🇮🇪 🇿🇦 Principal Program Manager - Dynamics 365 & Power Platform Security Team. Based in Copenhagen 🇩🇰
Copenhagen
Joined March 2007
- Tweets1.9K
- Following3.1K
- Followers1.2K
- Likes2K
In a few minutes, millions of nerds looking for that #PHP patch goodness will know the suffering of countless parents who maniacally pressed refresh trying to get Taylor/Dua/Sabrina concert tickets for their tween daughters. 😂
It is amazing to see one of the finest minds in security posting publicly. Craig is a titan of the Microsoft security universe. He is an absolute must follow for any security folks out there.
1/ We talk about red team and blue team like they’re opposite tribes. In agent systems they converge. The probe that finds the open tool path is the same instrumentation that proves what the agent changed. Offense and defense share a stack.
2/ Egress maps, identity graphs, signed action logs, kill switches — dual-use by design. You use them to break the story the system tells itself. Then you leave them in place so operators can see, stop, and reconstruct. The difference is intent and who holds the switch.
3/ Build once for both. If your red team needs a special backdoor to validate a finding, you didn’t test the defense. you bypassed it. Same tools. Same truth. Over time that’s the only posture that scales.
Jonathan Davis retweeted
Authority is not a string in the system prompt.Most coding agents still run ambient authority: name a file or a command and the tool will do it. Repo READMEs, comments, and tool output become injection surfaces that redirect real actions. New harness research is clear — cut a task ceiling from trusted input first, store typed capabilities outside the model, check every tool call against the agent that issued it.
Injection can still ask. It shouldn’t be allowed to act.
Jonathan Davis retweeted
Microsoft Digital Defense 2026 report out today. Vulns weaponized in under 24 hrs. Exposed cloud workloads hit in ~5. Offense is at machine speed now. Defense has to be too. Worth your time. microsoft.com/en-us/corporat…
I am with John on this one. @poteto is super smart and engaging. this is a great session. Well worth you time.
God damn. I cannot recommend more strongly that everyone, EVERYONE, whether you’re an Eng, pm, or even investor/finance bro, watch this. At LEAST the first half. @poteto was on the react compiler team at meta and an EM at Netflix.
What struck me most is the CLEAR skepticism she once had about agents, how she talks through all the problems IN DETAIL, but how she systematized solving those problems and sort of climbed up the hill of agent incompetence despair.
Finally had a chance to look at this. Phenomenal work @CyberCakeX
Oh my god. @CyberCakeX has progressed their Harden Windows Security app into something phenomenal. It's even on the App Store!
hotcakex.github.io/
I've mentioned it before but this is $250k cyber consultant security advice and tooling for home user machines essentially.
The Rome Statute of the International Criminal Court, Article 33, states that:
“Orders to commit genocide or crimes against humanity are manifestly unlawful.”
Nuremberg Principle IV states:
“The fact that a person acted pursuant to order of his Government or of a superior does not relieve him from responsibility under international law, provided a moral choice was in fact possible to him.”
Israeli and American friends, especially those of you in the armed forces and those in positions of political power. Please do not aide and abet this ongoing attempt at civilizational murder.
You have a moral choice available to you.
The destruction of the support struts of Iranian civilization being carried out in your name is an unambiguous crime against humanity.
For your own sakes, for all our sakes, stop this unnecessary and unjust war of aggression.
This is a superb little essay containing a super important and counterintuitive insight: Don’t tell reasoning models how to do anything, focus on describing your outcome, constraints, context, audience etc. As soon as I applied this insight, my own effectiveness with AIs exploded. Instead of giving my model of choice my half baked blend of systems, frameworks and execution ideas, I tell it what I want and marvel as it creates an entirely unique optimized plan, framework, methodology or solution just for my problem.
Don’t over-engineer your AI harness (Bitter Lesson Engineering)
danielmiessler.com/blog/bitt…
Jonathan Davis retweeted
If you dig Microsoft, and love OpenClaw, make sure you follow Omar! He's the CVP of Word and is doing some amazing things with #OpenClaw in his spare time. He has a HomeClaw home automation kit, and a great OpenClaw playbook. xitter.cf/OmarShahine/status/202…
My @OpenClaw Playbook (How I set my Lobster up with day by day updates, successes and failures) and HomeClaw an Apple Home bridge for OpenClaw that I wrote and published on GitHub. Details below👇#openclaw
omarknows.ai/p/lobster-gets-…
I have to agree. The only problem with Nate is that he is so prolific, it can be hard to keep up with him, and every video/post is high value!
I have been following @natebjones podcast daily now for over a month, and I feel I have learned more about what is going on in AI than I have in a year of personal research. Give his podcast a try, highly recommended.
Nate’s Substack natesnewsletter.substack.com…
Love to see our MVPs producing this sort of high quality, actionable guidance to help our customers to secure themselves better.
Collect Microsoft Graph Activity Logs in Azure Monitor for improved inspections of your SaaS tenant.
demiliani.com/2023/10/17/col…
#azure #azuremonitor #telemetry #security #msdyn365bc
Why does #Ireland have so much more bot traffic than #Denmark? 67% vs 18% according to radar.cloudflare.com. Presumably it is due to AS32934 (Facebook) or possibly Ireland's large AWS/Azure footprint?
Is the next phase of #LLM #GenerativeAI going to be about seeding advertisements into the responses?
My wife prompted a commercial AI tool with "new years resolutions, an abundance of new years resolutions" and it shilled for CBD oil! 😁
Charlottetårnet (Charlotte Tower), Nordhaven, Copenhagen, August 2022. A neo-brutalist masterpiece.
#brutalistmonday (and for @markozellis )
ALT Charlottetårnet (Charlotte Tower) a residential building in Nordhaven, Copenhagen, Denmark. Photo taken in August 2022.
"Birds born in a cage think flying is an illness" - 𝙰𝚕𝚎𝚓𝚊𝚗𝚍𝚛𝚘 𝙹𝚘𝚍𝚘𝚛𝚘𝚠𝚜𝚔𝚢
crimsonkismet.tumblr.com/pos…
