫 New Discernible Drill this week!
You’ll face escalating challenges that force difficult tradeoffs between business continuity, stakeholder communications, and technical remediation - all while racing against the clock. 😰
Subscribe at DiscernibleInc.com/drills
#IncidentResponse #SecurityComms
You’ll face escalating challenges that force difficult tradeoffs between business continuity, stakeholder communications, and technical remediation - all while racing against the clock. 😰
Subscribe at DiscernibleInc.com/drills
#IncidentResponse #SecurityComms
May 21, 2025 at 10:47 AM
We made a truly unique drill for subscribers this week — practicing how to anticipate & effectively communicate to business leaders the impact of accumulating tech debt on the company’s ability to respond to security incidents.
Subscribe to join!
Subscribe to join!
Reposted by Josh Yavor
Why is this story not in an American paper
Let’s tell more stories of how responsible governance can benefit more people and give them increased opportunities, instead of the supposed inevitably of the oligarchs having everything there is
www.theguardian.com/us-news/2025...
Let’s tell more stories of how responsible governance can benefit more people and give them increased opportunities, instead of the supposed inevitably of the oligarchs having everything there is
www.theguardian.com/us-news/2025...
New Mexico made childcare free. It lifted 120,000 people above the poverty line
The state, which has long ranked worst in the US for child wellbeing, became the first and only in the country to offer free childcare to a majority of families
www.theguardian.com
May 11, 2025 at 10:50 PM
Why is this story not in an American paper
Let’s tell more stories of how responsible governance can benefit more people and give them increased opportunities, instead of the supposed inevitably of the oligarchs having everything there is
www.theguardian.com/us-news/2025...
Let’s tell more stories of how responsible governance can benefit more people and give them increased opportunities, instead of the supposed inevitably of the oligarchs having everything there is
www.theguardian.com/us-news/2025...
Reposted by Josh Yavor
you know who else came from chicago and was on "a mission from god"
May 8, 2025 at 5:29 PM
you know who else came from chicago and was on "a mission from god"
Reposted by Josh Yavor
Trump is already using his stablecoin to get a cut of a $2 BILLION deal with a shady UAE fund.
The Senate will vote on the GENIUS Act, a crypto bill which would make the President's grift even easier.
If we don't fix that problem, no Senator should vote for it.
The Senate will vote on the GENIUS Act, a crypto bill which would make the President's grift even easier.
If we don't fix that problem, no Senator should vote for it.
Trump is already using his stablecoin to get a cut of a $2 BILLION deal with a shady UAE fund.
YouTube video by Senator Elizabeth Warren
www.youtube.com
May 6, 2025 at 9:29 PM
Trump is already using his stablecoin to get a cut of a $2 BILLION deal with a shady UAE fund.
The Senate will vote on the GENIUS Act, a crypto bill which would make the President's grift even easier.
If we don't fix that problem, no Senator should vote for it.
The Senate will vote on the GENIUS Act, a crypto bill which would make the President's grift even easier.
If we don't fix that problem, no Senator should vote for it.
Reposted by Josh Yavor
I wrote up a detailed analysis of TM SGNL, the unofficial Signal app that senior Trump fascists use to organize their war crimes micahflee.com/tm-sgnl-the-...
TM SGNL, the obscure unofficial Signal app Mike Waltz uses to text with Trump officials
Yesterday, a Reuters photographer captured a photo of the freshly-ousted former National Security Advisor Mike Waltz checking his Signal messages during a Trump cabinet meeting. If you're not familiar...
micahflee.com
May 2, 2025 at 9:36 PM
I wrote up a detailed analysis of TM SGNL, the unofficial Signal app that senior Trump fascists use to organize their war crimes micahflee.com/tm-sgnl-the-...
Reposted by Josh Yavor
Sign your names or you're a toaster, American cyber pros. https://www.eff.org/press/releases/eff-leads-prominent-security-experts-urging-trump-administration-leave-chris-krebs
April 29, 2025 at 3:34 AM
Sign your names or you're a toaster, American cyber pros. https://www.eff.org/press/releases/eff-leads-prominent-security-experts-urging-trump-administration-leave-chris-krebs
Reposted by Josh Yavor
I keep catching strays from "technology is neutral" people, so let's set things straight.
1) Technology is not neutral, especially the subset of technology called "algorithms"
2) The form-factor that makes a technology into a tool is not neutral
3) How tools are productized is not neutral
[rant]
1) Technology is not neutral, especially the subset of technology called "algorithms"
2) The form-factor that makes a technology into a tool is not neutral
3) How tools are productized is not neutral
[rant]
April 29, 2025 at 2:21 PM
I keep catching strays from "technology is neutral" people, so let's set things straight.
1) Technology is not neutral, especially the subset of technology called "algorithms"
2) The form-factor that makes a technology into a tool is not neutral
3) How tools are productized is not neutral
[rant]
1) Technology is not neutral, especially the subset of technology called "algorithms"
2) The form-factor that makes a technology into a tool is not neutral
3) How tools are productized is not neutral
[rant]
Reposted by Josh Yavor
So to sum up the Wisconsin arrest issue:
ICE didn't have a juridical warrant. They only had an administrative warrant.
The DOJ has not convened a grand jury to indict the judge. They only got a criminal complaint before a magistrate judge.
This is ridiculous.
ICE didn't have a juridical warrant. They only had an administrative warrant.
The DOJ has not convened a grand jury to indict the judge. They only got a criminal complaint before a magistrate judge.
This is ridiculous.
April 25, 2025 at 5:09 PM
So to sum up the Wisconsin arrest issue:
ICE didn't have a juridical warrant. They only had an administrative warrant.
The DOJ has not convened a grand jury to indict the judge. They only got a criminal complaint before a magistrate judge.
This is ridiculous.
ICE didn't have a juridical warrant. They only had an administrative warrant.
The DOJ has not convened a grand jury to indict the judge. They only got a criminal complaint before a magistrate judge.
This is ridiculous.
It's tough out there right now, but at least we have Rex Manning Day.
Damn The Man, save The Empire.
Damn The Man, save The Empire.
April 9, 2025 at 12:25 AM
It's tough out there right now, but at least we have Rex Manning Day.
Damn The Man, save The Empire.
Damn The Man, save The Empire.
Reposted by Josh Yavor
It is 2002. I am 18 years old. We are in a once-in-a-generation economic crisis.
It is 2008. I am 24 years old. We are in a once-in-a-generation economic crisis.
It is 2020. I am 36 years old. We are in a once-in-a-generation economic crisis.
It is 2025. I am 41 years old. We are in a—
It is 2008. I am 24 years old. We are in a once-in-a-generation economic crisis.
It is 2020. I am 36 years old. We are in a once-in-a-generation economic crisis.
It is 2025. I am 41 years old. We are in a—
April 2, 2025 at 10:01 PM
It is 2002. I am 18 years old. We are in a once-in-a-generation economic crisis.
It is 2008. I am 24 years old. We are in a once-in-a-generation economic crisis.
It is 2020. I am 36 years old. We are in a once-in-a-generation economic crisis.
It is 2025. I am 41 years old. We are in a—
It is 2008. I am 24 years old. We are in a once-in-a-generation economic crisis.
It is 2020. I am 36 years old. We are in a once-in-a-generation economic crisis.
It is 2025. I am 41 years old. We are in a—
Reposted by Josh Yavor
Great job alert: ProPublica is hiring a computational journalist, "someone who will use technology and data to identify and unlock stories that would otherwise be out of reach."
Salary: $120K-$140K
Remote: ✅
Come join us!
Salary: $120K-$140K
Remote: ✅
Come join us!
Computational Journalist
New York, New York, United States
boards.greenhouse.io
March 6, 2025 at 10:11 PM
Great job alert: ProPublica is hiring a computational journalist, "someone who will use technology and data to identify and unlock stories that would otherwise be out of reach."
Salary: $120K-$140K
Remote: ✅
Come join us!
Salary: $120K-$140K
Remote: ✅
Come join us!
Reposted by Josh Yavor
If you work or worked for CISA, please read this from @swiftonsecurity.com
infosec.exchange/@SwiftOnSecu...
You are appreciated, and we are sorry for what’s happened to your hard work.
infosec.exchange/@SwiftOnSecu...
You are appreciated, and we are sorry for what’s happened to your hard work.
SwiftOnSecurity (@SwiftOnSecurity@infosec.exchange)
This is a story about CISA.
About what it meant and means to someone in the trenches. Years ago, and now.
infosec.exchange
March 1, 2025 at 7:38 PM
If you work or worked for CISA, please read this from @swiftonsecurity.com
infosec.exchange/@SwiftOnSecu...
You are appreciated, and we are sorry for what’s happened to your hard work.
infosec.exchange/@SwiftOnSecu...
You are appreciated, and we are sorry for what’s happened to your hard work.
Reposted by Josh Yavor
It’s remarkable how much weakness this conveys on the part of Vance and Trump. It’s classic bully weakness:
Vance: [Dumps on Ukraine]
Zelenskyy: [pushes back]
Vance: [pikachu face] HOW DISRESPECTFUL
Pathetically weak.
Vance: [Dumps on Ukraine]
Zelenskyy: [pushes back]
Vance: [pikachu face] HOW DISRESPECTFUL
Pathetically weak.
ZELENSKYY: Putin broke the ceasefire. What kind of diplomacy, JD, are you speaking about?
VANCE: I think it's disrespectful to come into the Oval Office and try to litigate this in front of the American media
VANCE: I think it's disrespectful to come into the Oval Office and try to litigate this in front of the American media
February 28, 2025 at 6:45 PM
It’s remarkable how much weakness this conveys on the part of Vance and Trump. It’s classic bully weakness:
Vance: [Dumps on Ukraine]
Zelenskyy: [pushes back]
Vance: [pikachu face] HOW DISRESPECTFUL
Pathetically weak.
Vance: [Dumps on Ukraine]
Zelenskyy: [pushes back]
Vance: [pikachu face] HOW DISRESPECTFUL
Pathetically weak.
Reposted by Josh Yavor
Watching Putin’s little stooges try to bully Zelenskyy in our goddamned White House is pretty repulsive.
February 28, 2025 at 5:47 PM
Watching Putin’s little stooges try to bully Zelenskyy in our goddamned White House is pretty repulsive.
Reposted by Josh Yavor
After 20 years in #IncidentResponse across dozens of organizations, I've seen firsthand that effective communication can make or break a security/privacy incident (and even prevent some!).
Check out the new Discernible Drills & let me know what you think!
#SecurityCommunications
Check out the new Discernible Drills & let me know what you think!
#SecurityCommunications
🔥 Just launched: Discernible Drills
Weekly 1-hour drills delivered via Slack.
Everything from bug bounty escalations to privacy violations, challenging you to make fast, strategic decisions about stakeholder communications.
discernibleinc.com/blog/introdu...
#IncidentResponse
Weekly 1-hour drills delivered via Slack.
Everything from bug bounty escalations to privacy violations, challenging you to make fast, strategic decisions about stakeholder communications.
discernibleinc.com/blog/introdu...
#IncidentResponse
Introducing Discernible Drills: The Power of Persistent Practice — Discernible Inc
Join a new incident response communication drill with industry peers every week!
discernibleinc.com
February 26, 2025 at 3:08 PM
After 20 years in #IncidentResponse across dozens of organizations, I've seen firsthand that effective communication can make or break a security/privacy incident (and even prevent some!).
Check out the new Discernible Drills & let me know what you think!
#SecurityCommunications
Check out the new Discernible Drills & let me know what you think!
#SecurityCommunications
I'm so excited for this!
We have so many hard lessons learned and proven tactics/strategies to share to improve security outcomes for organizations stuck on common challenges with shared responsibility models.
If you can't join us today, give us a follow to catch the recording when it's published.
We have so many hard lessons learned and proven tactics/strategies to share to improve security outcomes for organizations stuck on common challenges with shared responsibility models.
If you can't join us today, give us a follow to catch the recording when it's published.
Want to learn something new today? We're hosting a discussion on the myth of shared responsibility for security with @melanie-ensign.bsky.social of @discernibleinc.bsky.social.
You can join us live in just over an hour or give us a follow to catch the recording.
youtube.com/live/CERCPDF...
You can join us live in just over an hour or give us a follow to catch the recording.
youtube.com/live/CERCPDF...
The Myth of Shared Responsibility w/ Discernible & Credible Security
YouTube video by Credible Security
youtube.com
February 25, 2025 at 3:17 PM
I'm so excited for this!
We have so many hard lessons learned and proven tactics/strategies to share to improve security outcomes for organizations stuck on common challenges with shared responsibility models.
If you can't join us today, give us a follow to catch the recording when it's published.
We have so many hard lessons learned and proven tactics/strategies to share to improve security outcomes for organizations stuck on common challenges with shared responsibility models.
If you can't join us today, give us a follow to catch the recording when it's published.
Reposted by Josh Yavor
So @jennybeatty.bsky.social did some great work pulling together data from multiple sources to answer the question "Does diversity in pilot ranks negatively impact safety". While any partly sane person already knew the answer, her work proves the answer is no.
www.jennybeatty.com/airline-safe...
www.jennybeatty.com/airline-safe...
February 24, 2025 at 7:23 PM
So @jennybeatty.bsky.social did some great work pulling together data from multiple sources to answer the question "Does diversity in pilot ranks negatively impact safety". While any partly sane person already knew the answer, her work proves the answer is no.
www.jennybeatty.com/airline-safe...
www.jennybeatty.com/airline-safe...
Reposted by Josh Yavor
I literally reported this Wednesday.
SCOOP: New Social Security chief was being investigated for leaking data to DOGE when Musk team tapped him. Sr officials placed him on paid leave while probing whether he may have violated privacy & tax laws, WaPo's Lisa Rein reports.
www.washingtonpost.com/politics/202...
www.washingtonpost.com/politics/202...
New Social Security chief was being investigated when Musk team tapped him
Data analyst Leland Dudek was suspected of sharing unauthorized access to information with the U.S. DOGE Service. Now he’s the acting Social Security commissioner.
www.washingtonpost.com
February 22, 2025 at 3:11 PM
I literally reported this Wednesday.
The mistake a lot of folks make is comparing against late-stage fascism, especially end-stage fascism as it was (lucklly) being defeated, and drawing comfort from the differences.
Of course the beginning doesn't look like the end.
Look at how historic examples started, and compare against that.
Of course the beginning doesn't look like the end.
Look at how historic examples started, and compare against that.
February 23, 2025 at 12:50 AM
The mistake a lot of folks make is comparing against late-stage fascism, especially end-stage fascism as it was (lucklly) being defeated, and drawing comfort from the differences.
Of course the beginning doesn't look like the end.
Look at how historic examples started, and compare against that.
Of course the beginning doesn't look like the end.
Look at how historic examples started, and compare against that.
Reposted by Josh Yavor
DOGE is like if Fyre Festival was a government agency.
February 22, 2025 at 10:45 PM
DOGE is like if Fyre Festival was a government agency.
Reposted by Josh Yavor
Turkey was not always an autocracy. It had a democracy. It still has elections. But its real democracy has gone away through shock and awe.
It can happen everywhere if you're not vigilant and have shared agreement in the democratic project.
One day it's just....gone.
It can happen everywhere if you're not vigilant and have shared agreement in the democratic project.
One day it's just....gone.
February 21, 2025 at 1:13 AM
Turkey was not always an autocracy. It had a democracy. It still has elections. But its real democracy has gone away through shock and awe.
It can happen everywhere if you're not vigilant and have shared agreement in the democratic project.
One day it's just....gone.
It can happen everywhere if you're not vigilant and have shared agreement in the democratic project.
One day it's just....gone.
Reposted by Josh Yavor
Executive orders are not laws of the land that all citizens have to follow. They’re directives for the employees in 1 branch of federal government.
If Trump wants new laws, make him use the process laid out in our constitution.
Don’t comply in advance.
If Trump wants new laws, make him use the process laid out in our constitution.
Don’t comply in advance.
February 19, 2025 at 10:16 PM
Executive orders are not laws of the land that all citizens have to follow. They’re directives for the employees in 1 branch of federal government.
If Trump wants new laws, make him use the process laid out in our constitution.
Don’t comply in advance.
If Trump wants new laws, make him use the process laid out in our constitution.
Don’t comply in advance.
Gotta appreciate the small joys when they happen.
Today's joy: needing/getting to use footnotes while writing a client report
Today's joy: needing/getting to use footnotes while writing a client report
February 19, 2025 at 3:59 PM
Gotta appreciate the small joys when they happen.
Today's joy: needing/getting to use footnotes while writing a client report
Today's joy: needing/getting to use footnotes while writing a client report
Reposted by Josh Yavor
How are we still not past the notion that the USPS is *not* a moneymaking organization? This whole article concedes to the idea that the postal service "loses money" without even mentioning that it's because it's a public service.
www.theguardian.com/business/202...
www.theguardian.com/business/202...
US postmaster to step down months after reporting billions in losses
Louis DeJoy, who has headed US Postal Service since 2020, warned in November of potential ‘end of this organization’
www.theguardian.com
February 19, 2025 at 3:07 AM
How are we still not past the notion that the USPS is *not* a moneymaking organization? This whole article concedes to the idea that the postal service "loses money" without even mentioning that it's because it's a public service.
www.theguardian.com/business/202...
www.theguardian.com/business/202...