Incident Response on Be The Adversary

ghosttype - finding secrets in AI conversation history

Wed, 13 May 2026 10:00:00 +0000

I found it by accident.

I was looking for an old conversation with Claude. Searching through history, trying to recover context I had thrown away too quickly. Eventually I found it. But while I was looking, something else clicked.

All of these conversations are saved locally.

Every session. Every prompt. Every response. Sitting on disk, at predictable paths, no encryption, no access controls, no logging, no detection if something reads them.

CodeBlue 2024 Adventure

Wed, 20 Nov 2024 00:00:00 +0000

The CodeBlue Adventure: Japan, Snowflakes, and Cloudy Threats#

Last week, I checked off a major milestone in my career: speaking at the CodeBlue Conference in Tokyo, Japan. For years, CodeBlue has been on my bucket list-that shining, slightly intimidating event where cybersecurity pros gather to share their wisdom. And let me tell you, it was as amazing as I’d imagined, with the added bonus of being my very first trip to Japan!

Log4j - where there is a fire, bring a hose

Thu, 16 Dec 2021 00:00:00 +0000

When there is a fire, you bring a hose of water, not a can of gasoline.

When log4j started, one of the main challenges for organization was to identify which server is vulnerable.

I’m happy to be a part of the team that decide to help with a solution for that problem.

This solution is released as open-source (same like log4j) to help others for the greater good.