Sign in

Ryan Basden

@ryanbasden.com
89 followers 110 following 122 posts

Writer @ ryanbasden.com // Hacker @ empiricsecurity.com #1 photography account about hacking. Previously: @bishopfox.bsky.social Red Team @risk3sixty Pentesting Practice Lead

PostsRepliesMedia
Ryan Basden @ryanbasden.com · 12/09/2026
Listening to non-technical people get frustrated about LLM output is like listening to my in-laws insist that their iPhone switched to Korean all by itself.
000
Ryan Basden @ryanbasden.com · 04/09/2026
Many non-technical people are blindly trusting LLM output the same way older generations blindly trusted "the Google" and cable news.
000
Ryan Basden @ryanbasden.com · 28/08/2026
Despite being a "verified defender" with Daybreak, OpenAI still rejected me when I appealed a warning they sent for generating a simple shellcode loader for research. I verified my identity and the legitimacy of my consulting LLC that I've run for two years now, and apparently that doesn't matter?
000
Ryan Basden @ryanbasden.com · 26/08/2026
Don't make me coin "slopreneur"
000
Ryan Basden @ryanbasden.com · 18/08/2026
Ginny is my new role model. www.youtube.com/watch?v=3QYx...
youtube.com
Ninja Warrior at 74: The Simple Routine Behind Her Insane Strength ft. Ginny MacColl
YouTube video by Sierra Clark
000
Ryan Basden @ryanbasden.com · 04/08/2026
Staking out how I do and do not use LLMs for good. Just in case anyone was wondering if I'm interested in handing over my humanity for expediency. ryanbasden.com/ai.html
ryanbasden.com
AI - Ryan Basden
Where Ryan Basden uses large language models, where he refuses to, and the tools he’s built to keep the line clear.
000
Ryan Basden @ryanbasden.com · 01/08/2026
“Hey, I could tell by your face that you were kind of frustrated on that call” Bro my facial expressions are humanitarian aid compared to what I was actually thinking
000
Reposted by Ryan Basden
nico_n_art (looking for work) @nico-n-art.bsky.social · 19/07/2026
If you want you can also support me on Ko-fi, I will try to post there more often. I just posted a work in progress of the illustration I've been working on this week. It's pretty metal and I'm sure you will love it! ko-fi.com/post/WIP-Le-...
Detail of a black and white pixel art illustration showing part of a face and an eye looking upward
051
Ryan Basden @ryanbasden.com · 30/05/2026
Claude when I stop typing in the chat field and hit Ctrl-G to open Vim
static.klipy.com
Dramatic Man Looks Up in Pain
ALT: Dramatic Man Looks Up in Pain
000
Ryan Basden @ryanbasden.com · 26/05/2026
Going to start using "load-bearing" instead of "cool" and "sick" in regular conversation
000
Ryan Basden @ryanbasden.com · 25/05/2026
LLMs don't have to be able to replace red teams. AI companies just have to convince enough of the market that they can.
000
Ryan Basden @ryanbasden.com · 28/04/2026
Claude API issues are the new us-east-1 outages.
000
Ryan Basden @ryanbasden.com · 17/04/2026
Went to a turtle hospital in Key West today. They drown if they eat plastics that ruin their buoyancy. They develop tumors as we contaminate the water. They get hit by boats/jet skis and become permanently paralyzed. Sometimes it's hard to keep caring about security.
100
Ryan Basden @ryanbasden.com · 28/03/2026
Marketing designs at RSAC were wild this year
100
Ryan Basden @ryanbasden.com · 23/03/2026
Sometimes I wonder if I could ever go back to just being a good people manager. I miss leading and developing teams, but I will never miss the mountain of billable work that usually comes with consulting.
000
Ryan Basden @ryanbasden.com · 20/03/2026
The whole TryHackMe/NoScope thing got me thinking about what training was like when I was a young lad and the changes I've seen in how people learn. 🧵
110
Ryan Basden @ryanbasden.com · 17/03/2026
Fork this repo. github.com/rexrodeo/ame...
github.com
GitHub - rybaz/american-healthcare-conundrum: Investigative data journalism: quantifying fixable waste in US healthcare, one issue at a time. Open-source analysis of CMS, OECD, and federal datasets. $...
Investigative data journalism: quantifying fixable waste in US healthcare, one issue at a time. Open-source analysis of CMS, OECD, and federal datasets. $98.6B in savings identified so far. - rybaz...
001
Ryan Basden @ryanbasden.com · 17/03/2026
Purple team exercises are my favorite work when they go well. Few things burn me out harder than when they're set up to fail and I have to run them anyway. I wrote up the specific failure modes I've seen repeatedly, on both the client side and the consulting side. 🧵
101
Ryan Basden @ryanbasden.com · 02/03/2026
I really love breaking into buildings, but when clients have asked me about the specific threat model, I haven't had a great answer. Here's my attempt at figuring it out. empiricsecurity.substack.com/p/oceans-ele...
empiricsecurity.substack.com
Ocean's Eleven Heists In a Louvre Four World
Are physical security assessments a fun novelty? Or are fewer businesses taking them as seriously as they should?
000
Ryan Basden @ryanbasden.com · 01/03/2026
Oh, this? Yeah, I only use AI on the command line. I’m a bit of a power user. ChatGPT? I’ve heard of it, but Claude just sort of gets me, you know? Plus it understands my Vim commands, so the mental load is almost nonexistent. Vim? Yeah, hard to explain, you might be better off with the web UI.
000
Ryan Basden @ryanbasden.com · 21/02/2026
Spicy blog drafts I've had in the hopper for a long time: - How to Fool Your PCI Auditor and Get That Bag - Continuous Pentesting or Just Continuous Vulnerability Management? - Your Executives Make Phishing Easier For Me and My Friends - A Song of Supply Chains and Drive-By 0-days
110
Ryan Basden @ryanbasden.com · 14/02/2026
If @bsky.app could add TOTP as an MFA option instead of emailing me a code that is not only case sensitive but doesn't use a font that clearly differentiates between uppercase O and the number 0, that would be fantastic.
000
Reposted by Ryan Basden
Empiric Security @empiricsecurity.bsky.social · 12/02/2026
We’ve all seen it: the "compliance-first" mindset that checks every box while leaving the front door wide open, but out of scope. If you’re tired of the theatre and actually want to move the needle, give this a read. empiricsecurity.substack.com/p/how-shadow...
empiricsecurity.substack.com
How Shadow Incentives Harm Real Security
Despite the millions upon millions of dollars thrown at penetration testing ever year, big data breaches are still as common as ever.
021
Ryan Basden @ryanbasden.com · 14/01/2026
One more stressful event away from making disappearing into the woods part of my personality
000
Ryan Basden @ryanbasden.com · 09/01/2026
Have you guys checked out your Kroger 2025 Wrapped yet
000
Ryan Basden @ryanbasden.com · 20/12/2025
beep beep boop
000
Ryan Basden @ryanbasden.com · 20/12/2025
Some of the best hackers I know still manage to overestimate their expertise in completely unrelated fields, medical science being a big one. I can go from soaking in some arcane tech wisdom to fielding batshit takes about vaccines in the span of a few seconds with some of you guys. Why?
000
Ryan Basden @ryanbasden.com · 03/12/2025
Every time I go on a podcast as a guest, I spend the next 24 hours trying to remember if I said anything painfully stupid that will tank my career.
000
Ryan Basden @ryanbasden.com · 01/11/2025
Does Bluesky really still not support TOTP? Can I stop having to copy a code from my email and remove the backticks that it includes?
000
Reposted by Ryan Basden
vx-underground (automated mirror) @vxundergroundre.bsky.social · 03/09/2025
STOP CALLING IT VISHING AND SMISHING YOU SOUND LIKE A FUCKING TODDLER BABBLING NONSENSE ITS PHISHING OR SOCIAL ENGINEERING REEEEEEEEE
0372
Ryan Basden @ryanbasden.com · 19/08/2025
Watch out for people who take your personal growth personally.
000
Ryan Basden @ryanbasden.com · 13/08/2025
Working on a conference talk
000
Ryan Basden @ryanbasden.com · 07/08/2025
"nano is for babies" - crontab
000
Ryan Basden @ryanbasden.com · 23/07/2025
It's a personal conviction of mine that, for how much of the tech industry operates out of Atlanta, there is a serious lack of quality security conferences and communities. But I know some people trying to change that.
100
Ryan Basden @ryanbasden.com · 23/07/2025
Most fun I've ever had speaking at a conference, hands down. If you were there at @wildwesthackinfest.bsky.social , you were the best audience a guy could hope for. www.youtube.com/watch?v=Vrtp...
youtube.com
Solving Dumb Hacker Problems With Nix | Ryan Basden
YouTube video by Wild West Hackin' Fest
000
Ryan Basden @ryanbasden.com · 03/07/2025
I would simply write memory-safe code
000
Ryan Basden @ryanbasden.com · 16/06/2025
Laptop numpads are psychotic, why do I have to overextend my right shoulder just to type
000
Ryan Basden @ryanbasden.com · 11/06/2025
Finally getting around to watching Chernobyl and all I see is a bunch of MBAs making fun of technical experts and high-fiving
000
Ryan Basden @ryanbasden.com · 06/06/2025
If there's anything I can count on BlueSky for, it's showing me all of the stuff I've painstakingly worked to not have to look at on Twitter.
000
Ryan Basden @ryanbasden.com · 29/05/2025
"In addition, ChatGPT doesn’t just itself fail to recognize the difference between fact and fiction, it presents these answers to people who are themselves unable to discern the difference." lmnt.me/blog/the-dys...
lmnt.me
The Dystopian Dream Team
000
Ryan Basden @ryanbasden.com · 20/05/2025
A little tired of getting random junk in conference "swag bags", can I opt out? I don't need fifty branded drawstring bags that I'm just going to donate and might eventually end up in a landfill.
000
Ryan Basden @ryanbasden.com · 19/05/2025
iPad babies can be any age.
000
Ryan Basden @ryanbasden.com · 21/04/2025
Hey Gemini, which spreadsheet does this company store passwords in
010
Ryan Basden @ryanbasden.com · 04/04/2025
imagine still using OOP when you could vibe-code functions and structs
000
Ryan Basden @ryanbasden.com · 28/03/2025
Some of my favorites from Zion National Park. Taken with Kodak Portra 400.
010
Ryan Basden @ryanbasden.com · 25/03/2025
I wish Signal would find a way to make their service censorship-resistant. Can't help but feel like completely abandoning countries that demand encryption backdoors is the wrong move. Better to refuse AND make service use as hard to restrict as possible.
010
Ryan Basden @ryanbasden.com · 18/03/2025
Mudge is the Obi-wan Kenobi that the industry needs right now. Stop what you're doing and read this blog.
010
Ryan Basden @ryanbasden.com · 18/03/2025
Got my personal site running (again) in its new forever location. Any tech writing I do that isn't explicitly meant to be customer facing will be there, including but not limited to: - Rambunctious research - Pontification - Snide commentary - Corporate criticism
100
Ryan Basden @ryanbasden.com · 15/03/2025
Use social engineering to get your competetive friends back to their gym routine and PR #wehackhealth
000