Systems architect, protocol engineer, inventor. Building next-generation infrastructure for AI, Web3, and connected devices. Views=Mine
Joined April 2023
- Tweets79
- Following122
- Followers158
- Likes27
Anthropic Reveals a Strong ROI Case for AI That’s Hard to Ignore
Unfortunately, it's cybercrime.
So while CFO's in most industries are struggling to see ROI on their AI rollout in their quarterly reports.
Cybercrime is literally making out like bandits.
DNTLS inverts the economics of agent swarm attacks against the attacker.
Part 3 of the Cybersecurity Siege Economy explains how.
The Cybersecurity Siege Economy - Part 3 dntls.substack.com/p/the-cyb…
My second installment on the Cost of the Cybersecurity Siege Economy is now published:
The Cybersecurity Siege Economy - Part 2 dntls.substack.com/p/the-cyb…
I’ve been asked to substantiate why I think the open Internet is heading toward a Cybersecurity Siege Economy.
So I wrote the full argument.
The Cybersecurity Siege Economy - Part 1 dntls.substack.com/p/the-cyb…
Is universal, global zero trust networking possible? Yes it is.
For the last six months or so, I have been working on a decentralized solution for just that.
Today we got it working end to end.
No certificate authority in the trust path. No necessary web2 gateway.
DNS is not part of naming, peer lookup or security. We fake DNS locally for the browser because browsers expect it, but a native client would not need that.
In the screenshots I connect to the same peer both through a relay and directly over IPv6. The browser doesnt know or care how. The networking figures it out transparently based on what the host requires.
No prior key exchange between peers.
A peer can resolve a human meaningful name, verify the service information itself, connect directly or through a relay, and establish mTLS with the destination.
The relay can route the traffic, but it never terminates the mTLS connection.
DNTLS is preparing for a closed test network, focused demonstrations, and private technical Q&A sessions.
We are inviting expressions of interest from people and organizations.
• attending a technical session
• participating in the closed testnet
• building or adapting products using DNTLS
• operating a future DNTLS validator
Most questions are optional, and prior infrastructure or blockchain experience is not required.
app.formbricks.com/s/cmrzw9a…
Steven Johnson retweeted
here is the entirety of Palantir CEO Alex Karp's televised nervous breakdown this morning on CNBC
Public warning to developers: It is never legitimate to require screen recording during any potential login flow. Period.
I withdrew from a @SpeechifyAI coding assessment because they required full-screen recording and then pushed me into a GitHub invite/login flow that led toward authentication and 2FA while recording was active.
That alone is enough to make the process unacceptable.
This is not a minor privacy issue. It normalizes exactly the kind of behavior that enables phishing: training users to keep recording, keep clicking, and keep entering credentials or 2FA during a workflow that should immediately be treated as hostile.
Whether the intent is malicious, outrageously incompetent or just reckless is beside the point. Users cannot safely assume innocence in a flow like that, and they should not be asked to.
If any company asks you to:
1. enable screen recording, and then
2. sign into GitHub or any other sensitive account
stop immediately.
No legitimate hiring process should ever put a candidate in that position.
