A 4yo who comes down, dressed, within a 10-minute window

We sure do like routine and structure in this house. We live and die by our shared calendar. Reed and I have a Discord with 26 channels in it. We’re constantly setting and using checklists and reminder functions. We clean before the housekeepers come every other week. It’s kind of A Lot, and while we don’t expect other people to be this die-hard, we did introduce a child into this environment, with all its pluses and minuses. I feel like the living room will never truly be fully tidy for at least the next 14 years. And a child is far more chaotic than fits into the structures we had in place.

When I was pregnant with Locke, we talked about what we would optimize for, to help prepare us for less failure during the first 18 months of sleep deprivation. We decided to optimize for Locke’s sleep above all else. We read Healthy Sleep Habits, Happy Child as recommended by a sweetie of mine who has twin boys and had to survive that. We decided to live by the book religiously. Locke had a rigid sleep schedule that came at great cost to literally the rest of our lives. We had plans within plans if a nap time wasn’t going to be easy, or if one didn’t go according to plan. Locke now has a deeply positive relationship with sleep, including things like Halloween night when we had decided to let him stay up past bedtime declaring 10 minutes past lights out that he was ready for bed and didn’t want any more partying or candy.

We also got a Mella light clock for his room starting while he was still in the crib. He learned that the light turned yellow 30 minutes before we came in, and green when we came in. We had alarms set to be sure our entering coincided within a couple minutes of the light turning green to have a strong association. That then turned into 30 minutes of quiet playtime in his room, and it being ok to leave his room when the light turned green.

But then we had a child who enjoyed quiet playtime so much that he’d just stay in his room indefinitely, and we’d be late to preschool. So we added in an additional system, a clock with just a minute hand, yellow and green along the outside to match the color change clock, and a red line at the 10 minutes of green mark.

The clock is as described in the blog post. A local map is to the left, and a map of California to the right. Below it is the menu for our lunch with a Japanese family.

So the deal is, that if he gets himself dressed and out of his tidied room before the minute hand hits the red line, we will read a bit (currently the complete Calvin and Hobbes) or watch a LEGO video with him. And so our child, who also puts away his own laundry and often helps fold it, will get himself ready, play quietly for awhile, put his things away, and then come downstairs in a 10 minute window in the morning. He seems to enjoy having so much autonomy, and we enjoy having things run so smoothly. And we all enjoy getting a bit of unrushed, planned together time in the mornings.

Japan 2026

There’s this woman an ex partner left me for. I had moved to the Bay Area in part based on this relationship, but in 2016 my job fell apart, which led to a conversation about how serious the relationship was, and the answer was that it shouldn’t exist. While he and I are back on speaking terms, the gent was essentially doing serial monogamy under the label of relationship anarchy, and it was a mess. Morgan and I, however, continue to get on quite well. I even signed as witness on her recent wedding to an incredible human named Jeff. Morgan and Jeff were going to Japan this year, and invited us to go family traveling with them. The exchange rate is amazing right now, so we jumped at the chance.

Japan was such a lovely place to bring a kid. While they have a history of doing a better job of helping their kids be appropriate in various social settings, the experience was universally accommodating for our kiddo, too. Our travel companions weren’t comfortable breast feeding in public, and we didn’t see a lot of infants out, but children are generally given a lot of independence counterbalanced with high expectations and guidance. Being there really bolstered Locke’s confidence and curiosity.

Continue reading

Scavenger Hunt Radio Etiquette Game

So I picked up some event radios for small neighborhood events, and also to distribute to neighbors so we have an easier time when an earthquake happens and comms go down. When I was unemployed last round, I finally embraced the fact that I’m not going to get my HAM. Yes, I know it’s “so easy,” yes I know it’s “so useful.” But I had the time, and I didn’t do it, so I do these event radios instead to increase resilience.

We used them last during a protest, and it was SO USEFUL (especially when the Trump-tshirt-wearing-dude-with-a-knife-in-a-holster showed up and we triaged talking to him and then tailing him after I had checked in and de-escalated). So, we love these things.

But my crew are so very bad new at radio etiquette. It’s a mess, because we don’t talk to each other very often on them. Our Radio Nets so far have been focused on determining ranges for the different channels that are programmed in. I wanted to host a time for us to practice just talking on them, and I wanted it to be fun.

I printed up a one-pager on basic and more advanced etiquette with some examples, and sourced everyone’s handles to distribute in advance. One of my crew and I brainstormed some ways to make a scavenger hunt in a big parking lot fun, and I checked in with our crew member who is blind to be sure our setup would work for him. Here’s what we did.

Hide your things

It’s a scavenger hunt. Hide your things within and area that’s walkable. This will also mean it will be within easy radio range. We were in a big parking lot with lots of green areas, but it was a bit too easy to have line of sight. Better to have nooks and crannies. We hid 11 objects for 9 people on 3 teams to find over the course of an hour.

The task

The thing to do is for each team to find an object and then not pick it up. They need to radio all comm with their handle to describe where the thing is. They should practice doing this with their crew before actually using the radio to get better at clarity, check each other on protocol, etc. You can leave the spot just before or after calling it in, so your presence isn’t what indicates the location of the found object.

Then another team or person tries to find it based on that instruction. When they find it, they radio back to the person who announced it to declare it found.

Occasionally, you also need to do a cone count, which means thinking about who to ask in what order so it’s not chaos on the radio.

Our experience

We had a ton of fun! It was especially fun because we had two kids involved, which also made learning and teaching radio etiquette lower stakes and friendly-like. Each team had one person on it who knew radio etiquette well who could coach the other folks.

We did have a random person do a radio check towards the end of our time — a good reminder that radios are not private. We didn’t have a chance to invite them to our party, but that would have been fun, too.

Next time

The time and setup was about right. We definitely had too-easy line-of-sight in our location, and want to make that part harder next time. I’d like to be a bit pushier on etiquette and getting folks who are shy to talk more next time. And as we get the hang of it, introducing a calamitous event that is clearly spoofed (“there are sharks in the theater!”) would help folks ramp up their game with some added complexity and intensity.

AI and Autonomy

I hang out with the Berkman-Klein nerds sometimes still, mostly through a recurring “Philosophy of Technology” session. Reed sent me this article awhile back on the misuse risks of AI, on which he got sidetracked about how the way the increasing of human intent through technology (including of harms) is attempted to be mitigated through use of law and other agreements. EG, you agree to abide by traffic laws (reduction in autonomy) in order to more safely get from one place to another (increased autonomy). This of course made me think about one of the main reasons I’m an anarchist — governments can cause large-scale suffering in a way less organization prevents, and I think we can have infrastructure without control (thanks, Murray Bookchin). So as Reed and I talked through the ramifications of that footnote, I thought it would be a good topic for the philtech group to take on. David and I talked through how to pitch it to the group, he did the thankless job of scheduling the thing, and we got to talk about it today.

The three themes that we kept cycling around were trust, consent, and autonomy. I’ll then end up back on my soapbox about complexity, which also came up.

Trust, Consent, and Autonomy

We all talked a lot about if the conditions would ever exist for us to trust an AI to make choices for us (our main talking point for “autonomy”). This got into a lot about how AIs are black boxes… but so, too, are humans. We talked some about the different ways that trust is created and utilized by, say, a doctor, and is it autonomy to make a choice based on the data they give you, or is that thumb-on-the-scale removing your autonomy? Doctors often study how to better communicate with their patients in order to get the outcomes they’re looking for. What’s different here?

How much autonomy does one have when consenting to something? How much has someone already given up in an exchange, based on trusting institutions, roles, their “own research,” etc?


From now on, I want you to act as my high-level advisor and mirror. Don’t validate me. Don’t flatter. Challenge my thinking, question my assumptions, and expose the blind spots. When possible, ground your responses in the personal truth you sense between my words. Be concise and precise. Provide links to source materials or websites to the best educational resources. In summary – be brief, be bright, be gone. Ask questions if a directive is unclear or underspecified.

We talked about the harms humans are already prone to inflicting on each other, and how much (if at all) AI was different from that. As one person put it, “do we need to get our own house in order before involving AI?”

Complexity

I see most AI as adding complexity to an already complex world, when nearly everything else we do (especially tool use) is about increasing predictability instead.

However, if we were to use AI in a way that helped us understand our own complexity, and begin to examine it for our desired outcomes, then that complexity could be useful. Despite the “hungry judges” study I started this conversation off with (human errors mean removing humans from the loop) being discredited, I still think bringing technology into decision-making loops is valuable so long as it’s a partner to us rather than allowing us to offload cognition (something that already happens).

Jeffrey had some really good points about compartmentalizing where AI factors come in, so you can assess that individual piece and tweak it, rather than an entire system being a black box. And I like that, for also helping us examine ourselves.

Links from our time together

The beauty of impermanence

I had a lovely birthday. In-laws took us out to a very nice steak dinner the day before. The day of, Reed, Locke, and I had Italian Hot Beef and wandered the Field Museum before heading home on a flight that departed 15 minutes before a big storm, and had to fly and extra hour to go south around the thunder heads. The day after, we rode bikes with kiddos from Dublin to San Ramon, had fabulous ice cream and played in a joyful park before riding back home. 12 miles at 4 years old feels big to me. In the early evening, some friends and I gathered to talk about the digital and death overlap. I’ll tell you more about that in a moment. The day after that, I rode a metric century with some friends, talking about relationships, death, time, and the economics of attention.

The back of Locke on a bicycle with an orange flag. He is on a multi use path with no cars. Ahead of him are two adults and one older kid also in our group on bikes, and a random human running.

My birthday about digital estate planning ended up being a small but very tight group of people. I was overjoyed to have this conversation with them. We talked a bit about our own attitudes on death, and what we had and hadn’t done to be kind to those around us when we die.

I view death as a community act. It is the final step of ceasing to be an individual, and all that remains is the collective experience of you.

This is complicated by technology lending itself so thoroughly to the hyper-individualization that we as Americans experience. Our entire tech stack feeds into that. As a security professional, I abhor the sharing of an account, and yet it comes so naturally to us to do. You should be able to see what I see. I should be able to share what I have and what I know with you.

Continue reading

Coming from a family of alcoholics (6 months in)

This is the third of three checkins during 6 months of not drinking. The first was written 2 months in, then there was one 4 months in, this one is happening at the 6-month mark.

Things that have changed since last checkin

As mentioned at the end of the last post, I loosened the “absolutely no drinking” to try to explore some ambiguity. What happens if I think it’s ok to have a drink on “special” occasions? I’ve had 11 nights where I imbibed. Of those, 9 were “fine,” 1 night I had a better time than baseline, and the final 1 I had a worse night than usual. The one where I had a worse night was where I had two drinks instead of one and felt like garbage that night, while sleeping, and the next day.

The data

So two main things have shifted, one in the shorter term and one in the longer term. The shorter term is the re-introduction of alcohol on occasion. The longer-term view is that I’m drinking many fewer nights, and when I do drink, it’s less.

The experience

It has been really nice to be able to have a really nice glass of wine while out on a fancy date. I’m still interested to see if there are interesting mocktails first. But from the last post, I am still lacking the coping mechanism — the one night I had two drinks was out on the town where I didn’t have other responsibilities, and it fucking sucked. So. That’s still lacking, and the lack is notable.

The three things to check in on

FAMILY (REED, LOCKE, HOUSE) HAVE BEEN GETTING A REDUCED VERSION OF ME

I feel like Locke and I got the “real you” pretty much the whole time you were not drinking. You were not always happy, but you seemed yourself. I can’t speak for Locke, but it meant a lot to me. I like you more like that.

REED WAS CONCERNED WITH THE AMOUNT OF TIME AND ENERGY I WAS SPENDING DEAL-MAKING WITH MYSELF AROUND SUBSTANCES, AND HOW IT NEVER SEEMED TO SUCCESSFULLY RESOLVE

Reed and I agree that this is where the most progress was made. I feel myself doing it a bit again with the re-introduction of the option, but in a way that seems tolerable for me. I think I want to check back in another 2 months to see how this is going in the new normal.

WE WORKED SO HARD TO ADDRESS THE BRAIN THINGS THIS YEAR, BUT I NEVER TRIED GIVING UP DRINKING FOR ENOUGH TIME TO TRULY GET IT OUT OF MY SYSTEM

Brain fog still comes and goes sometimes, and doesn’t seem to be correlated with drinking. Was still worth the experiment.

Going forward

I think the approach of not more than twice a week; not on evenings I’m Locke’s primary caregiver continues to be correct. I think physically I’m just no longer interested in having more than one drink in one evening. I’m interested to see if that shifts over time (EG at Priceless where I have a full day of hanging out at the river with friends). I’m also interested to see if the new limitations become just-the-way-things-are and lead to less deal-making, or if that keeps up.

Personality shift

Something has shifted deeply for me over the last 5ish years, which I think merits calling out for folks who have known me for a long time. I’m eager to hear how this has landed with folks, especially as part of a birthday missive. However, so many things have changed in the last 5ish years that it’s hard to pinpoint a single origin. In this post, I explore some of those things and the impact I expect they’ve contributed to. Here they are in chronological order for when they started.

Relationship with Reed

Reed is a difficult person. He is also, hands down, the best partner I could think of for myself. He is extremely predictable, self aware, and invests heavily in a few choice things. Our lives together are one of those choice things, which means I can offload a lot of cognitive overhead about home, bicycle, self, etc care to him and it gets done better than I’d bother doing it myself. Reed can also be incredibly selfish (again, in a self-aware way). He has the most attuned sense of what “enough” is of anyone I’ve met. He sets goals for what he would like his life to look like, and when those goals are met, he enjoys the fruits of his labor.

Being around this as the main touchpoint of human interaction in my life (we are romantic partners, co-parents, and dear friends) means some of this has rubbed off on me. I have always had high standards, but now I am more comfortable doing something myself or with others than dragging along someone who is struggling in a non-self-aware way. For most of my youth, I had a strong savior complex, which I have worked on overcoming for years. Both my work with GWOB and my relationship with Reed have helped me truly wrap that up. Perhaps too far in the other direction, but all things are oscillations.

Working at Apple

While most of the individuals I worked with at Apple were truly lovely, the company itself has a culture of extreme arrogance. Success has gone to the proverbial head, and it seeps into everything. Even the hiring process is terrible because the recruiters know having Apple on your resúmé is life changing (or was, before this market, phew), and that people want to work there regardless of other factors. Every chance I had to be more collaborative, I tried to take, and I was (mostly politely) redirected to try to find other paths.

I remember trying to explain that an executive coming up with a problem statement that then a bunch of brilliant people came up with in-depth responses to individually, which then the exec picked “the best of”, and then program managers dolled out the work was not actually “collaborative” but a process diagram instead, and it fell on deaf ears. 5 years of that, and not being able to talk to other people about it, sure did a number on me.

Becoming a Parent

I gave birth alone via emergency c-section after a very scary night. Covid meant no guests unless you were in labor, and because I was two months early, they were trying to stop the labor and so wouldn’t admit me as such. After a month in the NICU, we brought Locke home only to discover that Reed had severe misophonia related to infant screaming, and so then I was on the hook for taking care of two creatures who couldn’t fend for themselves and were actually often at odds with each other’s needs. Our agreement that Reed was going to be the stay-at-home parent exacerbated this because it made asking for outside help at odds with our goals and plans. It was the worst 18 months of my life. And in part because Reed is already a difficult person, my care network saw this as a personal failing on his part rather than a disability, which led to even more long-term issues.

This also led to some extreme division of labor — Reed still wanted to help out, but it needed to be in discrete, scheduled chunks that he could prepare for. Which was good in some ways because it meant I got clear time off, instead of always being “on.” However, that shifted us away from the collaborative, flowing parenting style we now actively and intentionally implement.

While I’ve done deep therapy around all this and mostly moved past it, I still have a trauma response to some things, and repairing other relationships is still taking significant effort. Going through this also deepened my relationship with Reed. Now, when something is difficult, we know it’s not as difficult as this thing we did that one time.

Being on Testosterone

I love being on testosterone for many reasons, and have also already highlighted the ways it has shifted my experience of the world in ways I’m less of a fan of. I have a shorter fuse, less empathy on the surface, and less patience. I take up space more now than I used to, and focus less on making space for others. The first I don’t think is a bad thing — I deserve just as much space as anyone else, it’s that now I’m expecting to get it. And I haven’t figured out yet how to balance taking space for myself with my old habits of taking space for others as well. Whether that’s because of an actual biological reaction or “just” the validation, who knows.

Where I am now

Who knows how much any of these, or collection of these, led to my brain issues worked on last year. But I am now less warm and collaborative than I used to be. I miss it, it was aligned with how I’d like the world to be and for people to treat each other. I’ll keep working to be warmer again.

Again, I’d love your insights into how I’ve changed, and how that has impacted our relationship, for my birthday this year. And I have yet to talk about all this with my therapist, so who knows what will change about it as I continue to explore.

Oh yeah, I guess we also went through the collective trauma of Covid in that time, too. That matters as well.

Let them take the risks they can afford

The title is one of the few pieces of advice my mum gave me about child rearing. It came through pretty clearly in how she and my dad raised me — I’ve even got a tattoo about it, and how it’s not just about parenting but also my approach to security. I’m lucky that Reed and I are also well aligned on this front. Sometimes other parents are pretty aghast at how far away we let Locke get from us, how we let him do mildly dangerous things. Here’s our reasoning: the kid is going to have a bad time while learning, at some point (getting burned on something hot, getting separated from us, etc), so we may as well control as best we can the first time that happens. That’s different than how others approach it: using their control to prevent it happening, such that when it inevitably does happen, it’s when they’ve lost control, and then it can be truly bad.

Here are some examples of our approach.

The stairs he’s allowed to fall down

Our house is a split level, so while it’s two stories high, we have 4 sets of stairs. Some of them are quite steep. So Locke was going to fall down stairs at SOME point, and we wanted to decide which set of stairs that would happen on. Thankfully, we have two steps between two rooms in our house. Yes, it’s on hardwood, but it’s the shortest set we have. So when he was learning to crawl, we decided that was the set of stairs he was allowed to fall down. We did safety protocols around the other sets of stairs, but none around those. He fell down them. He cried. We comforted him. He is now incredibly confident around stairs.

How Locke got down stairs for most of his childhood, after falling down 2:

Getting lost

As Locke was learning to walk, we took him to the zoo a lot. There’s a lot going on there, and lots of space to explore. But it’s also pretty well contained, full of other parents, and there are protocols in place for lost kids. What a great place for him to get lost! The first time he wandered away on his own from Reed (I wasn’t there), Reed discretely followed him for awhile. Locke eventually realized he wasn’t near Reed anymore and didn’t know where he was. He had a whole Experience, which Reed let him have for a bit, and then went to him. There was a lot of validating feelings with “you couldn’t find me, and it was scary!” instead of focusing on Reed not being able to find Locke. Now Locke knows it’s on him to know where we are, and to stay as close as feels necessary.

Do we still keep tabs on him? Of course! But if he runs off for a bit, we have high confidence that he’ll return when he needs us.

Hot things are hot

No matter how many times you tell someone about how something might hurt them, usually folks have to experience it directly before really believing it (this is not just about kids). So while we tell Locke when something is hot or dangerous, we also still let him do things like pour hot water for his tea. Recently, he burned himself on the kettle while trying to handle it. Of course we comforted him about it and made sure it got the treatment the (very mild) burn needed, but we also didn’t fuss about it much more than that. He had learned a lesson by taking a risk he could afford.

Collaboratively building a service catalog

As our AppSec team matures, we’re defining our processes and expectations. One of the next things for us to try out is a Service Catalog, where we list what sorts of services we can offer to other teams. Having one is a tool to allow us to plan our work, get better at the work we’ve decided to focus on, and be better partners to engineering. But what should such a catalog look like?

Collecting potential offerings

  1. reviewed the last 10ish requests that came to our team through our various intake portals, classified the request types, where the work happened, and what the output looked like.
  2. put together a form for my reports to continue tracking incoming requests while I was out for a week (yay taking time away!)
  3. hosted a whiteboarding session to collect all the different services team members wanted to offer.

We then took that pile and voted for things in two ways — items that had a deep security impact, and items we thought we were set up for success for. We picked the top 6 and moved them onto the next phase.

Can we handle this?

Wanting to provide a service is one thing. Handling the incoming load is another thing entirely. Luckily, GoFundMe is a pretty transparent company, and I was able to get my hands on the full set of projects Engineering hopes to work on this year, along with what area of focus they’re in (Keep The Lights On, tech debt, new business, etc). For a back-of-the-napkin sketch of commitment load, for each of our offerings we sketched out

  1. How much work it would take us to get into a “refined” spot
  2. How much time we thought we’d spend per instance once in that refined spot
  3. How much coverage we wanted humans to be doing (combination of “most risky 10%” and “automation should handle 30% of this workload for us”)
  4. Which types of projects we thought the offering applied to

I did some spreadsheet magic to generate how much time per sprint we’d end up spending on each of the offerings. In this discussion, we realized one offering was something we wanted to improve our capacity around, but didn’t want to officially offer as it being needed would indicate we had failed to catch something earlier in the lifecycle. Ends up we can handle it, even if we’re wildly successful!

Fitting into the flow

Then it’s a matter of ideal time to offer our services for each of these projects. So we’re setting up automations to detect when a project moves from one phase of our Product Lifecycle to another, so we can proactively reach out.

I’ll also need to shop the catalog around to our partners to be sure we’re offering things that make sense to them and that they see the value in.

Being explicit

We’re now working on being clearer about what each of these offerings means, how to request each one, etc. So far, I think the following are the important bits of information:

  • What it is, and which part of the Product Lifecycle it aligns with
  • What an output looks like and where it lives
  • What to expect (from a human; from AI)
  • How to set yourself up for success
  • Specifics to add to our backlog

Metrics

From all this, we can

  • occasionally track how much time we’re spending on these items
  • measure hit rate of how many projects we covered
  • be intentional about what we’re automating
  • track coverage of security touchpoints across projects and add that to our overall risk assessment

Celebrations and Death

I’ve been dealing with a lot of death lately. And while it’s just a part of life, it sure does start to make one think after awhile. So I’m using my birthday as processing time, as I am wont to do. I’m test running my death infrastructure for my birthday this year, and requesting notes from folks.

If you can see this message, it’s because I would want you to be aware of when I die. THIS IS ONLY A TEST — I am fine, everything is good, I’m just an elder goth now and I like to plan everything, even death. 

This is an experiment with bureaucracy and documentation. As you know, I love LARPing Serious Business. I am doing a test run of the systems that would announce my death to the many beautiful communities I’ve had the honor of being a part of. If it was logistically difficult to get this message, when you’d want to get it, let’s improve that process — reach out. If it was emotionally hard for you to get this message, this event is probably not for you, and I’d love to see you in another context some other time soon.

On April 18th at 16:30 PT / 19:30 ET, I’m hosting a time to talk about preparing for death (not dying — they’re different. We’ll talk about ceasing to exist, not how you want to be treated while going through a however-long process of getting there). We’ll take about an hour to talk through digital estate planning (a passion of mine), and then we’ll also have some time to talk about any feelings folks might have had about thinking about death. We’ll be at this link at that time.

Selfishly this year, I’d also love notes about what we mean to each other. One of the things that’s come up time and again at the wakes I’ve been attending is wishing to have said some things before the option was no longer there. Let’s say those things to each other. I’m not looking to be shrouded or to do a mock service, I’m looking for open and honest views of who we are together. Roasting, power points, and poetry all lovingly accepted. Email to me, please, so I can label and revisit.

You do not have to do both, or either, if they’re not your cup of tea.

If you would prefer to learn about my death from an email instead of a social media post, please get me your email address and I’ll add you to the mailing list. That will be posted to before social media posts go up.

Looking forward to being inappropriately morbid with you.