Teri Radichel #cybersecurity #ai #pentesting

How I Use AI for Penetration Testing. Presentation at the AWS Security Community Day at the Computer History Museum on YouTube youtu.be/nWntvFRwiPw

Great article covering cost management and other AI topics when using AI models on AWS dev.to/aws-builders/how-to-m…

Anthropic models have been so bad all day. What is going on. They are not completely nerfed like before but they just make the dumbest decisions and write terrible error messages that make no sense and are breaking things. It’s like nothing is getting fixed and I’m going in circles all day. 😖

🙄 Politicians biting the hand that feeds again. Foreign companies are pulling out of US companies due to no longer trusting the stability of our government per groups I am in with technologists from all over the world. People who have no clue how AI actually works, its potential, and the problems that can be solved in ways that put money back into people’s pockets instead of raising their power bills or using all their water are making sweeping statements about things they don’t even understand. And that is hurting everyone in the US. We are killing ourselves from the inside with the help of foreign social media influence. Good job. 👍

I wonder how many bug bounty hunters are getting duplicates because they don’t properly secure their own systems or handle credentials with care.

I had to write this down before I forgot all my learnings. I’ve been able to produce some pretty extensive systems with AI. Right now I’m in the brute vibing mode again because it struggling to correct code related to an expired RAM invitation. But I made some UI changes pretty quickly to make my diagrams a bit prettier. It’s the last mile trying to get a few resources to a deployed and fine state and deal with some edge cases in the data where it’s currently getting hung up. But for the most part this is working well and has deployed 1100 resources. An entire AWS Organization with a drift tracker and various diagrams and features to deploy resources and analyze future deployments in advance. This is not a single, one purpose program. It is a complex system full of integrations and dependencies, parallel processing, and state tracking - similar to things you would find in a financial system. Just a few more resources to go to get back to done-ish.

Getting AI to GSD You’re using AI to vibe your code but is it actually getting useful things done? teriradichel.substack.com/p/…

I ran out of weekly session limit for two Team accounts using Claude Code. Ok so let’s use my $220 API credits. Yes I can do programmatic things but I just want to finish something. So last time this happened I just chose the API option and logged in and used my API credits. They were gone in like 2 hours. Tonight I cannot even log in with the API key using Claude Code the way I did last time. All this different login mechanisms are a bit confusing. I don’t particularly want to use an insecure long term API key. I don’t know maybe I’ll figure out how to use them later. I suppose I could read the documentation. 😁

When I’m not even posting because I’m busy and I lose like 100 followers that tells me @x must be cleaning house! Good 😁

Why DKIM key rotation alone doesn't stop replay attacks builder.aws.com/content/3LZf…

The AWS Builder Center now has a phone app which makes it a lot easier to post and read technical articles. Information exists for all experience levels and the team listens to your feedback. I know this because I asked for this app and they delivered! 🧡

Having problems with Anthropic model performance again. It’s not unusable. It’s not great. Something changed again.

Nice. AWS Service Reference Information now supports global condition keys, service names, and data plane classification aws.amazon.com/about-aws/wha…

Spot on. Are you using AI effectively? That’s what my blog posts are all about. martinfowler.com/fragments/2…

Vibing 🤖 and Analyzing AWS Network Configuration Changes Pre-Deployment Adding skipped resources to my organization configuration so I can review and analyze changes prior to deployment I added resources to my organization without deploying them and looked at the potential configuration and cost of adding AWS Network Firewall, DNS firewall, transit gateway, NAT, and VPC endpoints based on my existing organization configuration - meaning all my existing network resources and service usage. It adds the necessary resources to my configuration and then I asked for a table of resource and cost. 💰 teriradichel.substack.com/p/…