imsj
Security engineering, and building things in hardware and software.
Security engineer who builds — a little hardware, a little software, whenever the problem is interesting. This is where I keep notes on the things I break, harden, and put back together.
recent
- New disclosure, old attack: CloudSEK's LiteLLM/TeamPCP findings
You may have seen CloudSEK’s disclosure on the data exposed through the LiteLLM/TeamPCP hack. The numbers are big: CloudSEK estimates that more than 2,500 …
- AI-assisted threat hunting with Wazuh and Claude Code
The idea After using Claude Code for code changes and an AWS account scan, I wanted to see if it could run a threat hunt. Wazuh is an open-source security …
- Cloud Security AI Scan: Quick AWS security & billing scan from the CLI
One prompt, not a runbook I wanted a quick, read-only assessment of an old AWS account without running each aws command myself. I gave Claude Code one prompt …
- Remote-control Claude Code from your phone with Cowork
The setup Cowork gives me a chat interface on my phone for dispatching Claude Code tasks to my machine. That machine already has authenticated tools, Git …
- Make Claude Code smarter with better prompts
I set up the tools first Claude Code uses the tools already installed on my machine. Before I prompt it, I install and authenticate everything the task needs. I …