You can make a real difference.

Is your data center scarier than you AI token bill? You may need the help of our podcast sponsor, Cyber Exorcism as a Service.

https://www.youtube.com/watch?v=6x3LXBw48hg

AI Exposes Sloppy Security

cc: @nprofile1q...

AI: Not Magic, Just Efficient

It’s a great day to not be in charge of vulnerability management.

This is non-sensical. It’s PRIVATE property. They own it once they buy it. It’s worth it to them to do this to their private property.

If I buy something rare, do I need some permission to do what I want? If it’s so important buy them yourself and donate to a museum.

Private property rights are some of our most important rights. You don’t get to tell me what I do with my own stuff if it’s not directly harming you. These advocates just hate AI and are clutching their pearls about this without merit.

If I buy a stupid expensive and rare car then go out and crash it, that’s my own stupid right. It’s mine. You get no say. https://flipboard.com/@404media/404-media-qvt3vv94z/-/a-2Xr2iXgFQYmjM0yopQgX_A%3Aa%3A4082434389-%2F0

True story.

OpenAI Says China Launched Influence Campaign To Shape US Attitudes On AI Datacenters - Slashdot https://slashdot.org/story/26/06/11/0637230/openai-says-china-launched-influence-campaign-to-shape-us-attitudes-on-ai-datacenters https://m.slashdot.org/story/455472

I’m sure I’ll get some nastygrams over this, but I find it a bit tone deaf to see sales teams posting about their tropical destination resort/party at President’s Club at the same time the company is laying off people.

So, Brian Armstrong, CEO of Coinbase, published a letter on X about his companies future and his planned layoffs.

You can find the full post here: https://x.com/brian_armstrong/status/2051616759145185723?s=20

So many folks, rightly so, have zeroed in on this sentence with serious angst:

"Non-technical teams are now shipping production code..."

I think this is the inevitable outcome of the past 30 years. First cloud, then SaaS, now vibe coding has moved IT ownership to the masses.

I don't think this is great for security, governance, or oversight, but it's AMAZING for CEOs and boards who just want to go fast and break things and "empower their people."

I'm not belittling "the masses." But they aren't technologists, by and large.

And what is being demanded of them by misguided leaders is to run some massively complex SaaS/Cloud/Coding tool that "Looks Easy Enough" but all of the devil is in the details that only hard core technologist would know or care about.

I believe this is why we have seen so many breaches based on misconfigurations and poor secret management and poor API/Token/Oauth management. The people making those design decisions aren't equipped with the skills to understand the consequences of their design choices.

They are marketing people, or sales people, or HR people, or whatever. They have other important skills, but we have forced IT onto them because leadership massively underestimates the complexity, risk, and specialized knowledge required to run it safely.

"I mean, how hard can a surgery robot be? You just push buttons right? Get the front desk guy to do it!"

This is inevitable, but stupid. Good luck to us all.