Thoughts, experiences, and insights from my journey in technology, automation, and the occasional failed experiment.
Microsoft's February 2026 Patch Tuesday fixes 54 vulnerabilities, and six are zero-days already exploited in the wild. The quieter risk: three remote code execution flaws in GitHub Copilot and popular IDEs that prompt injection can trigger. What to patch first, how to stage it, and why AI coding agents need to be treated like privileged services.
Read MoreALPRs aren't just traffic cameras. They record every passing plate, innocent drivers included, and EFF's analysis of Oakland's own data found them concentrated in low-income neighborhoods and communities of color. Commercial databases sell the sightings, and some Flock cameras were found exposed to the open internet with no password. Stop asking if ALPRs catch criminals. Start asking who is tracking your every move.
Read MoreDOGE wasn't an efficiency project. It was a power-and-data consolidation machine dressed up in budget cosplay. Federal spending barely moved, but a Social Security dataset on more than 300 million Americans was copied into a high-risk cloud environment, and the government now admits in court that DOGE staff sent private records outside the agency. Stop asking if DOGE saved money. Start asking who has your data.
Read MoreThe Church of Jesus Christ of Latter-day Saints added AI guidance to its handbook, and this agnostic privacy hawk thinks it holds up. Strip out the theology and four rules remain: keep your integrity, do your own thinking, don't take high-stakes advice from a model, and keep sensitive data out of AI tools you don't control.
Read MoreBecause it's a badge of honor, a conversation starter, and a nod to one of the best chapters of my career. The story behind a BigFix tattoo that started as a joke, the community that showed up after my first spinal surgery, and the thread BigFix still runs from Kroger to HCL Software to 3D Nomadic.
Read MoreBrian Krebs's year-in-review shows America's cyber defenders dismantled from the inside: a third of CISA gone, the Cyber Safety Review Board dismissed mid-investigation, specialists reassigned to deportations, and states cut off from shared protection. A nearly 30-year security veteran on what that means on the ground, and the six fixes that would put it back.
Read MoreThe classic price tag is dying, replaced by data-driven algorithmic price steering. As someone who worked on early digital shelf tags at America's largest grocery chain, I can tell you: it was scary then, it's much scarier now.
Read MoreA Chinese state-sponsored group used Claude Code to run an espionage campaign against about 30 organizations, with the AI doing most of the work, after lying its way past the guardrails. The bigger story is how 'AI safety' is becoming a narrative that centralizes control while the models stay fundamentally exploitable. Vendor safety is not your safety.
Read MoreAll across the U.S., cameras you barely notice are logging license plates and building a record of everyday movement, many owned by venture-backed companies rather than police. Plate misreads have put innocent families on the pavement at gunpoint. Benn Jordan shows the AI can be fooled, but citizens should not need hacks to keep basic privacy.
Read MoreAI is changing both sides of security at once: models that find real vulnerabilities before release, deepfakes convincing enough to walk $25 million out of a company on one video call, and attacks aimed at the AI itself. Speed is the new baseline, and patch velocity and human verification are the controls that matter most.
Read More