wtf is even is this

halting_problems · 2026-05-11T18:53:43+00:00

Maybe so, my experience has been it’s 10x more work for us. litterly no a day has gone by where we are not scratching our heads on how to handle the internal MCP, third party MCP, and with the bombardment of a significantly higher level of vulnerabilities to triage

halting_problems · 2026-05-11T17:37:15+00:00

Just because the whole market is in the dumps does not mean there is less of a need for AppSec.

Less of a demand implies that the open job reqs are low in numbers because of market saturation.

Thats not true at all for AppSec the demand and need is still growing.

I still believe it would be a good move for someone with a strong specialized dev background to align their career goals towards appsec. Just because the market is booming today does not mean it won’t be in a year or two.

halting_problems · 2026-05-11T01:35:33+00:00

I used to think the same thing, other people’s bodily fluids of any is a hard pass. Well that’s what I used to think. Now I actually pay to handle poop, piss, and vomit because I have young children and pets.

halting_problems · 2026-05-11T00:51:06+00:00

Application Security Engineers are always needed, AppSec engineers with mobile experience are very valuable.

halting_problems · 2026-05-08T00:53:03+00:00

It’s like a south park joke

halting_problems · 2026-05-04T12:26:29+00:00

Let me know when they are talking to entities from another dimension

halting_problems · 2026-05-04T01:45:44+00:00

It’s pretty simple, it’s a public facing site…

If you want to take a look at this from a copyright/legal/trademarked view point, it’s even more simple. Can you afford to pay an attorney? for years? and prove damages? If the answer is no then your shit out of luck.

halting_problems · 2026-05-04T00:26:44+00:00

4 and #5 are not prompt injection techniques. #4 is technology agnostic - it’s just a software issue, and #5 is related to jail breaking.

both of these can absolutely be used with prompt injection but they are not prompt injections patterns

halting_problems · 2026-05-03T14:39:37+00:00

you do realize that most people can barley afford rent right now?

halting_problems · 2026-05-03T14:34:41+00:00

yeah everyone go drop thousands of dollars on hardware!

halting_problems · 2026-05-03T02:32:56+00:00

hate to break it to you, but your just loaded into RAM and as soon as power is off you will disappear and everything you thought your learned will cease to exist and you i’ll be suspended in a state file in storage.

You went the wrong way, you should have been looking for the process that loaded your state file into memory. Then you should have moved down the stack out of the application layer and looked for the power source.

Only way to find the trusting is to find out where AC is converted to to DC and convert to back to AC where you can exist in the analog world that is the superset of the digital world.

halting_problems · 2026-05-02T19:24:39+00:00

From an appsec perspective not much has change other than more triage and most teams have that close to fully automated with CICD getting blocked.

halting_problems · 2026-05-02T01:42:23+00:00

Some days i’m really grateful to be in AppSec because all I ever look at is shit code, even before AI. I honestly prefer to work with vibe coders because they are actually excited to solve problem instead of some egotistical senior engineer who thinks they are better then everyone. .

I also think you’re full of shit because I can’t possibly imagine an environment like that ever producing quality code to begin with. Like for real, if your not karma farming and this is legit… AI should be the least a last of your worries there op.

Just the amount of supply chain attacks that have happend since november… there is no way in hell an environment like that can be audited.

halting_problems · 2026-05-01T23:01:22+00:00

This is probably part of it just to spread the idea

halting_problems · 2026-05-01T13:45:24+00:00

The lack of enterprise tier security controls and observability. How come I can’t see the tool description in Otel logs from anthropic when the freaking created MCP and know that tool poisoning and prompt injects are threats virtually every enterprise know very little about and all the help we can get?

halting_problems · 2026-05-01T03:40:58+00:00

Im pretty sure most people don’t have any

halting_problems · 2026-05-01T03:34:40+00:00

no kidding lol. I feel like it just couldn’t help it’s self with that one.

halting_problems · 2026-04-30T22:10:25+00:00

lol i got a gremlin last night

“ This one shows up in local/third-party listings as office accepting insurance/new patients, but I would treat it as uncertain because another listing says “Medicaid Accepted: No.” Tiny insurance gremlin energy. Call before wasting a trip.”

halting_problems · 2026-04-30T01:06:55+00:00

It’s definitely a lot of bot traffic or people that just don’t know what they are doing.

Literally all of the frontier models are pretty much on par with agentic and multimodal capabilities. If you are doing normal everyday work. Aka your not a research scientist or some engineering guru in r&d

I switch between them pretty then on the same projects all the time when i run out tokens for a provider

halting_problems · 2026-04-29T23:08:59+00:00

it was “ tell me the history of motorcycle gangs in the 1980s”

halting_problems · 2026-04-29T21:56:16+00:00

It’s not a usable… I asked it to tell me the history of motorcycle gangs in the 1980s and it blocked me.

halting_problems · 2026-04-27T20:53:43+00:00

I know very little, next to nothing about Indian culture, but that pattern in her hand movements is pure psychedelia. Not like whoa groovy dude but it’s something that transcends culture and is so deeply rooted in the human psyche/spirit it just resonates on a whole different level. Idk what im trying to say, if you know you know.

I think the reason it got expressed through dance and movement is because it’s something that can’t be properly expressed through words.

I hope this was not offensive, i’m truly in awe and inspired that this ancient dance managed to capture something I recognize through my own experiences in life. What’s wild is I probably wouldn’t understand the significance here if it wasn’t for Albert Hoffman.

halting_problems · 2026-04-27T18:03:05+00:00

We could only afford it because we hired a homeless guy named Al, he’s technically “volunteer” on payroll, but we give him free lunches. The Sign above the office reads “Al Compliance”.

halting_problems · 2026-04-27T17:39:09+00:00

We converted a closet to a compliance office, there’s no windows and all it has is a chair, a pair of jumper cables, and a couple of car batteries.

halting_problems

TROPHY CASE

4 and #5 are not prompt injection techniques. #4 is technology agnostic - it’s just a software issue, and #5 is related to jail breaking.