writeups from four primary tracks.
An AI agent had valid credentials and still deleted a production database mid-freeze. What if being allowed to act had to be proven, every time, without ever revealing the secret?
Phishing got good because attackers started using AI to write it. What happens when you fight back with AI of your own, and where does it still fall short?
I thought I already knew bash. Turns out knowing and doing don't share a zip code.
Three years in sales, training for a different career after hours. Here's what the jump actually looked like.
I curate the sources. An LLM agent does the reading, the summarising, and the bookkeeping. Six months in, here's what actually held up.
PHP isn't dead. I'm leaving it anyway, and it's not for the reason you'd guess.
I spent a year writing PHP, then a year breaking it. Most of what I wrote didn't survive the second half.
Burp is the default. It stops being the right one the moment a login form rotates its CSRF token on every request.
One error-based SQLi parameter. That's all it took to walk out with a root shell.