Exploring life through my experiences
The models are so strong we're becoming less researchers and more triagers. August was my best income month ever, and it's making me question everything. This week: the bug bounty bubble, why an RCE can feel empty now, and how I'm thinking about the long game.
Finding vulnerabilities has never been easier with AI, exciting and terrifying at once. This week: the relentless pace of always needing the latest tool, why I keep getting duplicated on Criticals that used to be bug of the year, and the too-expensive gadget I rewrote the firmware for.
Two weeks working full-on with Codex, on the simplest setup I ever had: my server, ssh and tmux. This week: why going back to simple was the best decision I made, why I'm slowly breaking up with Claude, and the weird feeling of reporting bugs I didn't really find.
I tore down my over-engineered home lab and rebuilt it around a single tmux on a VM, the kind of setup we could have run in the 2000s. Then GPT 5.6 pulled me away from Claude for a bit. And some honest thoughts on what finding bugs feels like now that the agents do the finding.
We spend all this time optimizing Claude, but nobody talks about what to do while it works. This week: how AI quietly turned me from a producer into a consumer, why infinite scroll leaves me empty, and the overpriced little device I bought anyway to fight back.
I figured out I've been using Claude wrong: telling it to "keep going" on a loop instead of guiding it like the intern it actually is. Plus why real human contact matters more than anything in bug bounty, and a few slow days off in the Vosges.
LeHack was back at La Villette, in the middle of a heatwave, with the YesWeHack Live Event on Puma. Then something completely different: my first round table, in a room full of suits talking compliance and SOC 2. This week: LeHack, the round table, and where AI is taking hacking.
This year's hacker house: same crew, a villa in the south, and the first time we all met up since Claude landed in our lives. Now we all just point it at the scope, and we all surface the same bugs. The trip, the new hunting setup, and a whole lot of duplicates.
Last week I talked about fake productivity, and I'm still in it. But it made me think about the tools that actually work. This week: why I went back to a simple pomodoro timer, the agent platform switch that finally stuck, and how my voice-controlled Jarvis keeps getting better.
No Aituweek last week, I had nothing real to say. This week: why I keep falling into fake productivity, how a power outage took my self-hosted blog down, and where Meetly is at.
