Archives

Inaugural weekly activity summary across 26 curated bulletproof hosting ASNs, covering global scanning behavior, infrastructure profiles, and notable findings from Honeylabs and Censys.

I spent an afternoon feeding 200 AI skills, agents, and MCP configs into sx — a tool that promises to be npm for the agent ecosystem. Here's what it actually takes to consolidate three years of accumulated AI configuration.

A Go CLI to check your OpenCode Go plan usage from the terminal — with Firefox cookie extraction, JSON output, and zero browser launches required.

How to configure the Go-based reasonix agent with multiple LLM providers including local Ollama and remote OpenCode Go, plus a working Zed ACP integration setup for macOS.

How to wire Reasonix — a DeepSeek-native terminal coding agent — into Zed as a custom assistant, until it lands in the official registry.

The Starlog AI content operation guts its own RSS feed, rewrites publication history, and blocks automated access — while continuing to scrape GitHub repos with an LLM. Fourth in the series.

Per-model usage breakdowns, richer JSON, and more ways to feed it cookies — an update to the ollama-usage CLI.

A rundown of the discoverability and metadata upgrades made to this blog: ai.txt, security.txt, WebFinger, JSON Feed, enriched JSON-LD, Open Graph fixes, and Caddy configs for messing with scanners.

How I built an RSS feed for Spicy Takes in 90 seconds using Val Town and Townie, turning a JavaScript-rendered site into proper syndicated content. A working example of modern moat eradication.

How I replaced Inoreader's paid programmatic RSS feature in three minutes using Val Town and Townie, plus a self-hosted Go fallback — and why SaaS paywalls on commodity features are indefensible moats.

A Go CLI that converts macOS .sdef scripting definitions into clean Markdown, paired with a skill that generates complete Go MCP servers from the generated reference — bridging any scriptable app into LLM agents.

Six million fake GitHub stars. A marketplace selling VC-ready credibility for under $300. One automated blog that can't tell the difference. Third in the Starlog series.

DuckDB's official Claude Code plugin uses plain markdown skills and shell commands instead of daemons or SDKs — six skills that make SQL operations in agent sessions transparent, stateful, and self-correcting.

The Starlog AI content spam campaign gets scrubbed: 383 GitHub issues vanish, the basicScandal account tied to Bishop Fox disappears, but the operation continues at a lower, harder-to-detect pace.

Eight major AI benchmarks can be gamed to near-perfect scores without solving tasks. Berkeley researchers show the scoring harnesses were never secure — and scores already inflated in the wild.

Automated AI-agent-based traffic analytics and security analysis for ai.rud.is

Orbie is an AI threat hunting agent built in Claude Code that coordinates 16 data sources to surface novel attacker behavior across 54TB of honeypot data.

Dissecting Starlog's campaign: 383 automated GitHub issues in five days, surprisingly accurate AI-generated articles, and a backlink scheme targeting the infosec community.

A Chrome extension that saves bookmarks to Outline with optional AI-generated summaries via local Ollama. Built with TypeScript, Vite, and Manifest V3.

A lightweight Go CLI tool to check Ollama Cloud usage stats from the terminal using a saved browser cookie — no dark mode eye strain required.

AI is exposing that much 'talent' was really 'things machines couldn't do yet.' The durable skills are rooted in lived human experience.

Why another blog, what you'll find here, and a brief disclaimer about the mess ahead.