security at pixee | ex-aws founder: kernelcon.org | dc402.org twitter: @clevernyyyy linkedin: /in/adamschaal/https://bsky.app/profile/appsec.bsky.socialhttps://bsky.app/profile/appsec.bsky.social/post/3mv2ttmaui22xLess than a week to make major strides with Navier–Stokes. 🤯 We've spent decades asking what computers can't efficiently compute. What happens when the computers start answering that question? [contains quote post or other embedded content]09 Sep 2026 05:51 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3mv2ttmaui22xhttps://bsky.app/profile/appsec.bsky.social/post/3mv2tsrgcts2xIANAM (I am not a mathematician) but... if @OpenAI or @anthropic.com target P=NP next, things could get really interesting. A proof that P=NP would have enormous implications for cryptography - breaking computational assumptions that even quantum-resistant crypto is designed around.09 Sep 2026 05:51 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3mv2tsrgcts2xhttps://bsky.app/profile/appsec.bsky.social/post/3muzqlsw7w22nI'm speaking at @blueteamcon.com 2026 in Chicago. "Too Big To Review" - what happens to AppSec when AI turns your engineering team into a 10x output machine and your review capacity stays the same. Spoiler: hiring more security engineers isn't the answer. blueteamcon.com08 Sep 2026 19:21 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3muzqlsw7w22nhttps://bsky.app/profile/appsec.bsky.social/post/3muzo5bou2s2n"Since August 28th, we have been training a new internal model that has exhibited unprecedented performance in our benchmarks, including mathematics." 🤯 It took TEN DAYS to solve a millennium problem. This is AGI in the making, wow. https://openai.com/index/navier-stokes-solution/08 Sep 2026 18:37 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3muzo5bou2s2nhttps://bsky.app/profile/appsec.bsky.social/post/3mu3qtcvzuc2yCheck out the open letter from OpenAI plus 100+ firms warning that AI models will soon enable far more sophisticated cyberattacks. A short "defenders' window" exists to fix vulnerabilities and arm defenders with AI tools before that happens. https://openai.com/collective-cyberdefense/27 Aug 2026 21:05 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3mu3qtcvzuc2yhttps://bsky.app/profile/appsec.bsky.social/post/3mtwd4qn54k2sI vibed a fun higher/lower on CVE severities, check it out! [contains quote post or other embedded content]25 Aug 2026 17:17 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3mtwd4qn54k2shttps://bsky.app/profile/appsec.bsky.social/post/3mtwae7itac2aI scored 2910 on Patch or Panic and ranked 13 CVEs correctly, the vulnerability severity game by @pixee.ai. Can you beat me? https://cve.wiki/s/98cab768eee7aa90 cve.wiki25 Aug 2026 16:27 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3mtwae7itac2ahttps://bsky.app/profile/appsec.bsky.social/post/3mtkv6lcey22mMy absolute favorite Christopher Walken role of all time. https://youtube.com/watch?v=7qJuJN8Cesc Poolhall Junkies. Underrated movie. I haven't seen it in a while, but randomly thought of this scene today. Go give it a watch if you haven't seen it.21 Aug 2026 04:08 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3mtkv6lcey22mhttps://bsky.app/profile/appsec.bsky.social/post/3mp4okgq64c2n🚂 Speaking at Hobocon this July, a hacker conference on a moving train. "All Aboard IDOR Express" - how when submitting a CFP, I found an IDOR showing me all of the security conference's submissions. OWASP A01. 🚂 July 17–18, KC ↔ Chicago. www.hobocon.com Nothing like a captive audience.25 Jun 2026 14:51 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3mp4okgq64c2nhttps://bsky.app/profile/appsec.bsky.social/post/3mogmnm7ros2xMy talk "Too Big to Review" was just accepted at @blueteamcon.com 2026 🎉 September 12th in Chicago - come hear how we scaled AppSec at AWS without scaling the team. #AppSec #BlueTeamCon16 Jun 2026 20:18 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3mogmnm7ros2xhttps://bsky.app/profile/appsec.bsky.social/post/3md7uyajor22nNew blog post - Automation for AppSec https://blog.adamschaal.com/posts/2026-01-24-automation-appsec-aws/25 Jan 2026 04:22 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3md7uyajor22nhttps://bsky.app/profile/appsec.bsky.social/post/3mapgvmah7k2gThe night of October 20th, I woke up ice-cold. My bed had cooled all the way to 55° F and I couldn't adjust it at all. The irony: this was due to an AWS failure. Read more about removing my bed's cloud dependency. https://blog.adamschaal.com/posts/2025-12-16-rooting-eight-sleep/24 Dec 2025 04:37 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3mapgvmah7k2ghttps://bsky.app/profile/appsec.bsky.social/post/3m77dpevifc2fI dockerized a proof-of-concept for CVE-2025-55182 (React2Shell) here - https://github.com/clevernyyyy/CVE-2025-55182-Dockerized Original POC by github.com/msanft.05 Dec 2025 01:32 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3m77dpevifc2fhttps://bsky.app/profile/appsec.bsky.social/post/3m6vfftcfr22ySuper excited for the World Cup draw on Friday. ⚽️ 🥅 Can't wait to see what matchups we can attend!01 Dec 2025 02:36 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3m6vfftcfr22yhttps://bsky.app/profile/appsec.bsky.social/post/3m6i3uzbofs2zWriting is something I'm always challenging myself to be better at. This fall, my friend @themattvirus.bsky.social and I were pleased to attend BruCON, a security conference in Belgium and I've finally managed to put together my BruCON review: https://blog.adamschaal.com/posts/2025-11-20-brucon/25 Nov 2025 19:41 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3m6i3uzbofs2zhttps://bsky.app/profile/appsec.bsky.social/post/3m5peuljty22aI always appreciate the little details in the DEF CON 402 ornaments from @tvidas.bsky.social like this one from 2020. Hard to believe how long our community has been together, really thankful for the friends I've made in dc402.org. ⚡ talks in December!15 Nov 2025 23:45 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3m5peuljty22ahttps://bsky.app/profile/appsec.bsky.social/post/3m3t7vn3brs25Yes, @themattvirus.bsky.social and I visited the Louvre on our trip to BruCON. Yes, we cased the jewels, and noted that their cameras were obsolete [1] for our talk, but no, we did not steal them. [1] https://www.artnews.com/art-news/news/french-audit-louvre-robbery-security-flaws-no-cameras-123475796823 Oct 2025 01:36 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3m3t7vn3brs25https://bsky.app/profile/appsec.bsky.social/post/3lzoohk32r22mSpeaking at BruCON in t-minus 12 hours with @themattvirus.bsky.social. We've prepared as much as we can with waffles, beer, and club mate, we are almost fully Belgian now. 🇧🇪25 Sep 2025 19:23 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3lzoohk32r22mhttps://bsky.app/profile/appsec.bsky.social/post/3lutr7hbil22gBluesky vs Twitter on my pixel fold.26 Jul 2025 04:50 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3lutr7hbil22ghttps://bsky.app/profile/appsec.bsky.social/post/3ls4txadi3c2fAt AWS, our GenAI development is moving at 🚀 warp speed. With new tools popping up faster than browser tabs in my macbook, my team created Nebula – a system to track all our GenAI initiatives. Today, we just launched an AI assistant to help upload new tools to Nebula tracker.21 Jun 2025 15:17 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3ls4txadi3c2fhttps://bsky.app/profile/appsec.bsky.social/post/3lqrykh6wu22hThrilled to share that @themattvirus.bsky.social and I are speaking at BruCON this year! The lineup is 🔥 so far and we can't wait to reconnect with our amazing European hacking friends. Always a highlight to be among that fantastic community. www.brucon.org https://www.brucon.org04 Jun 2025 14:15 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3lqrykh6wu22hhttps://bsky.app/profile/appsec.bsky.social/post/3lqlqn3zwk22m🎯NIST's updated security guidelines finally hit the mark. 1. No more forced password changes 2. Longer passwords beat complexity rules 3. Security responsibility shifts to providers where it belongs. Common sense security FTW. https://pages.nist.gov/800-63-4/sp800-63b.html02 Jun 2025 02:37 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3lqlqn3zwk22mhttps://bsky.app/profile/appsec.bsky.social/post/3lkmi7uy3ic25Believe. https://www.nytimes.com/2025/03/14/arts/television/ted-lasso-season-4.html18 Mar 2025 01:08 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3lkmi7uy3ic25https://bsky.app/profile/appsec.bsky.social/post/3lkcqh5o5yc2x1/n - Today at kernelcon.bsky.social, we were notified that our registration was down. We immediately jumped on our phones to check and sure enough, clicking our registration buttons led to a 503. However, our eventzilla admin page was up, and we could access our event through that site, hmm? https://kernelcon.bsky.social14 Mar 2025 04:09 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3lkcqh5o5yc2xhttps://bsky.app/profile/appsec.bsky.social/post/3lk44cowinc25For 311 day, don't forget to kick it Omaha Stylee and get your tickets to @kernelcon.bsky.social! https://youtu.be/rokq0CIfXXk?si=3jVlNG1ymPiapeUh kernelcon.org11 Mar 2025 12:52 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3lk44cowinc25https://bsky.app/profile/appsec.bsky.social/post/3ljnfrku6e22gKernelcon Agenda is LIVE! kernelcon.org/agenda Room block closes on March 7th, please go get your rooms and tickets now. https://kernelcon.org/agenda05 Mar 2025 16:32 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3ljnfrku6e22ghttps://bsky.app/profile/appsec.bsky.social/post/3ljbt5idazc24🤦‍♂️ What is going on? https://therecord.media/hegseth-orders-cyber-command-stand-down-russia-planning01 Mar 2025 01:59 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3ljbt5idazc24https://bsky.app/profile/appsec.bsky.social/post/3lipdbuvqy224I hate pointing out flaws in a system and the subsequent team expecting my team to own the outcome of escalating for a fix. Ownership is maybe the most important trait of a team leader.21 Feb 2025 17:27 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3lipdbuvqy224https://bsky.app/profile/appsec.bsky.social/post/3lhaantpjw22hMore details on kernelcon.org/robo-race. There might be some custom swag for participants who bring their own robot for the competition! [contains quote post or other embedded content]03 Feb 2025 00:05 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3lhaantpjw22hhttps://bsky.app/profile/appsec.bsky.social/post/3lggzg6pi2c22This is really exciting... I can't wait to see what our community comes up with. Prizes for fastest and best dressed robot! And for the robo-curious we will have our own to play with. [contains quote post or other embedded content]23 Jan 2025 23:19 +0000at://did:plc:usj262nasbeukjtilhbsvbxt/app.bsky.feed.post/3lggzg6pi2c22