Jarmo Lahtiranta
LightNews LightNews
banner
naranek.bsky.social
Jarmo Lahtiranta
@naranek.bsky.social
64 followers 160 following 240 posts
Industrial product security in English and random hijinks in Finnish.
Posts Replies Media Videos
Reposted by Jarmo Lahtiranta
stacksmashing.bsky.social
The new AirTags 2 just arrived!

Time to take them apart 🧵
January 28, 2026 at 11:34 AM
Reposted by Jarmo Lahtiranta
jimmytwohands.bsky.social
Happy large boulder the size of a small boulder day for all who celebrate
large boulder the size of a small boulder tweet from San Miguel sheriff, dated 1/27/20
January 27, 2024 at 2:56 PM
Reposted by Jarmo Lahtiranta
henrymance.ft.com
Bluesky idea: if people who didn't agree with you change their opinions so that they do agree with you, why not be happy that you are making progress - rather than complaining that they are "only just catching up"?
January 26, 2026 at 10:08 AM
Reposted by Jarmo Lahtiranta
hacks4pancakes.com
-hacks4pancakes- • 1d The reason the good faith seniors on here are posting that the junior / mid level market is bad (it is) is because we have watched it crash in real time and a lotta of us are dealing with serious fallout as both hiring managers or mentors. It's genuinely a good faith warning. It's not like, "don't get into the field we love". It's just that for a really long time you could get into cybersecurity with no degree and no IT experience because the demand was so high. And schools, influencers, and parents still play it off that it's like that. That people can work full time remote and make 80k entry salary. It's not. It hasn't been for a couple years. We've been hit by "professionalizing" and oversaturation of graduates. Can you still get in with a sec+, a kali box and a dream? Maybe, if you really meet the right people and get lucky. Pragmatically though, that won't be the case for 99.9% of young people now, and if we care at all we need to counter the "everything is rosy" message people are using to sell boot camps. We are getting hundreds of cybersecurity grads and laid off professionals with work rights applying for positions. How can organizations even take the time to look beyond that at hundreds more juniors with no degree, criminal convictions, a GED, needing a' v sponsor, etc? You really need to take it seriously and make yourself a top candidate. And these days to be competitive you typically need a bachelors, certs, and some hands on IT work experience. You need a very good professional network. That's not true of every case. People will get lucky. Or they'll have a security clearance or live in the right remote place for an in person only job. It happens. Not often. The best thing we can do is try to enforce that they need to work seriously hard and have solid professional credentials. TLDR we aren't all assholes; some of us are trying to save 20yos from falling for Uncle Bob putting them in a bootcamp to make an easy six figures.
January 16, 2026 at 9:23 AM
Reposted by Jarmo Lahtiranta
3788mg.bsky.social
Heard a lad earlier talking about ‘Belgian whistles’

“A basic website costs 10k or 25k upwards if you want all the Belgian whistles”

BELGIAN WHISTLES
January 15, 2026 at 4:33 PM
Reposted by Jarmo Lahtiranta
urikikaski.bsky.social
Yesterday I published an analysis on the tanker MARINERA arguing that this was not a routine sanctions evasion case and not a simple oil shipment problem because the behavior around this vessel did not fit commercial logic and instead tracked with mission logic.
1/9
January 7, 2026 at 10:43 AM
Reposted by Jarmo Lahtiranta
blowdart.me
An excel spreadsheet with each cell filled with the word Gloria
December 23, 2025 at 3:56 AM
Reposted by Jarmo Lahtiranta
dieworkwear.bsky.social
FYI, if you're outside the US, you can come here and just collect $3,000
atrupar.com Aaron Rupar @atrupar.com · Dec 22
Kristi Noem makes an announcement on Fox & Friends: "We are saying that if you voluntarily want to go home now to your country, if you're in the US illegally, we'll give you $3,000 through the holidays to send you home. We'll buy you a ticket, give you $3,000 to go home."
December 22, 2025 at 6:05 PM
naranek.bsky.social
It's about time
newsguy.bsky.social Steve Herman @newsguy.bsky.social · Dec 20
The atomic ensemble time scale at the NIST Boulder campus has failed.
December 21, 2025 at 6:56 AM
Reposted by Jarmo Lahtiranta
jufopeltomaa.bsky.social
Cool stuff!

www.scientificamerican.com/article/the-...
10 Fascinating Math Findings of 2025
Hidden Fibonacci numbers, a new shape and the search for a grand unified theory of mathematics are among our choices for most exciting findings of the year
www.scientificamerican.com
December 20, 2025 at 8:06 PM
naranek.bsky.social
Jaksuhalit kaikille myyntihommia tekeville Paseille 😁
Kuvakaappaus hesarista: Se näyttää Pasilta, mutta myy kuin häkä.
December 18, 2025 at 2:34 PM
Reposted by Jarmo Lahtiranta
lookitup.baby
"Hello, We're Firefox, The Only Browser That Hasn't Hit Itself In The Dick With A Hammer. For years now, folks use us because of our un-hammered dick. Now, you may be wondering why today we've brought this hammer and pulled out our dick. Well I'm glad you asked-"
December 17, 2025 at 2:05 AM
Reposted by Jarmo Lahtiranta
jenson.org
My Ubuntu Summit talk is up! Where I talk about:
1. How Desktop UX is effectively dead
2. Why I hate the term UX/UI with the heat of 1000 suns
3. How OSS can actually innovate in #ux

www.youtube.com/watch?v=1fZT...
Are we stuck with the same Desktop UX forever? | Ubuntu Summit 25.10
YouTube video by Canonical Ubuntu
www.youtube.com
December 12, 2025 at 5:51 AM
Reposted by Jarmo Lahtiranta
securefirmware.bsky.social
🚀 Big news! EMBA 2.0.0 is here! 🎉

✅ 95% firmware emulation success rate — crushing older tools like Firmadyne & FirmAE!
✅ New **4.14.336 LTS Kernel** for better performance in the emulation process.
✅ SBOM integration via Dependency Track API for seamless vulnerability tracking.
Release EMBA v2.0.0 - A brave new world of firmware analysis · e-m-b-a/emba
The last few weeks looked a bit more silent to the outside ... but cool things were going on in the background. Now, it is time to share all the great things we were working on ;) In the early day...
github.com
December 16, 2025 at 11:46 AM
Reposted by Jarmo Lahtiranta
shortridge.bsky.social
⚠️ update on #React2Shell

After the POC dropped ~21:04 GMT today, Fastly detected a profound proliferation in the # of requests triggering our NGWAF signal for React2Shell (see graph).

We strongly recommend you immediately identify and update your React / Next.js apps + apply proactive protection.
Area chart displaying hourly volume of requests triggering Fastly's NGWAF signals for CVEs 2025-55182 & 2025-66478. The chart shows no signals prior to 7pm GMT, a small spike between 7-9pm GMT, followed by a spike at 10pm GMT, and a massive spike at 11pm GMT.
December 5, 2025 at 2:34 AM
naranek.bsky.social
Suomen yrityselämän diversiteettiä parhaimmillaan
Lähde: www.hs.fi/talous/art-2...
Hesarin jutusta: Syksyn mittaan johtajien vaihdokset ovat jatkuneet. Keskiviikkona yhtiö kertoi, että operatiivinen johtaja Tommi Malinen ja viestintäjohtaja Tommi Manninen jättävät yhtiön. Kaksi viikkoa aiemmin yhtiö oli kertonut, että toimitusjohtaja Jussi Holopainen jättää tehtävänsä. Hän korvasi vasta kesäkuussa Jussi Mälkiän.
November 28, 2025 at 11:55 AM
naranek.bsky.social
Cryptography turns any problem into a key management problem
November 23, 2025 at 7:57 AM
Reposted by Jarmo Lahtiranta
lookitup.baby
Normalize asking what things mean
brandyzadrozny.bsky.social Brandy Zadrozny @brandyzadrozny.bsky.social · Nov 21
completely outside of politics, this is so charming
November 21, 2025 at 4:59 PM
Reposted by Jarmo Lahtiranta
localmisanthrope.bsky.social
November 19, 2025 at 5:19 PM
Reposted by Jarmo Lahtiranta
meson.ninja
turn your globally distributed cdn into a single point of failure with this one weird trick
November 18, 2025 at 2:33 PM
naranek.bsky.social
fakeupdate.net was years ahead of its time 😁
November 13, 2025 at 2:40 PM
Reposted by Jarmo Lahtiranta
jtullock.bsky.social
No no no begs every archivist. You are never going to be able to find anything. Please don’t start using emojis in file names. Who asked for this? What fresh hell is next?
Screen grab from Dropbox saying Emojis in file names are finally here!
November 12, 2025 at 10:38 AM
naranek.bsky.social
My favorite so far:
"I'm on vacation. You have to fend for yourself."
joshua-goodman.com Joshua Goodman @joshua-goodman.com · Nov 8
Just got the best out-of-office message I've ever seen from a fellow academic:

"I am currently away on leave. If this is an emergency... well, I doubt it. What could possibly be an emergency in my line of work?"
November 9, 2025 at 7:29 PM
Reposted by Jarmo Lahtiranta
alanderminna.bsky.social
One of the reasons why Finland is the happiest country in the world is that the public broadcaster Yle sends a live feed of the first 8 weeks of a pack of puppies every fall. It’s already the fifth edition of ”Finland’s most therapeutic live feed”.

This is what I call value for my tax money
Pentulive 24/7 | Pentulive
Pentuliven pikkuiset kehittyvät vauhdikkaasti ja jokainen pentu on saanut nimensä! Kahdeksan viikkoa kestävässä suorassa lähetyksessä seurataan englannin­springer­spanieli Murua ja tämän pentuetta.
areena.yle.fi
November 9, 2025 at 1:09 PM