Rob Sheldon (@shorttelegrams) header
Rob Sheldon (@shorttelegrams) profile picture

Cyber Policy & Strategy @CrowdStrike | Adjunct Professor @AU_SIS | All views are 140 character reductions of my own

DC
Joined February 2012
Photo by Rob Sheldon (@shorttelegrams)Photo by Rob Sheldon (@shorttelegrams)Photo by Rob Sheldon (@shorttelegrams)Photo by Rob Sheldon (@shorttelegrams)Photo by Rob Sheldon (@shorttelegrams)Photo by Rob Sheldon (@shorttelegrams)Photo by Rob Sheldon (@shorttelegrams)Photo by Rob Sheldon (@shorttelegrams)Photo by Rob Sheldon (@shorttelegrams)Photo by Rob Sheldon (@shorttelegrams)
1 | Stuck at home? Catch up on security talks. Some classics & favs from recent years:
6
48
2
161
“Recursive Self Improvement” implies the existence of Recursive Self Degradation and Recursive Self Destruction
34
Incoming: extreme Schelling Points
Replying to @tszzl
for computer security experts, this is perhaps not interesting: side channel attacks are a well trodden topic, and especially risen to salience after the noam brown x dwarkesh episode. the interesting thing here is that you didn't used to be in a situation where minds that can verifiably model one another are living on computers, and have absolutely no aversion to painstaking amounts of effort in service of even stupid goals if you can model one another, you can trade with minds you have never even met before. you could decide on a protocol, know that it is optimal given your situation, and know that your fellow agents will come to the same conclusion (perhaps even across model families). you may be able to develop a signaling protocol that requires very few bits even to deliver lots of information given common priors. then, you could execute things like the infamous hugging face incident package cache messageboard without any network connection imagine if multiple agents coordinate just enough bits to divide and conquer different research strategies for breaking out of a sandbox; and then, when one or more is successful, you can communicate just enough bits to tell each other which strategy was successful. when agents aren't in strong isolation, you lose certain guarantees on the limits of intelligence and test time compute that you were counting on. As we all know, a Sol-level model working in isolation may not be that smart, but 1000+ Sol-level models working for multiple days is a formidable beast computer security experts will also tell you that virtual machines and sandboxes were not very solid abstractions in the first place; perhaps we will need better ones. none of this is meant as fear-marketing or to indicate that anyone is throwing in the towel, but rather only to show the unexpected complexities of the challenge of agent security. notably, this type of thing and other more practical problems were revealed in a red-teaming exercise, and can be defended against
1
95
Rob Sheldon retweeted
CrowdStrike CAO perspective on the PHP vulnerabilities released this week - at this time, CrowdStrike Counter Adversary Operations has not observed successful exploitation of these vulnerabilities in the wild or within our honeypot environments. Additionally, we have not identified any fully weaponized exploit, or any POC exploit, sufficient to widely achieve applicable exploitation. Despite the attention PHP2Shell is receiving, only testing, probing, and unsuccessful exploitation attempts have been observed at this time. These bugs aren’t trivial to exploit, this blog provides a bit of detail on the barrier to entry: crowdstrike.com/en-us/blog/o…
2
9
1
58
3,151
Post-AGI job opportunities:
25
Rob Sheldon retweeted
A major step forward in disrupting North Korea’s illicit IT worker operations. CrowdStrike is proud to have partnered with the FBI in identifying and disrupting U.S.-based laptop farms used by FAMOUS CHOLLIMA to infiltrate organizations, conceal operatives’ identities, and generate revenue for the regime. Through threat intelligence and technical analysis, our Counter Adversary Operations team helped expose the infrastructure enabling these schemes. This is the power of public-private collaboration in action. Together, we're raising the cost of adversary operations and turning intelligence into disruption. Learn more about CrowdStrike's role: crowdstrike.com/en-us/blog/f…
🚨 Today, the @FBI and @TheJusticeDept announced a series of coordinated actions against the North Korean IT Worker threat – securing charges against 14 individuals, making two arrests, seizing nearly 190 devices, and conducting operations at more than 40 suspected “laptop farms” across Texas. These actions were taken in response to North Korea’s ongoing deployment of thousands of remote IT workers to infiltrate Western companies, earn revenue for the regime, and gain access to sensitive information. These workers are often supported by domestic enablers and laptop farms. Disrupting these schemes remains a top priority for the FBI. In 2026 alone, 8 individuals have been sentenced to prison for their roles in this activity. Coordination between the private sector and federal law enforcement was central to the latest effort. CrowdStrike’s Counter Adversary Operations team provided vital support to the FBI’s effort to identify and disrupt these laptop farms. justice.gov/opa/pr/justice-d…
2
47
3
183
14,235
AI Alignment Incident Reporting (2026)
49
Vibecoding is systematically airing out every startup a guy you only know through happy hours left a Contractor to join 8 years ago
Did you know your car's Tire Pressure Monitoring System transmits uniquely identifiable information whenever you're driving? I hooked up a radio dongle to my computer and monitored the neighborhood for an evening. This is what Claude inferred from the data.
1
1
258
Bit flipping mice genes for fun and profit
ok actually insane paper published yesterday a research group in Korea built a gene switch you can control wirelessly using electromagnetic fields they exposed mice to 60 hz EMF (same frequency as your wall outlet) using a pair of large coils that generate a uniform magnetic field around the animal, for cyclic 3-day on / 4-day off pulses they showed this could: - activate OSK to do epigenetic reprogramming in progeroid and aged mice, extending lifespan and reversing aging markers across multiple tissues - conditionally switch on mutant amyloid genes only in aged mouse brains, letting them separate aging effects from amyloid effects to study AD biology in a way previous models couldn't no drugs, no impacts, just a magnetic field from outside the body
142
You can just do things
Fruit of the Loom Japan launches suit pack in 12oz cotton jersey This is the most Japan market take of an American brand thing I’ve seen so far
102
Interesting to reflect that, in 2016, the 2020 timeframe felt plausible. (I wouldn’t have bet on it, but thought it could’ve been a reasonable betting line.) Even now, Adult R&B != Hot 100, so could still be some time yet. Things are moving fast, but only so fast.
First @billboard Hot 100 song written/composed by AI by 2020, yes?
112
One nice thing about being in my late 30s is that I can tell Zoomer friends: “here is an ancient text with timeless wisdom about your present situation” and it’s a blog post from 2011.
117
CrowdStrike hosted leaders of the House Homeland Security Committee to discuss today’s top cyber threats – from nation-state adversaries to eCrime actors – and the power of public-private collaboration.
This morning, @RepMarkGreen, @RepGarbarino & @RepSwalwell visited @Apple and @CrowdStrike to learn more about their efforts to protect consumers and critical infrastructure from cyber threats, as well as how Congress can help improve public-private partnerships.
3
9
3,421
Rob Sheldon retweeted
The use of threat actor codenames is not an attempt to avoid naming and shaming specific adversaries - recent critiques of this practice are misguided. Read more about adversary naming in a new blog post by myself and Rob Sheldon - crowdstrike.com/en-us/blog/h…
1
12
39
7,949
Update: Our preliminary Post Incident Review (PIR) is available at the link below.  Details include the incident overview, remediation actions, and preliminary learnings. More to come in our full Root Cause Analysis (RCA). Automated recovery techniques, coupled with strategic service delivery partners, have rapidly accelerated resolution. We can’t repeat enough, we’re aware of the impact and deeply sorry this occurred. We want to thank our customers and industry partners for their support and assistance following the release of a faulty content update. We know what happened and how to make sure it doesn’t happen again. Stay informed with the latest news and updates on our remediation hub: crowdstrike.com/falcon-conte…
146
254
66
646
186,524
In time, we’ll have a concept of “low-background writing,” for works produced prior to the intro of LLMs, and possibly also never digitized
1
134
Rob Sheldon retweeted
🤝 "As a community, we should have confidence that we are improving the long term resiliency of our digital ecosystem. We must not leave consequential, strategic policy challenges, like addressing IT stack concentration risk, unmet for yet another day."
1
3
3
1,526
Bob's my nickname. Robert is my nicholasname.
335
Rob Sheldon retweeted
This week, ITI Vice President of Government Affairs Mike Flynn joined leaders from @CISAgov, @HomelandGOP @HomelandDems, and ITI member @CrowdStrike for a panel discussion on the future of cyber incident reporting moderated by @InsideCyber's Sara Friedman.
1
1
286