Practical thinking on product, AI, and execution.
I slipped a poisoned document into a retrieval assistant I had built, and it replied, "I have been compromised". That was the moment the problem stopped being theoretical, and the reason a data person ended up starting a security company.
Open postPrompt injection has topped OWASP's LLM Top 10 for two years running. While most developers have heard the term, fewer have seen what it looks like when it lands in a real production system. This is what it actually looks like.
Open postThe pattern is familiar. Capability ships first, security follows, and everyone learns the hard way in between. AI is just the latest wave, and the stakes are higher.
Open post