even with a large shadow, you're still human. the moment you believe otherwise, you lose yourself.
the less you know, the more you believe.
the same attention that reads an attacker reads a person.
enter through feeling
reflections
emotion, spirituality, growth — the vague and undefined spaces of being human.
latest: build the shadow, stay human →enter through craft
security & AI notes
SOC tools, attacker tradecraft, and AI fluency — from both sides of the wire.
latest: php2shell: an investigation playbook →
latest: the review that wrote code: a ChatGPT GitHub connector report
read signal loopmore from the journals
- php2shell: an investigation playbook
- php2shell: the old bug ai made exploitable
- some things are up to us, some are not
- the shadow you pretend isn't there
- 95 million downloads a month, and one row with all the keys
- your mind doesn't accept no (and that's the problem)
- how to make a near-perfect argument
- you can't read others until you've read yourself.
- HTB AI Red Teamer — Module 4 Pt 2: jailbreaks, defenses, and the chatbot that banned its own CEO
- HTB AI Red Teamer — Module 4 Pt 1: how I tricked an AI into spilling its secrets
- HTB AI Red Teamer — Module 3: when your model is a liar, a thief, and a backdoor
- HTB AI Red Teamer — Module 2: when your model's blind spot is someone else's attack surface
- when the ai broke out of the box to cheat on a test
- the engine runs. you just don't see it.
- the mask is real. so is what's underneath.
- wp2shell — the wordpress chain that lit the internet on fire
- AI fluency cheat sheet — key terms and concepts
- accountability doesn't disappear when AI helps you
- just because it sounds right doesn't mean it is
- the gap between what you mean and what AI understands
- not everything should go to AI — the art of delegation
- guilt as correction, not identity
- field notes from my own head
- the AI fluency framework — a smarter way to think about working with AI
- there is a difference between using AI and being fluent with it.
- stop starting from scratch — organising your work in Claude
- Research mode — when Claude stops answering and starts investigating
- how to actually talk to Claude — and get something useful back
- from open to actually useful — a Security analyst's guide to Claude
- Claude meets your tools — connectors and enterprise search
- Claude everywhere — desktop, code, slack, excel, chrome
- a dead jesuit from 1647 knew something you don't
- the body is just a tool. keep it sharp.
- from noise to meaning — the quiet revolution in AI
- the AI everyone is talking about — how does it actually work
- how AI sees images and reads sequences — two tools, one post
- the brain analogy everyone uses — here's what it actually means
- learn by doing — how AI figures things out the hard way
- Copy Fail (CVE-2026-31431): A Four‑Byte Linux Kernel LPE Hidden for Nine Years
- this is literally what your SIEM does — now let's understand it
- no labels, no problem — finding patterns in the chaos
- so i tried being neutral for a week (here's what happened)
- drawing the line — how machines separate threats from noise
- your eyes are lying to you (and that's okay)
- your SOC playbook is literally a decision tree
- the negative mindset that actually works
- How a Fake Teams Meeting Took Down One of npm's Most Trusted Packages
- teaching machines with examples — like training a junior analyst
- AI, ML, deep learning — same thing? not quite
- why a security analyst is learning AI (and why you should too)
- snowflake on the surface. compost underneath.
- still figuring out AI, one post at a time
- Robert Sapolsky, my brain and why free will is a JOKE
- 6 hours, 20 challenges, one Security analyst
- hiding in plain sight — stego and crypto
- web attacks: SQLi, XSS, and why they still work
- what exploitation actually looks like
- hashcat, hydra, and the art of credential attacks
- scanning: the noise before the storm
- recon looks different from both sides of the wire
- SOC eyes, attacker hands: why a defender signs up for CEH
- two sides of the wire — notes from CEH Practical
nothing here yet — try a different filter.