Shane Huntley
@ShaneHuntley
🇦🇺 Sydney based security / tech guy. Google Threat Intelligence. Co-founder Threat Analysis Group (TAG). Tweets are my own not my employers.
PSA: While I work for Google, this is my personal account for all things tech, security and other topics. When I'm sharing Google content or positions, I'll make it crystal clear. Otherwise, you're just getting my thoughts. If in doubt ask.
Yup. Much more oppressive than I would have guessed, And much worse qua legislation.
🚨 UK’s Online Safety Act just came into effect, promising a “safer” internet. It’s a lie. This law threatens YOUR privacy, free speech, and democracy and paves the way for a surveilled, censored web. Want to know how bad it gets? 🧵
it’s really a miracle how humanity accomplished anything at all before we had stakeholder alignment and could properly frame the context
If only you knew what you were up against.
Hate break it to you, but Australia has the highest average IQ of the entire western world. It's devastating but true. Yes. The people in mullets doing shoeys.
I am the 1%
Fun fact: every year on July 8th at 11:15 UTC, 99% of the world population gets sunlight ☀️
Israel + Ukraine both successfully planting drones near sensitive enemy sites to take them out has gotta feel pretty affirming for the “maybe don’t let the CCP buy land next to military bases” folks
Is it a a positive or negative sign if my AI Strategy looks obviously written by AI?
YARA-X is now stable! virustotal.github.io/yara-x/blog/ya…
Convinced the CFO internal phishing campaigns are a waste of time and freed us from the knowbe4 contract
If you read about O3 finding a SMB bug in the Linux Kernel, I did a few tests and I what I suspected looks true: Gemini 2.5 PRO can more easily identify the vulnerability. My success rate is so high that running the following prompt a few times is enough: gist.github.com/antirez/8b76cd…
PSA for people who sleep with their door closed I was talking to Claude about waking up drowsy with a stuffy nose at my childhood home Claude suspected CO2 buildup and suggested buying a monitor for my room Turns out Claude was right - the levels spike when I sleep🙃
Sydney Botanical Gardens also. I love this vibe park by skyscrapers.
Central Park is truly one of the greatest places in the world
The flaw in calculating the cost of a meeting in attendee salaries is it assumes that the people who attend meetings all the time would otherwise be performing economically valuable work.
When you look at meetings as costing at minimum the length of time multiplied by the compensation earned by each participant in that time, you might look at things slightly differently. Imagine if every meeting on your calendar showed the dollar amount automatically. 🤨
If the Catholic Church can pick a new Pope in 24 hours, you can fill your software engineering role without dragging it out for three months.
BREAKING: Spyware maker NSO Group must pay $167 million to WhatsApp for a hacking campaign in 2019 that targeted more than 1,400 chat app users. This is a huge win for WhatsApp. NSO says it will consider appealing. techcrunch.com/2025/05/06/nso…
Deep, strategic thinking often felt harder in my study so I'd move elsewhere to work. A CO₂ monitor revealed the culprit: levels often exceeding 1500 ppm without ventilation, high enough to dull focus. Realized relocating wasn't just about changing scenery.

Massive power outage in Spain. Non cyber people: is this a cyberattack? It’s a cyberattack! Russian hybrid warfare in Europe!! Cyber people: it’s probably a squirrel or something.
Soldiers with directed energy weapons to protect the Pope’s funeral from robot attacks. Welcome to the 21st century!
The Vatican is under serious protection ahead of Pope Frances' funeral tomorrow. Not sure what weapon that Italian trooper is holding, but I want one!https://t.co/bJhAOkUg9V