Recent Posts

Michael’s unifying theories: when you grew up seems to really affect your attitude towards information

When I was a teenager one of my favorite series of books was Inside Macintosh. Sure I liked lots of fiction stuff as well, but in terms of technical books that really changed how I thought about things in high school, this was it. The design of the early Macintoshes was elegant, whilst also having to deal with limitations of the time — the library routines for much of the operating system were baked into ROM for example, but there was a method to cowboy patch them as required. The books were comprehensive, readable to a mildly talented hobbyist, and best of all were sitting on the shelf of my local library.

(more…)

Continue ReadingMichael’s unifying theories: when you grew up seems to really affect your attitude towards information

On resistance to change in computer science

Irving Ziller, one of the original members of the FORTRAN team, describing the resistance of early programmers to the introduction of a compiler: "And in the background was the scepticism, the entrenchment of many of the people who did programming in this way at that time; what was called 'hand-to-hand combat' with the machine." From https://www.cs.man.ac.uk/CCS/res/res41.htm

Continue ReadingOn resistance to change in computer science

Stuff the British Stole

  • Post author:
  • Post category:Book

Stuff the British Stole Book Cover Stuff the British Stole
Marc Fennell
Penguin Random House NZ
★★★☆☆

This book is interesting and easy to read, but I can’t help but feel like sometimes it lacks depth of analysis. It certainly lacks any form of supporting references, which I have come to expect in books of this type.

(more…)

Continue ReadingStuff the British Stole

Michael’s unifying theories: the way an organization thinks of itself really matters

A few times now I have worked for organizations that are basically IT shops — that is, their core business now depends on being very good at doing Computer Things. However, many of these places were pretty terrible at computers. Let’s keep picking on Telstra, because its an easier example.

(more…)

Continue ReadingMichael’s unifying theories: the way an organization thinks of itself really matters

Ok fine, where can I get me one of these “security harnesses” you speak of?

Ok, so in a recent post I summarized some reading I had recently done about security harnesses. When I say “security harness” think “thingie which orchestrates many many LLM sessions to turn tokens and environmental stability into zero day vulnerabilities and dopamine”. That is, as Claude Code is to code generation, a security harness is to vulnerability hunting.

The next obvious step is to try one of these things and see if it does what it says it does on the tin. That is, do I get the dopamines? The problem of course is finding one.

A harness is the orchestration layer around an LLM. It controls the inputs, tools, prompts, models, state, validation gates and outputs for each stage of work. — ZephrSec

(more…)

Continue ReadingOk fine, where can I get me one of these “security harnesses” you speak of?

Michael’s unifying theories: all signs exist for a reason

All signs exist for a reason.

Making a sign (or a policy) takes work. Therefore, this work is only done when some incident has caused someone somewhere to decide that the correct response is to expend effort ensuring this thing does not happen again. Now, one issue with this is that it is also a lot of effort largely in the form of risk acceptance to remove a policy or sign. So these things tend to accrue. It is rare for someone to ask if the number of mandatory training courses is still reasonable for example, because they don’t want to be the one to remove one and then eventually have to explain that in a lawsuit or coronial inquest.

(more…)

Continue ReadingMichael’s unifying theories: all signs exist for a reason

Machine Learning

  • Post author:
  • Post category:Book

This book is a delightful collection of short stories by Hugh Howie, mostly not about actual machine learning or AI. What else can one say about a book of short stories with no overarching theme? Was good. Did enjoy.

Continue ReadingMachine Learning

What is a LLM “security harness” and why do people keep talking to me about them?

Increasingly I am being told to “use a security harness” when analyzing code for potential vulnerabilities, but what is a “harness” and how does it differ from just running Claude Code and asking it nicely to find me some sweet vulns?

This post is literally my notes on reading up on this topic via a series of Cloudflare blog posts. That is, this post is a summary and does not intend to provide anything you cannot find anywhere else (with a lot more words used).

(more…)

Continue ReadingWhat is a LLM “security harness” and why do people keep talking to me about them?

End of content

No more pages to load

Older Posts