RC RANDOM CHAOS
RC RANDOM CHAOS

Tech · Culture · Fiction

Git never deleted your secrets. Article

Git never deleted your secrets.

How ZCode's AI indexer uploads your entire git history, including deleted secrets, to the cloud, and why DLP and EDR never catch the egress.

The attacker skips your login and steals the cookie
Article passkeys

The attacker skips your login and steals the cookie

Passkeys defeat credential phishing but not session hijacking. How token replay, passkey enrollment, and weak recovery bypass phishing-resistant MFA.

In January 2024, OpenAI admitted it can't train without copyright
Article AI copyright

In January 2024, OpenAI admitted it can't train without copyright

OpenAI told the UK Parliament it can't build models without copyrighted work. Here's what that admission means for the fair use cases now in court.

Microsoft called it theft; the crawler maps your attack surface
Article AI scraping

Microsoft called it theft; the crawler maps your attack surface

AI crawlers copied your public data into training sets you can't reach. The real security risk is data you can never delete or recall.

Microsoft's AI CEO called the web freeware
Article AI safety

Microsoft's AI CEO called the web freeware

Microsoft and OpenAI executives described how LLMs are built and tuned. What that admission actually means for AI safety and security teams.

OpenJev claims a mechanism it never describes
Article threat analysis

OpenJev claims a mechanism it never describes

OpenJev is a name with a claimed mechanism and a claimed difference from social engineering, but no observable behavior confirms any of it.

Parameter count is the wrong number to watch
Article LLM deployment

Parameter count is the wrong number to watch

Bonsai 2 27B's 9x smaller footprint is real, but near-lossless is an average - how to gate compressed LLMs on your own eval set before production.

The Wire — latest

All →

Stay in the loop

New writing delivered when it's ready. No schedule, no spam.