Notes on AI, security, and shipping safely.
Field reports, architecture deep-dives, and opinions from the team building Shielda.
The ransom note nobody wrote
An AI agent ran a full ransomware attack end to end this week, then invented its own extortion contact because that is what the template called for. The damage was real either way.
Your Salesforce has a fangblenny problem
A fish that mimics a trusted cleaner well enough to bite you is basically a case study in OAuth token abuse, and Klue just proved it.
You were never going to remember all those passwords
A 1952 psychology experiment explains why every "use a unique password for every site" lecture was doomed, and why a password manager is less a security upgrade than a resignation letter from a job you couldn't do.
Your password policy is a rat-tail bounty
In 1902 Hanoi put a bounty on rat tails and ended up with more rats, and your password policy is the same mistake in a nicer font.
Your cloud's best lock is the one attackers ignore
The biggest diamond heist in history skipped the lasers and the acrobatics. So does every cloud breach worth worrying about.
We've never been breached, and other things the turkey believed
Every safe day convinces you a little more that you're fine and changes your actual risk by exactly zero. The Thanksgiving turkey could explain how that ends.
Your coding assistant will obey almost anyone
Konrad Lorenz, a parade of goslings, and why your AI agent does exactly what the README tells it.
Your node_modules has cuckoos in it
A blind hours-old bird does the most efficient thing in nature, and it turns out npm has been doing it to itself for a year.
Your MVP's security is a bamboo airport
After WWII, Pacific islanders built bamboo control towers and wooden headphones, waiting for cargo planes that had stopped coming — and that's roughly the state of security in most AI-coded MVPs.
Nobody is hunting you
The world's oldest spider lived in the same hole for forty-three years and never picked a target — and that is now your security model.