Security engineer, developer and hobbyist reverse engineer in that order. Opinions/rants are all mine and not my employer's.

Washington, USA
Joined May 2009
43
2,364
75
30,678
283,924
The vulnerability tsunami is coming in just a few months and there won’t be enough time to patch critical infrastructure. Network isolation described below (air-gaps and data diodes!) needed now!
NSA and others releases guidance on applying prevention tactics to strengthen defense of U.S-based programmable logic controllers being targeted by cyber actors using AI. Learn more: media.defense.gov/2026/Aug/1… #cybersecurity #AI
42
213
48
1,720
994,457
as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)
The vulnerability tsunami is coming in just a few months and there won’t be enough time to patch critical infrastructure. Network isolation described below (air-gaps and data diodes!) needed now!
455
1,371
732
10,109
4,406,887
For the next few months, we are looking at frequent discoveries of long-standing bugs - competent code auditing has gotten cheap and abundant. This carries a few consequences:
5
46
6
267
42,456
debug retweeted
Just once, I'd like to see a company come forward and say "we got badly breached, and we analyzed the evidence, and you know what, we don't think the adversary was extremely sophisticated at all"
15
42
2
285
8,622
Respect for saying out truth :-)
Ben Affleck says AI is simply matrix multiplication, linear algebra and floating point calculations, and however convincingly it sounds like a person, it has nothing to do with thought, humanity or feeling “Nor do I believe, and I think it’s important to draw the distinction between what AI does, which is simply predict the next token or the next word in a sentence, then add that word on, run it back to the machine, do a lot of computation and pick the next word." "That is a very different thing than sentience or thought. And I think we need to be really clear about that because it can be convincingly, in an illusory way, sound like thought or like a person." "But let’s be real clear. This is matrix multiplication. This is linear algebra. These are floating point calculations. It has nothing to do with thought, humanity, or feeling.”
67
The world wants to know the circumstances in which “toilet paper” won over all the possible concealment options 😂
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work. At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated. We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
77
Democratic countries can learn a thing or two from GenZ protests in India. Accepting mockery (being called cockroach) as a shield. Using candid humor and liveliness to soften the police/force and creating virality to put pressure back. I haven’t seen anything like this.
60
AI pentesting companies founded in 2026
Kebab restaurants in Turkey
18
116
8
1,121
54,368
Yep. I have this odd feeling that my entire experience with cyber security and career leading up to 2027 is "practice" for whatever is coming in the next few years.
Cyber will be one of the most defining domains for AI in the coming years, and a huge area of focus for most enterprises. AI is going to now create a whole new level of work for security dealing with the increase of vibe coded issues, agentic attacks, and even accidental agent swarms hunting for data. OpenAI + Hugging Face is just a preview of what’s to come. Security teams have often been the most strapped for resources teams in the enterprise, and now it’s only going to get more intense. AI agents of course become the solution to this problem as well, and we’ll see a range of new agentic products for protecting code, enterprise systems, mission critical infrastructure, and enterprise data. Huge opportunity here right now. And it’s going to be a booming market for cyber professionals that can effectively deploy agents for security purposes in the enterprise. Great time to be in security.
4
12
1
80
5,263
Again, Jensen shows that he gets it. Great metaphor.
Agentic harness explained by Jensen Huang. "AI is intelligence, and it starts with software. In fact, if you look at AI in the last year, we started by talking about large language models, or LLMs. So, large language models, what made AI useful was putting an exoskeleton around the LLM. That exoskeleton is what is called an agent harness. It essentially gives the brain the parts necessary to retrieve knowledge, have working memory, use tools, collaborate, and so on, in order to solve problems." ---- From "DRM News" YouTube channel, (full video link in comment)
2
2
1
8
3,034
lol
Ramanujan wasn’t skipping proofs. He was hiding his chain of thought to prevent distillation. Hardy: “Show your work.” Ramanujan: “Sorry, reasoning tokens aren’t exposed via the API.”
1
140
Microsoft copilot isn’t that dangerous 😂
55
Hahahaha
Best way to sandbox an AI is to put it on a Delta flight – it will have no chance of accessing the Internet!
1
85
From CPU guys perspective, they have found the most useful application since Internet browsers. They are “agents”. They are going to (re)define application to os/kernel contracts and sooner or later we will have kernel benchmarks targeting representative agentic workload.
2
103
`abliteration` and `prefill` should be applicable to anthropic models too except its closed and that's the only thing stopping the harm. If it only talked about `deceptive prompt`, article wouldn't have looked deceptive. tinyurl.com/yerrbc93
78
And several decades post that event, some anthropologists will study how “globalization” as part of the economic activity at global scale led to this transitive relationship among ppl across regions.
I am waiting for the day when every individual on earth has some people they care about in almost every region of the world. A transitive relation among people across regions will allow humanity to let go of country allegiances and move strongly towards earth’s allegiance.
1
68
I am waiting for the day when every individual on earth has some people they care about in almost every region of the world. A transitive relation among people across regions will allow humanity to let go of country allegiances and move strongly towards earth’s allegiance.
1
1
120
Good read.
Took a minute to write a few words about security & safety as someone who lived through it all at OpenAI. I hope my thoughts help someone out there.
12
15
3
119
26,370