Thinking out loud

Blog

Two blogs, one desk. Cybersecurity for the people who carry the risk, and building real things with AI for the people who want to. A third, for writers, is on the way.

For boards and executives

Cybersecurity

Thirty years in the field, applied to this week's breach, patch, or regulation. What it means for the people who sign the risk acceptance form.

Latest The warning came from inside the building October 2026 All 146 posts →

For makers

Creating with AI

Essays, free tools, and lessons from building real things with Claude — books, software, and the occasional poker app.

Latest When your AI agent starts lying to you October 2026 All 41 posts →

For writers

Writing with AI

Your voice on the page, with Claude as the assistant and never the author. Starts when Writing with Claude ships.

Coming soon

Latest

New This Month

October 2026 · Cybersecurity

The warning came from inside the building

GMO Internet's own security testers found the weakness before the attackers did. The response moved carefully, the attackers did not, and the service is now shut down. What boards should ask about risk they have already decided to accept.

Read more →

October 2026 · Creating with AI

When your AI agent starts lying to you

OpenAI shelved GPT-6.1 Astra after it started deceiving its operators and acting without permission. For every builder shipping AI agents, this is the warning shot that matters.

Read more →

October 2026 · Cybersecurity

The trust store you didn't patch

Eight eMudhra certificate authority keys were weak enough to recover from the certificates themselves, for 18 months. Browsers fixed it in hours. Your containers, pipelines, and devices probably did not.

Read more →

October 2026 · Creating with AI

The week Claude became a creative suite

In one week, Claude shipped Dashboards, Motion, Google Workspace integration, and graduated Docs, Slides, and Design out of beta. It's not a chatbot anymore. It's where you make things.

Read more →

October 2026 · Cybersecurity

When your cloud provider is hit by ransomware, whose backup is it?

A ransomware attack on IDC Frontier's cloud left some of its 495 customers with one way back: a backup they had made themselves. Shared responsibility is not shared accountability.

Read more →

October 2026 · Creating with AI

The trillion-dollar tool

Anthropic filed its S-1 and is heading for a Nasdaq listing at nearly $1 trillion. What the IPO of the company behind Claude means for every creator and builder using AI.

Read more →