MD: @scottgal@hachyderm.io Email: [email protected] LI: https://nitter.cf/t.co/R6V0bqDQEO I AM NOT PROF SCOTT GALLOWAY
It's in the trees! It's coming (also Sco…
Joined March 2007
- Tweets1.9K
- Following3.4K
- Followers3.1K
- Likes11.9K
Pinned Tweet
New website for the new venture stylobot stylobot.net/
A new type of bot detector. Mine is
SUPER quick - sub millisecond
Multi-Path - behavioural signature.
Rolling window approach - decisons made during between ^ across requests safely, quickly.
ZERO PII - NO PII at all (IP, user agent) saved to disk EVER
Early days but the prototype github.com/scottgal/mostlylu… is functional.
#botdetection #heuristic #business
ʎɐʍollɐפ ʇʇoɔS retweeted
Currently writing a blog about what I think the "vulnpocalypse" will actually look like (cringe term, I know). You can narrow almost every mass-exploitation event down to a single factor which dictates whether or not cybercriminals will engage in internet-wide mass-exploitation.
ʎɐʍollɐפ ʇʇoɔS retweeted
I see this conversation a lot:
- Someone: "I built X"
- Comments: "You didn't build it; Claude/Codex did"
Yeah, ofc. Agents writing the code is the norm from now on. We can move past this and accept that the two mean the same thing, so we can focus on the product.
ʎɐʍollɐפ ʇʇoɔS retweeted
Yikes. An Accenture contractor gave a Claude Code agent their own admin login so it could write and deploy code on a Pentagon network. It ran for 2 months and appears to have sent the creds and a network map to a site NIST had already flagged as high risk for prompt injection.
So perhaps this is a roundabout way to remind you that your agents should get their own scoped credentials, never yours?
Sources tell WIRED that an Accenture employee’s personal Claude agent ran on a DOD network for two months before it was identified and the vulnerability could be patched. buff.ly/nUjCkPs
ʎɐʍollɐפ ʇʇoɔS retweeted
the secret to becoming an expert is embarrassingly boring: build in public, write down what you learned and the process behind it, teach all that to someone, help them ship
repeat for a few years, and you're solid – at Weehawken, NJ
The notion that 'cybersecurity is dead because of AI' is no more sensible than 'don't lock your doors because lockpicks exist'.
The truth is NOW enormous amounts of software remain secure largely because nobody sufficiently capable has bothered attacking them.
It will take a while but levels of security will be *evolved* in an arms race with AI. It'll likely result in new classes of secure systems arhitectures but they WILL be secure.
Right now the issue is that human built software is ALWAYS buggy, AI is now finding those. But when all (*for some value of all beyond current levels) the bugs have been found by AI & patched the resulting software will be the most secure ever built (beyond human levels of security).
It'll just be painful getting there.
Was always what made me so ANGRY aboug Microsoft's 'Office AI' stuff, in the desktop apps it was DISCONNECTED from the editing experience.
Inspired by recent AI hacks, I am motivated to further develop Stylo.Bot. I strongly believe that an adaptive, deterministic edge proxy is the ideal solution for many of these vulnerabilities. I am currently writing an article and specifications detailing how my long-planned 'StyloWall' would function.
Essentially, it utilizes my LLMApi project (github.com/scottgal/LLMApi) to provide a honeypot for specific exploits. It can detect automated attacks through indicators like 404 errors and scanning patterns. The system can then deploy honeypot attempts to further characterize the attack, such as identifying payloads, endpoint scanning, and multiple ID bot forms.
Stay tuned...will take a ton of research and my free time is limited!
ʎɐʍollɐפ ʇʇoɔS retweeted
Something to think about…
Before AI, companies could save a lot of time not layering their systems like a lasagna and strewing mapping throughout and bloating it with all the boilerplate junk and ceremony
But they chose not to, even though it’s less maintainable
ʎɐʍollɐפ ʇʇoɔS retweeted
Amazon's leadership is very good at writing, but you still need to read between the lines.
What I read between these lines:
Engineers who are not "product engineers" (aka eng + PM interest) and don't like to be customer-facing will not have a future inside of Amazon
Full: aboutamazon.com/news/company…
Noticed some company linked to this EF Migrations article from their JIRA (via web analytics) and it annioyed me that it had errors so...UPDATED mostlylucid.net/blog/efmigra…
This is JUST me covering all the ways you can do migrations with EF and condenses all the best practices into one short piece.
ʎɐʍollɐפ ʇʇoɔS retweeted
Meghan was under Kensington Palace Umbrella until March’19. He handed over Meghan’s private messages to help dailymail side of case (legally he wasn’t required) later William awarded him with an honor. So people want to believe William’s hands are clean? #IstandwithMeghan
ʎɐʍollɐפ ʇʇoɔS retweeted
So let me get this straight
Every article about this is citing Musk's tweet over the weekend as the primary source, a man known for market manipulation
Neocloud stocks took a dive over it
And today, SpaceX announces a $40bn financing deal with Apollo apollo.com/insights-news/pre…
Musk's grim outlook hits neoclouds as debt concerns mount reut.rs/4ib0vEo
ʎɐʍollɐפ ʇʇoɔS retweeted
You’ve said not one word about the nonstop anti-Muslim attacks on El-Sayed from Trump, Rogers, and the rest of the GOP, but you want El-Sayed to condemn and disavow an ad he didn’t make (and that doesn’t say anything about Jews or Judaism.)
You’re the one who is full of shit.
If @AbdulElSayed truly means what he says about treating the Jewish community as he would treat his own children, then he would immediately condemn this dangerous ad as outrageously antisemitic and demand that it be taken down.
If not, then he’s full of shit.
Typical UK energy bills will rise >25% in a couple of months. £1,999–£2,185 would need a LOT of beans and pickles...
Cheaper gherkins and beans: Burnham unveils 'everyday' savings that will put £1.75 a month back in your pocket lbc.co.uk/article/burnham-bu…
ʎɐʍollɐפ ʇʇoɔS retweeted
We really moved on too quickly from Donald Trump Jr. marrying Jeffrey Epstein’s personal bankers’ daughter, and a Russian oligarch paid for the whole thing in a blatant bribery scheme.
ʎɐʍollɐפ ʇʇoɔS retweeted
Soooo Musk literally Aided and Abetted a hostile power against US satellites? I think there's a word for that....
Another note for SpaceX attorneys and PR: There was no need to issue an alert at all. Your own internal data showed a safe 2km pass. But you issued a 400m collision alert anyway. Why? Because the alert itself is the weapon. Issuing it triggered FCC Cond 16, legally freezing ICEYE so it couldn't dodge. STARLINK-35856 didn't use its auto-evasion. It just parked there and kept the false alarm blaring while Russia sprinted in. It wasn't an accident.
ʎɐʍollɐפ ʇʇoɔS retweeted
JD Vance's in-laws' names are Radhakrishna Chilukuri and Lakshmi Chilukuri. I wonder if he tells them this stuff, too. To their faces. Or does he just save it for white MAGA rallies?
Truly a racist pathetic embarrassment of a son-in-law to his brown Indian immigrant in-laws.
