See you Saturday at #BSidesJax

Truth!

An AI consequence, completely obvious in hindsight. People slopufacturing evidence not to taint the environment, but to help and boost their social currency. When “clean up this photo” puts a new face on a perpetrator, alternate realities are created. www.theverge.com/news/776793/...

Sorry, but ideas aren’t all you need, and we aren’t on the cusp of the first billion-dollar solopreneur. In this post, I look at the architects of devaluation and the architecture of slop that’s fueling misconceptions about creativity and meaning. perilous.tech/2025/09/11/t...

I just got myself pumped up for the day! 😆 Occasionally this song pops into my head and I need to listen to the whole thing start to finish. www.youtube.com/watch?v=Fow7...

To all of the people pushing hard to coin the term “vibe security,” the joke is on you. Security has always been about vibes. 😆

I see they are remaking The Running Man, which appears to follow the book more closely. Gonna go out on a limb and say there’s a 100% chance that they don’t keep the ending 😆

First time I’ve designed an enamel pin. Terrible picture, but you get the idea. See you at Black Hat USA!

Getting ready to do our first dry run of our #BlackHatUSA talk, Hack To The Future! www.youtube.com/watch?v=wBl2...

It's going to be busy at both the #AISummit and #BlackHatUSA. It would be great to catch up with everyone. In addition to the briefings, I'm also hosting the AI Track Meetup and participating in the Review Board meet and greet. Come by and say hi. See you next week!

Thinking of prompts less as rigid, specific instructions and more as mere suggestions helps better understand what could go wrong and how to design systems that are more resilient to failure and attack. In essence, it's more prodding than programming.

I read this book back in 2020, and it’s only become more relevant. So many people make simple data mistakes and draw the wrong conclusions based on issues covered in this book.

"The results surprised us: Developers thought they were 20% faster with AI tools, but they were actually 19% slower when they had access to AI than when they didn't." metr.org/Early_2025_A...

The Black Hat USA schedule is live. Looking forward to seeing everyone soon. blackhat.com/us-25/briefi...

Since it’s easier to prolong the body than the mind, what if the way people are stored in the future isn’t cryonics, but memory care facilities? What if technology makes neurodegenerative conditions worse? I explore this and more in my new article. perilous.tech/2025/06/20/t...

Flooding the zone with truth is not an effective defense against flooding the zone with shit. It’s like trying to flood the zone with broccoli at an all-you-can-eat ice cream buffet, where the walls, tables, and chairs are also ice cream.

I present to you the power and possibility of using AI for entertainment. All it takes is an idea. Trust me, it's going to get a lot worse from here on out. Enjoy 😆 www.youtube.com/watch?v=lTcU...

It's strange to consider LLMs being so awesome that we need to share them with the cosmos as if they are something that advanced alien tech bros need to check out.

We need to stop huffing marketing hype as though it's insight. All it takes is one simple question: if this is true, then where is GPT-5? Claims without proof and vibes above all, we've entered The Shitularity.

There are now countless examples of problems caused by information that are made worse by more information. Access to so much information hasn’t made us superhuman. It’s made us astonishingly stupid. futurism.com/tsa-costco-c...

What happens when errors and hallucinations become facts, facts that may be impossible to dispute or lurk in the background unseen and uncorrected? Especially when new, more capable AI systems learn from these new "facts." perilous.tech/2025/06/05/a...

“Engineers in Noida and Bangalore manually coded client projects while being instructed to mimic AI-generated responses.” It’s not only deception, it’s dehumanization, which is the inevitable result of turning humans into machines. www.techspot.com/news/108173-...

The reframing of AI hallucinations as "formatting issues" is not a move I saw coming. Classic example of reframing an issue to reduce its perceived importance. futurism.com/ai-slop-scan...

“The hype has led to a new form of software development that appears to be more like casting a spell than developing software.” This is long before the term Vibe Coding was coined. I wrote this article back in 2023, and it still holds up. perilous.tech/2023/07/31/t...

Of course it was, because that's just what we do now. The fact that this has become normalized should be terrifying to everyone.

I’m convinced that YouTube shorts are basically cognitive bath salts, a fast track to brain rot. Their popularity speaks to a direction in our culture and our acceptance of the slopification of everything.

Gotta love Slack’s UI that keeps presenting this to me and no matter how many times I click the “Not now” it stays on the screen. Seriously, I don’t need a summary of “Sounds good” Hounding users to use AI features they don’t want or need is the new normal.

Join @tmlxs.bsky.social and me at #BlackHatUSA this year for Hack to the Future. This isn't a prompt injection talk. This is about the hidden dangers of deploying these tools in your environments and the potentially devastating vulnerabilities that can result. www.blackhat.com/us-25/briefi...

Trying to get your case dismissed by making a claim that your bot/product has First Amendment rights is an odd flex, and the way they had to word it to attempt to make legal sense blames the victim. Thankfully, the case wasn’t dismissed. scholarblogs.emory.edu/proflawrence...

I'll be speaking at the AI Summit on August 5th. Looking forward to a great conversation.

Next time someone asks me if I know what hustling looks like, I'm gonna show them this. If you can play Denny's, you can play anywhere 😆

The left should be making Russ Vought own this 24/7 in very simple language: Vought is making it easier for scammers to target you and your grandma.

The next battleground is in sight, and things are going to move fast. Half-baked tech pitched as transformational will be quickly adopted and thrown in front of children without any validation, but the demos will be amazing!

Move fast and break things is all well and good until the thing being broken is your child. The administration signed an executive order mandating AI in K-12 education. The impact could be irreparable damage if not done right. perilous.tech/2025/05/16/o...

Nonsense. The real AI risk isn't superintelligence, it's superincompetence. A sentient super AI deciding to wipe out humans because they are pesky is microscopic compared to some idiot hooking an LLM up to a safety-critical system because their boss tells them to use AI for everything.

It’s a dystopian ink kind of day.

It's surreal to see many of the things I've been warning about over the past couple of years, starting to come to fruition, where ever-present surveillance devices are pitched as your "friends" and university education is about nothing more than vibes.

Dystopia is now 😎 futurism.com/ai-dead-brot...

“Unexpected RCE” has to be one of the silliest names for a vulnerability I’ve heard in quite some time.

Everybody thinks AI will replace everyone else's jobs except their own. We continue to make the mistake of observing the nuance in our own jobs and assuming none in others.

AI-powered developer productivity tools are not trustworthy collaboration partners. They can leak your secrets, lie to you, make stuff up, and be convinced to take actions that aren’t in your best interest. Consider them adversarial and utilize additional security controls.

I wrote some thoughts on adding sanity on the pace of AI advancements. The conversation shouldn’t be monopolized by people selling us stuff and influencers huffing vibes. perilous.tech/2025/04/25/s...

A simple reminder of why you should never use a browser provided by an AI company for real web browsing. techcrunch.com/2025/04/24/p...

It’s surreal to have initiatives to implement memory safe languages because remote code execution vulnerabilities are so bad and yet push AI tools that blindly execute everything as a matter of basic operation.

Improperly garnishing your agents will get you owned. @tmlxs.bsky.social from the Kudelski Security Research team explains how we got RCE on browser-use/web-ui AI Agent Instances and what you can do about it. research.kudelskisecurity.com/2025/04/23/g...

We are bombarded daily with over-the-top predictions and what equates to AI performance art from leaders and wannabe influencers. This document is a grounded look at the future of AI, with a vision that is a lot more likely than ASI in 2027. knightcolumbia.org/content/ai-a...

The great thing about generative AI is now when you troubleshoot someone’s wonky, failing tool off of GitHub, it not only costs you time but money too. 😎

Welcome to the vibe era, where having knowledge and knowing how to do something is secondary to the feeling you have that you can do anything.

Okay, who did this 🤣 www.cybersecurityhalloffame.org

Ah, the last day rush to respond to the CFP.