notes aren’t dated. they aren’t necessarily finished either.
some are arguments, some are observations, some are things i wanted to write down before i forgot them. they may change without notice.
a broken access-control check does not become secure because somebody senior says the architecture is sound. institutions are much worse at this than computers are.
why hackers are disproportionately boypups, furries, catgirls and other strange internet creatures, including me; and what pseudonymity, hacker culture, sexual subcultures and breaking technological rules have to do with breaking social ones.
we spent decades teaching humans to break computers. now we’re teaching computers to autonomously reason about, attack and compromise other computers.
you can get the certifications, learn the methodology and have a completely successful security career. the level past that seems to require caring when nobody is paying you to.
access to answers is rapidly approaching zero marginal cost. knowing which questions are worth asking isn’t.
the most useless possible machine intelligence might be one optimized to make its user feel correct.