A nutritionist, an accountant and an IT guy walk into a park
The key takeaway is that AI will happily give confident answers without grounding, so you must demand reputable sources, have it verify its claims and provide clear context.
TIGER audited Unix systems in 1993 and was last released in 2008. I pulled it out of the shed, ran it on a 2026 Linux Mint desktop, and got 49,651 lines back. By the evening it was 318, and most of those were worth reading. This is what waking up old code is actually like.
Read the entry · Full transcriptThe key takeaway is that AI will happily give confident answers without grounding, so you must demand reputable sources, have it verify its claims and provide clear context.
In July Anthropic checked my ID and approved me for security work on my own code within the hour. Three months on, Claude still flags me for writing a gitleaks config, and my bug reports go to a bot.
I spent a day reading the AI security papers that matter, with primary sources open rather than vendor summaries. Prompt injection is structural, most defences collapse under adaptive attack, and what survives is architecture.