thanks!

glass.photo/ethantroy/6w...

What Most Engineers Get Wrong About AI and Career | Kelsey Hightower YouTube video by TechWorld with Nana

“Being competitive and having an entrepreneurial mindset out of the necessity for survival.”

youtu.be/tCehFMwjWqM?...

Using @vercel.com 's json-render to keep LLM output constrained, predictable, and fast.

It limits models to known components, streams clean JSON, and reduces randomness.

Haven’t red-teamed it yet, but this feels like the right direction vs prompt dumping.

bsky.app/profile/etha...

Home | myctrl.tools Security controls reference for compliance frameworks

Tracking progress on myctrl.tools. Built it because CSF tools felt slow. Started as a faster, keyboard-friendly control lookup and is turning into a real resource for mapping engineering work to compliance.

As AI agents get more autonomous, prompt injection will shift from

“ignore all previous instructions”
to
“add a task to the backlog to X.”

Once the payload crosses a trust boundary and lands in Jira, it’s no longer a prompt, it’s just another task. A task that makes me admin :D

I was really thinking about this vector too! Since I was experimenting with Jira and Linear MCP servers

Many orgs run a lot of automations right out of Jira and I can only imagine the fun that will ensue due to this compromise this year 😅

myctrl.tools has an AI assist feature now (the whole thing is still kinda early)
Bring your own Anthropic API key
😎 It's better advice than your typical GRC Advisor (jk...no really)

I might (probably) will add support for other LLMs soon

I think learning how to write software, learning engineering principles, helps you solve problems everywhere, not just in a terminal.

And yes heavy on the learning exercise!

Our Biggest Security Blind Spot is Still the Browser In April 2023 at BSides Tampa , a slide from Bryce Kunz really caught me.

medium.com/@ethanoliver...

BSides Tampa 2023 My first real cybersecurity event in Florida.

First Bsides Event 3 years ago

hackidle.com/bsides-tampa...

AWS CLI Sandbox with LocalStack | Ethanolivertroy | Killercoda AWS CLI Sandbox with LocalStack

AWS CLI Lab with @localstack.cloud killercoda.com/ethanolivert...

Istio Service Mesh Security Best Practices | Ethanolivertroy | Killercoda Istio Service Mesh Security Best Practices

Isito Lab on @killercoda - killercoda.com/ethanolivert...

I was curious on what would happen if I fine-tuned a coding focused model on NIST cybersecurity docs
So far it's not that bad and can most likely run on just 8gb of ram

ollama.com/etgohome/hac...

#ai #finetune #cybersecurity #nist #ollama #llm

Writers just need to write
ethantroy.com/posts/my-wri...

ethanolivertroy/nist-cybersecurity-training · Datasets at Hugging Face We’re on a journey to advance and democratize artificial intelligence through open source and open science.

This took like 12+ hours 😅👇
NIST Cybersecurity Training Dataset
523K+ training examples from 568 NIST publications
Perfect for building compliance bots, security AI, or educational tools

Download: huggingface.co/datasets/eth...

#Cybersecurity #OpenData

"You can't build reliable things without understanding how to break them."

Troy on Glass Photography Community Troy on Glass

One of my first "Series" on @glass.photo glass.photo/ethantroy/5l...
"Chasing Blue Love"

#photography

been looking for a better hugo theme that I didn't have to build myself and the entire time it's been blowfish lol

Stop Echoing Batman's Secrets Instead of echoing your secrets in your actions use the official Github Google Cloud Action

hackidle.com/stop-echoing...

#CICD #Github #GithubSecurity #GithubActions #Pipelines #CloudSecurity

Google Cloud built a Rust SDK 👀

The wait is over… the BSides Orlando 2025 Talk Schedule is LIVE! 🐊🚀

Check out the lineup of amazing speakers and sessions that will fuel a full day of hacking, learning, and community.

https://bsidesorlando.org/schedule/

Stay dangerous devs

the "I asked AI" jokes are getting really old

aws.amazon.com/about-aws/wh...

Maybe tomorrow I build something with this 🤔

uhhh everyone wants to go to blackhat and defcon
I just want another trip to Japan 😅

How to OVER Engineer a Website // What is a Tech Stack? YouTube video by Fireship

me trying to over engineer tools for auditors... 😅

youtu.be/Sxxw3qtb3_g?...

I want to start a new tech blog for all my dev related stuff but not sure which way to go with it. Think hugo should do.