Similar Posts
The Immigration Bug That Exposed My Passport (+ 300,000 Others)
It’s the night before my flight to Nigeria. I sit in bed and complete the final documentation needed to enter the country. My email confirmation includes a link for my approved Landing Card: https://lecard.immigration.gov.ng/landing-preview/305122 When I see my data online, I’m instinctively curious about whether it’s secure. I notice from the URL of my Landing…
How to Bypass CloudFront/AWS WAF and Pop Blind XSS
I want to share some tips on one of my favorite vulnerability classes: blind cross-site scripting. One of the reasons I love blind XSS is that when a payload pops, it’s almost always a critical vulnerability. When I first learned about XSS Hunter (an easy-to-use online tool that facilitates the blind XSS setup), I could…
Is AI a Bad Genie? Two Cybersecurity Risks Posed by Powerful LLMs
Alarm about AI’s cybersecurity capabilities is everywhere, and it isn’t unfounded: the Hugging Face incident and Anthropic’s Whistleblower demonstrate the problem is real. But exactly how the danger might materialize is rarely spelled out. In this article, I articulate two specific threats that must be addressed as AI progresses. First, an analogy. Suppose you have…
AI and the Future of Mathematics Part 1: How Computers Changed Math Forever
An Empirical Science Mathematics is at an inflection point. LLMs (Large Language Models) improve with each release, and it’s unclear how the field of math will evolve with them. My day job sits at the forefront of AI and cybersecurity, but I’m a lifelong lover of math. In fact, I’m a pure math PhD dropout,…
