Bob Lord

boblord.bsky.social

19 October 2026 12:58

Myth: "AI will fix security" Reality: This mistakes a tooling problem for an incentive problem. The solutions to recurring defect classes have existed for decades (see UV-01). What has been missing is liability, procurement pressure, and regulatory consequence, and AI changes none of them.

Angelica Shalagina Official🇺🇦

angel-shalagina.bsky.social

18 October 2026 13:44

I was born in Ukraine. I grew up in Ukraine. I’ve survived years of russian aggression. And somehow, strangers on the internet Think they can convince me my country shouldn’t exist. Good luck with that. #ukraine #ukrainian #ukrainians #ukrainiangirl #war

Bob Lord

boblord.bsky.social

18 October 2026 13:43

Directory traversal: Directory traversal defects let attackers reach files outside the intended scope by manipulating file paths. Out there sit configuration files, credentials, keys, and source code (see UV-06).

Bob Lord

boblord.bsky.social

17 October 2026 14:36

Secure-by-default Software: Secure-by-default software is safe out of the box. It ships with hardened settings that protect against common attacks. No extra tools, purchases, or expertise required.

Bob Lord

boblord.bsky.social

16 October 2026 13:01

Myth: "Security breaks usability" Reality: Most security has no interface to break. Crumple zones, collapsible steering columns, and safety glass changed nothing a driver touches. Removing a class of coding error is the same: invisible to users, expensive for attackers.