Posts
Getting Roasted by my LLM Style Editor
My own style-editing agent delivered unexpectedly harsh feedback. It stung, and it was exactly what I needed.
Stop Running `npm install`
The sha1-hulud attack compromised 830 packages and leaked 11,000 secrets. MFA stops account takeovers. `npm ci` stops propagation.
Slop In A Bucket
LLM-generated code, linters, and the security problems we can and can't solve.
Sloppy Syntax
A personal collection of totally radioactive syntax often generated by LLMs.
Security is PvPvE
Security work isn't just about outsmarting attackers. You're also fighting the computers themselves.
Bernoulli Coding
The middle ground in software development is dead. I now write code in just two modes: fortress-grade security or complete disposable chaos.
Slopsquatting detection added to Scary Strings
Preventing AIs from installing sketchy packages
Browser Use is Solving the Wrong Problem
The browser has been the everything app for a long time, and much hype surrounds the idea of automating browser use with LLMs. But in the age of AI agents, ...