
Eat Cloud, drink IoT, breathe AI, sleep Cybersecurity with @cloudsa.
The Cloud
Joined September 2009
- Tweets1.2K
- Following595
- Followers310
- Likes547
Hugging Face AI Attack Exposed a Security Crisis. Frontier Ready Offers a Way Forward. cybrsecmedia.com/hugging-fac…
John Yeoh retweeted
We'll be spending a lot more time trying to understand the outputs of language models. A few thoughts, tips & tricks:
Writing. Something I've had success with: Ask your LLM to explain something in ASD-STE100, it's a controlled language specification originally developed for aerospace maintenance documentation. LLMs well-versed in this language and it comes with heavy constraints on clean writing style that I often find a lot more readable. Sometimes I've tried to soften it a bit e.g. ask for "80% of the way to ASD-STE100" because the spec is quite stringent. But even better:
Diagrams / images. Instead of writing, ask your LLM to create a diagram. These can be a lot easier to process, parse, and understand. But even better:
Web pages. Ask for output "in HTML" to get a beautiful, interactive webpage. LLMs are getting really good at frontend and can create beautiful experiences, animations, etc. But even better:
Explainer videos. The output format I am most bullish on is fully custom / bespoke explainer videos generated on any arbitrary topic. Experiment with things like "Create a 3b1b style video explainer on X. Use my ElevenLabs API key for audio narration". (you'd need an API key for the latter or you can ask your LLM to find you decent free alternatives that use your local compute). This is actually starting to work!
In summary:
- As LLMs get better, they will do more and more of the legwork autonomously, and a lot more of our work will rise up the abstractions into oversight and understanding.
- Luckily, LLMs can help here too because as intelligence and code are increasingly abundant, you can ask for large, custom, discardable software artifacts (e.g. web apps, video explainers) that would have never made sense to create before. Push the boundaries here and you'll be surprised.
John Yeoh retweeted
[un]prompted, where the AI security community converges, is happening again at the end of October. Have you submitted your CFP yet? You have two weeks left! :)
Come and show us what you prompt!
unpromptedcon.org/
Back for a second time in 2026! Because everything moves that fast. Take the gloves off and show what AI can do.
We're happy to announce [un]prompted is back, October 27th to 29th, in San Francisco. Registration and CFP are now open.
Waiting a whole year just made no sense to us considering the rate of change, and the community forming around the event.
unpromptedcon.org/
A thread
John Yeoh retweeted
The person who built Claude Code just showed exactly how to use it.
30 minutes. Free. Straight from Boris Cherny himself.
Bookmark this before you forget. Most people using Claude daily are missing 40+ features hiding in plain sight.
This single session is worth more than any $1000 course.
John Yeoh retweeted
INSTEAD OF WATCHING AN HOUR OF NETFLIX.
This 60-minute MIT lecture will teach you more about building companies than every startup book you've read combined.
Bookmark it and give it an hour, no matter what.
John Yeoh retweeted
INSTEAD OF WATCHING NETFLIX TONIGHT.
Spend 2 hour with this.
Claude AI FULL COURSE that teaches you how to BUILD and AUTOMATE anything.
Watch it and Bookmark it now.
John Yeoh retweeted
Unprompted.au website is live and initial tickets are available: unprompted.au/
Seeing a lot of this going on not just with Twilio. Not happy with the phishing texts! databreachtoday.com/twilio-c…
This is super handy! The alignment with the @cloudsa CCM and EA will add even more. @UL_Solutions help here.
We just added a new mapping to iotsecuritymapping.com/ - the CSA @cloudsa IoT security controls matrix. This should be useful for companies and governments looking to see how the controls map to @ETSI_STANDARDS EN 303 645. #iot #security #standards #defragmentation @scriptingxss
Don’t miss @KirklandAndy connecting with @Jamesmattis18. It’s a live one-time show that’s not recorded and won’t be replayed.
CSA CISO Summit at RSAC 2021 starts in 30-mins! Set your reminders for your sessions or register now!
ow.ly/Pgev50EKkXT
Don’t rely on a chihuahua to help make the bed #lazydog #stellathedog #chihuahuasofinstagram @ My Alki Beach House instagram.com/p/COiiwt4tBzD/… – at Seattle, WA
I'm discussing “NextCISO OG Radio - Shakedown: Don’t Be Held Hostage” with Jenai Marinkovic, Melissa Elza, @KrisRides, and Rob Pope. Thursday, Mar 4 at 7:00 PM PST on @joinclubhouse. Join us! joinclubhouse.com/event/ME0Y…
Tips for boosting the “Sec” part of DevSecOps helpnetsecurity.com/2021/02/… I like the way @myrcurial keep's it simple and effective.
With this guy at @RSAConference
I’m so excited to be speaking again at #rsaconference this year. Especially as I’ll be joined by two of my BFF’s and industry superhero’s Jenai Marinkovic and @YoTheShow.
Working on our first draft now talking about creating equitable opportunities for a…lnkd.in/gWXR2jJ
And these leaders who were so critical in making it happen. Many thanks to @Infotechwarrior @sean_cordero @LPHarry Sean Estrada, Lefteris Skoutaris, and the dozens of others they led.
Excellent work by the team @cloudsa on the release of the Cloud Controls Matrix (CCM v4) adding "more Than 60 New Cloud Security Controls" cloudsecurityalliance.org/pr… #CloudComputing #infosec #cybersecurity H/T @DanieleCatteddu @YoTheShow @JRSantos_CCO
John Yeoh retweeted
Excellent work by the team @cloudsa on the release of the Cloud Controls Matrix (CCM v4) adding "more Than 60 New Cloud Security Controls" cloudsecurityalliance.org/pr… #CloudComputing #infosec #cybersecurity H/T @DanieleCatteddu @YoTheShow @JRSantos_CCO
IoT Cybersecurity Improvement Act was signed into US law yesterday! 👏 We're helping put requirements in place for this. @nist @OMBPress @cloudsa @UL_Standards #iotsecurity cloudsecurityalliance.org/ar…

















