Similar Posts
AI and the Future of Mathematics Part 1: How Computers Changed Math Forever
An Empirical Science Mathematics is at an inflection point. LLMs (Large Language Models) improve with each release, and it’s unclear how the field of math will evolve with them. My day job sits at the forefront of AI and cybersecurity, but I’m a lifelong lover of math. In fact, I’m a pure math PhD dropout,…
Exacerbating Cross-Site Scripting: The Iframe Sandwich
I’m starting this post with adoration for the Critical Thinking Podcast. The podcast launched around the time I began hacking full-time, and I consider it my companion. It is required listening for bug bounty hunters, but I recommend it to anyone involved in cyber security—especially if you care about the offensive perspective (and you should)….
Is AI a Bad Genie? Two Cybersecurity Risks Posed by Powerful LLMs
Alarm about AI’s cybersecurity capabilities is everywhere, and it isn’t unfounded: the Hugging Face incident and Anthropic’s Whistleblower demonstrate the problem is real. But exactly how the danger might materialize is rarely spelled out. In this article, I articulate two specific threats that must be addressed as AI progresses. First, an analogy. Suppose you have…
Introduction to Hacking LLMs: Jailbreaks & System Prompt Extraction
A recent branch of penetration testing has emerged around attacking Large Language Models (LLMs). The field is still young, which invites two notable consequences. To know how to hack LLMs, it’s important to understand what they are. At their over-simplified core, Large Language Models are next-word predictors (more accurately, next-token predictors) that output a “best”…
Hacking the Healthcare Industry: My First Critical Vulnerability
The story begins with HackerOne, one of the leading bug bounty platforms. For those that don’t know, many companies accept vulnerabilities as part of public vulnerability disclosure programs, or they invite established hackers to private programs. The good ones even offer rewards. This is a big change from hacking twenty years ago, when a company…
How Machines Actually Work: 10 Takeaways from Hardwear.io 2025
A few weeks ago, I had the pleasure of attending Hardwear.io (yes, it’s really spelled like that), a conference all about hardware security. I came in with very little hardware experience, which put me in a great position to learn from the ground up. Below are 10 takeaways to organize my thoughts and provide the…