jimdevsec

Staying current is part of the job in security, but the intake has always been messy: Hacker News in one tab, a few newsletters, vendor advisories, the odd conference recording.

A small decision about a one-box setup — and the access-control idea underneath it, which scales much further than the box does.

Where AI vulnerability scanners actually belong in the SSDLC, and why finding the bug was never the hard part In its first month, Project Glasswing pointed an unreleased model, Claude Mythos Preview, at more than a thousand of the open-source projects that