Engineer's Heart, No Engineer's Training
The model is becoming a commodity and code is cheap. The scarce thing is knowing what to judge and how, and that is exactly the part we are automating away.
Be The Adversary
Offense informs defense.
Recent posts
Two DGX Sparks, 33 Local Models, One Question: Can Local AI Actually Red Team?
TL;DR: I built a two-node NVIDIA DGX Spark cluster and benchmarked 33 local, open-weight models for real red-team work: BloodHound …
Adversarial Mindset: A Role, Not a Personality
The two previous posts in this series made a case for the adversarial mindset and then got honest about what it costs. This one is about …
Recent talks
From Snowflake to Snowstorm: Navigating Breaches and Detections
The Snowflake talk taken to x33fcon, a year after CODE BLUE. Same campaign, one that reached more than 165 companies through misconfiguration rather than any …
Beyond Simulations: Advancing Detection Validation in Cybersecurity
A room arguing about whether the way we test detections resembles anything an attacker actually does, and what to do instead without burning a quarter of the …