Elektrine
Log in Register
Paige Chat Timeline Gallery Friends Email Drive DNS Private DNS Domains VPN Kairo Nerve
Remote

Halle Winkler

@halle@infosec.exchange
mastodon 4.8.0-alpha.3+glitch
  • Open on infosec.exchange

Berlin application security engineer and Apple platforms security researcher, surrounded by red squirrel frenemies of Kreuzberg and the occasional human. Has established system persistence despite countermeasures.

This account is for infosec stuff, the other one is everything else.

35 Followers
27 Following
10 Posts
Joined January 05, 2023
Pronouns:
She/her
Blog:
https://www.theoffcuts.org
Job:
https://www.linkedin.com/in/hallewinkler/
Biz:
https://www.politepix.com
Breaking Into the Security Mindset, my course for engineers:
https://www.driyourcareer.com/security
Open post
Halle Winkler @halle@infosec.exchange
· 3w ago
Replying to
Audio Intelligence also proves my personal theory that if the leading advertisement for a new privacy-affecting feature is helping people with a disability, it's dystopian and the company is aware. In a perfect world this would be a sign of inclusion, but in this world it's a sign of framing concerns as anti-inclusion.
103
4
52
1
Open post
Halle Winkler @halle@infosec.exchange
· 3w ago
Replying to
Very big fan of accessibility and inclusion, have enough real-world exposure to the technical realities to feel OK noting that there are certain recurring contexts where it is presented as the first-order concern.
37
3
8
0
Open post
Halle Winkler @halle@infosec.exchange
· 3w ago
Replying to
Last thought: I generally feel positively about the value that Apple place on privacy and also on accessibility, under normal circumstances. But, the four times I thought they made the wrong call, they all involved speech, and half of those cases involved what felt like accessibility pretexts! There's a blind spot.
15
2
3
0
Open post
Halle Winkler @halle@infosec.exchange
· 1w ago
Replying to
I've been saying "but maybe I hallucinated it" for, IIRC, ~35 years, so don't give me any guff about my word choice 😂
1
0
1
0
Open post
Halle Winkler @halle@infosec.exchange
· 3w ago
Replying to
@stooovie@mas.to Yep, I have also experienced this temptation and I know it's unhelpful.
1
0
0
0
Open post
Halle Winkler @halle@infosec.exchange
· 1w ago
Replying to
I had a great paper about leakage through tool use (without adversarial intent or backdoors or prompt injection) in one of my newsletter issues but I can't find it so maybe I hallucinated including it. Anyway, here is a paper about how tool use can leak data purely via argument and other artifacts that are easier to forget to set boundaries around than the actual inputs/outputs/prompt/"thinking" and can also propagate into logs, etc. I've personally seen a (local, thankfully) agent "deduce" an exploit chain via a brief commit message without being allowed to see the commit, which was alarming and made me think that it's totally possible that what looks like data leakage between agent instances might be...data leakage between agent instances. https://ieeexplore.ieee.org/document/11569042
ieeexplore.ieee.org
0
1
0
0
Open post
Halle Winkler @halle@infosec.exchange
· 1w ago
RE: https://hachyderm.io/@cate/117330995142104460 Savage 😂
Open quoted post
Quoting
cate
@cate@hachyderm.io
.@halle@infosec.exchange and I built a security course for engineers curious about security: a supportive environment to get started building a tool, finding and fixing a real vulnerability. I really think it's something people need - especially right now. But my favourite parts are the diversions, like this one, where we unite in despising grok.
Open quoted post
hachyderm.io

cate: ".@halle@infosec.exchange and I built a security c…" - Hachyderm.io

0
1
1
0
Open post
Halle Winkler @halle@infosec.exchange
· 3w ago
Replying to
@akareilly@hachyderm.io Yes, before I did this kind of stuff I made an offline speech SDK, and these were the use cases I was constantly asked about (but large vocab was premature for on-device at that time) – for instance, medical practitioners who wanted to make notes on the go, which meant good accent recognition, which meant adaptation per-user. I feel like we've swept right past the (boring) human-helpful use cases into the (more exciting to product designers) dystopian ones.
0
1
0
0
Back
313k7r1n3
Elektrine

Tor hidden service

elekhj7afj4qnrr4yd3bkzslsyo5jgfxw3orgjkhlcxifueodybyiiad.onion

I2P eepsite

j6b6cyk6gjmepjih7jjadxgxvvf3lzzujljuu2v4biemzpg3naya.b32.i2p

Platform

  • Email
  • Chat
  • Timeline
  • VPN
  • DNS

Company

  • About
  • Contact
  • FAQ
  • Lite (no JS)

Legal

  • Terms of Service
  • Privacy Policy
  • Transparency Report
  • Report Abuse
  • Warrant Canary
  • VPN Policy

Support

  • support@elektrine.com
  • Report Security Issue
Mail client setup IMAP mail.elektrine.com:993 POP3 mail.elektrine.com:995 SMTP mail.elektrine.com:465
© 2026 Elektrine. All rights reserved. Server: 11:30:39 UTC