This is what it's like publishing research in 2025. I write an extremely popular blog post on EDR bypasses and Google just comes along and steals my search traffic in the most brazen way possible.
The part I still don't understand is a large portion of the internet monetizes traffic via Google Adsense. By replacing search with a chatbot, thereby encouraging people not to visit websites, they're cannibalizing their own revenue sources in a way that they'll never be able to recoup with AI. Not really sure what Google's endgame is here.
Being in tech and having a single modicum of critical thinking is just screaming "this isn't what LLMs are designed for" over and over. Meanwhile people are shoving a bunch of word predictors into critical decision making processes because a glorified used car salesmen told them it would fix all their problems.
A programming fact that still amazes me is that the HTTP header which containers the referring url is called "referer", because the developer spelt "referrer" wrong and the spell checker didn't catch it, so it made it into the official standards and they just never changed it lmao
I've changed my mind about AI. I now believe it will be able to replace programmers. I asked Grok a question and it responded by forgetting how to use its own API, spending 3 minutes trying to read the documentation in-between failed attempts at getting it to work, then just gave up entirely. It's just like me fr.
Looking to get started learning malware analysis or reverse engineering? Check out my ever increasing selection of practical labs. Challenge range in difficulty and each one is designed to introduce a new malware technique.
https://malwaretech.com/labs/
Yet more companies laying off employees not because AI is replacing them, but because they need more money to fund their AI. I can't remember the last time I saw sunk cost fallacy at this scale.
Useful threat intelligence signal: deploy honeypots to your network then filter out any traffic that matches public databases of known malicious IPs. Malicious traffic hitting your network is interesting, but what's hitting your network that isn't hitting everyone else's is much more so.
