AI Security
176 episodes
#6519: How Smuggled GPUs Move Through Real Companies
Freight forwarders, not buyers, wired over $176 million for restricted Nvidia chip servers, unraveling a major export diversion scheme.
#6518: Why Export Bans Cannot Stop Remote Compute
Data centre colocation vacancy in Johor, Malaysia, sits at just 0.7 percent as foreign AI developers rent access to controlled Nvidia hardware.
#6450: Securing MCP Endpoints and Webhooks Without Open Doors
Over half of all internet requests at one edge endpoint in a single day came from automated scanners probing for secrets.
#6449: Why PHP2Shell Was a Sniper Rifle, Not a Nuke
A decade-old PHP flaw affected 46 million servers, but attackers bypassed broad waves to cherry-pick narrow target builds.
#6320: Who Sets Identity Standards for AI Agents
Drafts from authors across AWS, OpenAI, and Ping Identity argue AI agents should be treated as software workloads, not people.
#6184: Anthropic's Unreleased Model Two, Explained
Anthropic trained a model better than what it sells — and never released it. What that gap actually tells us.
#6181: Shipping Private Android Apps to Your Family
Daniel wants to ship private Android apps to non-technical relatives. F-Droid repos, Basic Auth, and the Google verification cloud on the horizon.
#6179: Voice Cloning: 10 Seconds to Steal Your Voice
Ten seconds of audio is all it takes to clone a voice. Here's what the law actually protects — and what it doesn't.
#6123: OAuth or a Personal Access Token for Your MCP Server?
GitHub CLI login hands your agent one long-lived token with access to everything. Fine-grained PATs can't. Which should your MCP server use?
#6119: Two Keys and a Polite No: Labeling a Claude Code Approve Button
Daniel has two spare laptop keys and wants them to say yes and no. The electronics are easy — it's the labels that get hard.
#6115: Claude Cracked the NSA's 1997 Curve Seeds
A 25-year crypto mystery solved in under 30 minutes — by finding a bit that wasn't there.
#6095: How to Prove Your Photo Is Real
Deepfakes made faking easy. Now the harder problem: proving your real photos and video are real. A field guide.
#6036: GPT-6 Astra: A Million Tokens, No Fine-Tuning
A million-token window, ten built-in tools, a 272K pricing cliff — and no fine-tuning. What GPT-6 Astra actually offers builders.
#6006: Data Residency vs. Inference Residency: What the Law Actually Says
GDPR doesn't require local GPUs. Here's what actually drives geographically restricted AI inference — and the three layers everyone conflates.
#6005: What's Actually Behind a Government AI Chatbot
Singapore runs open-weight models on commercial cloud. The UK built its own chatbot, then shut it down for Copilot. What's really behind civil-serv...
#6002: Claude on AWS: Three Doors, One Rate Card
Same per-token price everywhere — so why buy Claude through AWS instead of Anthropic? The answer is commitments, compliance, and silicon.
#5973: MCP Security: Tool Poisoning and Agent Identity
MCP servers trust their own tool descriptions. That design choice creates a whole new class of attack — and a new observability problem.
#5972: AI Meeting Agents Are Becoming Stand-Ins
Bots now book follow-ups, update CRMs, and attend on your behalf. Here's what's real, what's speculative, and where the etiquette is heading.
#5956: Will ChatGPT Eat Your Grocery App?
MCP servers, ChatGPT apps, and a prediction that AI vendors will absorb your grocery list one micro-app at a time.
#5940: The Missing Middle: Content APIs and ISR for a 6,000-Episode Catalog
When your catalog is too big to rebuild on every change, what has to change? Turns out the missing middle might already exist.
#5910: Revit MCP in a VM: What Actually Works
Autodesk's official Revit MCP server is locked down and reliable-ish. The community ones execute arbitrary code on an open port. Neither runs unatt...
#5873: Abliteration: How $5 Undoes a Model's Guardrails
A rank-one weight edit costs under $5 and strips refusal behavior from open models. Then an automated tool beat human experts at it.
#5811: Can an Agent Actually Place Your Order?
Agentic checkout protocols are real — Shopify, Walmart, Target. But the DIY parts live on AliExpress, which supports none of them.
#5775: What "Leaked System Prompts" Actually Mean
Anthropic publishes Claude's system prompt — but not its accessory models. What does "leaking" a prompt actually mean?