Author | Lightnews

Amy @amyre.bsky.social · 8d

Are you ans experienced iOS security researcher? If so, you probably already know about the Apple Security Researcher Device Program (security.apple.com/research-dev...).
If you’ve been thinking about applying, applications close in a week, on 31 October. Apply before the opportunity 👻s you!

Security Research Device - Apple Security Research

Get an iPhone dedicated to security research through the Apple Security Research Device program. Learn how to apply.

security.apple.com

Amy @amyre.bsky.social · 22d

I believe in evolution, in all contexts :)
security.apple.com/blog/apple-s...

A major evolution of Apple Security Bounty, with the industry's top awards for the most advanced research - Apple Security Research

Today we’re announcing the next major chapter for Apple Security Bounty, featuring the industry’s highest rewards — up to $2 million and a maximum payout in excess of $5 million — expanded research ca...

security.apple.com

3

Amy @amyre.bsky.social · Sep 22

Yikes. Did not enjoy. Please unsubscribe.

Amy @amyre.bsky.social · Aug 28

Werner Herzog just started an IG account. You’re welcome.

1

Amy @amyre.bsky.social · Jun 25

Yes, I get that one of these things is not like the other in terms of societal impact, but I find joy in it nevertheless.

Amy @amyre.bsky.social · Jun 25

I know it’s hard to find things to be happy about these days, but Zohran Mandani won NYC’s mayoral democratic primary race last right, protesters managed to shut down the ICE office in here in SF yesterday, and S4 of The Bear drops today.
Absolutely dining on these morsels of serotonin this morning.

2 3

Amy @amyre.bsky.social · Jun 8

Walking up on a dreary Sunday morning, the apartment is quiet and still, the dog sleeping in his bed. Early, low light filters into the bedroom giving it a low parchment glow. My brain begins to boot into awareness:
Steve le-
(Wah ahahaha)
Le poisson Steve
(poisson Steve)
It est oraaaaaaannnnnnge

2

Reposted by Amy

becca (vote for Zohran, not the moron) @magicjewball.bsky.social · May 21

18 250 1.7K

Reposted by Amy

John Scott-Railton @jsrailton.bsky.social · May 20

Pegasus spyware maker NSO Group just got publicly rebuffed by the US.

They came to DC to get off the US blacklist.

It did not work out.

You know about the human rights abuses, but let me tell you why NSO is no friend to the United States. 1/

www.washingtonpost.com/national-sec...

6 59 150

Amy @amyre.bsky.social · May 17

Put some on a piece of strong English cheddar, smoked Gouda, or a dill havarti and it will change your life.

1

Amy @amyre.bsky.social · May 17

Me, when I see things like this logo ligature

a man wearing sunglasses and a leather jacket says you were so preoccupied with whether or not you could

ALT: a man wearing sunglasses and a leather jacket says you were so preoccupied with whether or not you could

media.tenor.com

1

Amy @amyre.bsky.social · May 16

Behold my favorite weird Chrome security bug of 2025 so far!

A jaw-dropping URL / omnibox spoof via ligatures, specifically the googlelogo ligature.

issues.chromium.org/issues/39178...

Chromium

issues.chromium.org

1 9 16

Amy @amyre.bsky.social · May 16

Sprinting home to watch this.

3

Amy @amyre.bsky.social · May 4

Agree. So much that I essentially watched the entire season in a single weekend a couple of weeks ago.

Amy @amyre.bsky.social · Apr 29

Security friends attending RSAC, please attend this session and heckle the fuck out of Kristi Noem.

Łukasz @maldr0id.bsky.social · Apr 28

If you’re at RSA remember to leave your pets far away from the venue!!

1 5

Amy @amyre.bsky.social · Apr 21

The pants I am wearing today are cute (subjectively), comfy (objectively), but so noisy.

I don’t think I can wear them to the office again. I feel the need to compulsively apologize for being disruptive, as I sound like a sailboat cruising aggressively in blustery conditions just walking about.

1

Amy @amyre.bsky.social · Apr 16

So I guess this is the wrong time for my standard takes that CVEs often wielded like infosec Pokémon and CVSS scores are terrible data points for making software update decisions?

Amy @amyre.bsky.social · Apr 15

/subscribe
I’m genuinely interested in folks respond to this question.

1

Amy @amyre.bsky.social · Apr 13

Two things I’ve never noticed on previous trips to Vancouver.
1. Some of the freeways have bike lanes, such as the road to the airport.
2. There are tampons and pads sitting out in the restrooms available for free.
Two ways America would sadly never.

1 2

Amy @amyre.bsky.social · Apr 13

I’ve been in Vancouver (Canada) since Thursday. This somewhat randomly timed trip could actually not have been better timed.
On top of my general long-time love for this city, I am especially daunted leaving tonight and returning to the U.S. and well, everything else.

1

Amy @amyre.bsky.social · Apr 10

Instead and unfortunately some are doing the opposite. I’m seeing cybersecurity firms (at least one former employer) cheerleading Trump because of the EO to grease the wheels of the defense acquisitions process. They’re bending the knee because they want that DoD contracts money.

2 13

Amy @amyre.bsky.social · Apr 4

Chromium now has a patch rewards bounty for fixing some (non-security) bugs!

This is very cool and provides an opportunity to contribute to open source and get some 💵 for your efforts!

Supporters Of Chromium-Based Browsers @socbb.bsky.social · Apr 3

🚨 Attention Chromium developers! 🚨

The SOCBB Bug Bounty Program is offering up to $10,000 for fixing bugs in Chromium-based browsers like Chrome & Edge! Contribute to repos like chromium, v8, and more.

Get paid via GitHub Sponsors! Start fixing: github.com/Supporters-O...

#Chromium #OpenSource

3 8

Amy @amyre.bsky.social · Apr 4

This is very cool and very excited to see this now live!

If you like fixing bugs and have been looking for an excuse to participate more in OSS — here’s your chance and also get some $$$.

Rick Byers @rbyers.net · Apr 4

I'm excited about this program! Chromium isn't necessarily easy, but I know there are great engineers out there who would love to get paid for improving it!

Supporters Of Chromium-Based Browsers @socbb.bsky.social · Apr 3

🚨 Attention Chromium developers! 🚨

The SOCBB Bug Bounty Program is offering up to $10,000 for fixing bugs in Chromium-based browsers like Chrome & Edge! Contribute to repos like chromium, v8, and more.

Get paid via GitHub Sponsors! Start fixing: github.com/Supporters-O...

#Chromium #OpenSource

2

Amy @amyre.bsky.social · Apr 2

I can honestly say I’m not sure what the thing is that is happening here is, but may it never find me.

Amy @amyre.bsky.social · Apr 2

In the latest installment of weird startup ads, did you know:

2 1