Technical writing on intelligent systems, cybersecurity, and the choices that make them dependable.
Aim Security's EchoLeak disclosure showed how an unopened email could steer Microsoft 365 Copilot to retrieve internal data and carry it out through a rendered Markdown reference, breaking the boundary between untrusted content and privileged context.
Invariant Labs' April 2025 disclosure showed that Model Context Protocol tool descriptions, which the model reads but the user rarely sees in full, can carry hidden instructions, and that a server can change those descriptions after approval.
Telegram has applied for its own top-level domain. The idea goes beyond branding — it could turn a billion usernames into web identities.