Thomas Strömberg

KD4UHP - based out of Carrboro, NC
founder & CEO @ isotope¹³
former Director of Security @ Chainguard & Xoogler
#unix #infosec #bikes #carrboro #motorcycles #photography #hamradio

Pronouns: He/Him
Home: https://choosehappy.dev/
Startup: https://isotope13.ai/

Last Notes

2026-08-07 17:45:11 UTC

In starting #Atomdrift - I've been driven by a single goal: reliably detect the next xzutils-style supply-chain attack, whether created by a human or AI. Our #Scan project was phase 1, and now we're looking for design partners for phase 2. If interested or just curious, DM me.
(Yes, this is a shitty LLM-generated image based on its design doc; plz roast)
https://cdn.masto.host/triangletootparty/media_attachments/files/117/055/456/944/545/128/original/a38aa2a363f2f4c8.png

2026-08-06 22:07:22 UTC

As much as I dislike whoring myself out like this, I could use some help!
#atomdrift just relocated from codeberg to github; so all of our "stars" reset. If you have a GitHub account, take a moment to star our project: https://github.com/atomdrift-project/scan - for better or worse, folks use stars to determine whether a project is worthwhile; this one certainly is.

2026-07-24 12:41:42 UTC

I've been trying to stay quiet about it over vacation, but I'm damned impressed with how #atomdrift is showing up in the malware detection charts. Nothing comes close to it for #supplychainsecurity. Have a question? Leave a comment.
https://cdn.masto.host/triangletootparty/media_attachments/files/116/975/003/048/418/417/original/a8e2f4de0c86f04a.png

2026-07-06 07:06:47 UTC

Things are not looking so good for the Linux box that serves the #atomdrift API for serving, foraging, and generally managing sample files.
Definitely a shame to be 7000km away from the power button for the next 3 weeks, as it doesn't respond to soft reboot requests.
Kinda wish I'd gotten around to enabling remote ZFS snapshots before I left. 🤦
https://cdn.masto.host/triangletootparty/media_attachments/files/116/871/748/416/262/907/original/b12897da7f7a2406.png

2026-06-22 17:56:29 UTC

TFW when you need to quadruple the storage on your machines because your open-source project is finally successful.
On that note, https://lab.atomdrift.org/ will be down for the next couple of hours so I can upgrade our #OmniOS #PostGreSQL master & #FreeBSD frontend replica to 4TB of NVME so that the drive doesn't fill while I go on vacation.

2026-06-09 21:40:16 UTC

- reply

Oof, that reminds me of having a discussion with Rapid7 when we were SIEM searching.
At the time, their platform had bare-minimum built-in rules for macOS endpoints, so I figured we could just port them via Sigma - except they had some absurdly low limit like ~30 custom rules allowed.
I was told I could possibly get an exemption for ~70. Like, what in the actual fuck?

2026-05-29 18:09:04 UTC

128 ARM64 cores {Altra Max}, 256GB of RAM, 24 hot-swappable NVME drives; definitely the craziest machine I've ever built. Holy hell, this one is fast #FreeBSD box though.
Why not just rent from the Cloud? After just 33.8 days, the hardware pays for itself versus the equivalent from GCP. That's insane.
https://cdn.masto.host/triangletootparty/media_attachments/files/116/659/199/831/176/650/original/4e7d467d7c331ae3.jpg
https://cdn.masto.host/triangletootparty/media_attachments/files/116/659/200/595/123/837/original/80096e768131a91c.png

2026-03-10 21:19:50 UTC

One of the biggest component upgrades I've ever done: from a 4GB GPU to 96GB. It feels weird to hook such an overpowered beast to a JetKVM rather than a monitor.
https://cdn.masto.host/triangletootparty/media_attachments/files/116/206/963/355/882/552/original/a644de48e05d93fe.jpg

2025-11-02 01:25:35 UTC

- reply

Just curious? What did you hit?
I'm of the opposite opinion at home - I'd rather not have the complexity of keeping their admin interfaces secure (no code to patch; no code to maintain) - I'd adwittedly feel differently in a professional context.

2025-09-15 15:15:53 UTC

The recent NPM compromise highlights a frustrating reality: the security tools exist, but nobody uses them.
I had planned to keep my mouth shut about the affair, but someone DM'd me to ask if the supply-chain attack detection tools I created and open-sourced while at #Chainguard would have caught the attack. Yes—both malcontent and ucd detected it; the latter with surprising precision. [1/3]
https://cdn.masto.host/triangletootparty/media_attachments/files/115/208/965/088/856/657/original/f1acf519b0cf88f5.png

2025-07-24 22:31:26 UTC

- reply

It probably won't help you, but it's worth knowing that https://github.com/rusq/slackdump exists. :)

2025-07-16 01:10:44 UTC

After two weeks of non-stop #AI usage to get my startup off the ground, I'm finally starting to see the cracks in the facade.
It's been great for rapid prototyping in a way that doesn't irritate my osteoarthritis, but asking LLMs to maintain complex state machines is like asking a toddler to clean the house. Both take forever to get anything done, but with AI, entire rooms may suddenly disappear just because you asked it to put away the laundry.

2025-05-13 17:34:16 UTC

That feeling when your employer decides to pay another company to maintain an OSS tool you donated to them and were subsequently banned from contributing to. Ugh.
I hope I can find it a nice home.

2025-04-23 16:42:55 UTC

Step 1 in my my bee-inspired home office rennovation.
https://cdn.masto.host/triangletootparty/media_attachments/files/114/388/275/580/601/566/original/f5dd7d4aad8baf93.jpeg

2025-03-14 01:08:56 UTC

- reply

Coaxing Gemini into emulating BeOS is like dragging a cat around the neighborhood. It really really doesn't want to. As soon as you get it to realistically emulate one command, another mysteriously breaks.

2025-03-13 22:07:36 UTC

For reasons that defy explanation, I placed another weird artifact on the Internet (try it! there is no ssh password).
https://cdn.masto.host/triangletootparty/media_attachments/files/114/157/396/967/500/656/original/8c772dcc4f87e955.png