Sign in

Teri Radichel

@teriradichel.bsky.social
1.2K followers 125 following 2.1K posts

2nd Sight Lab. Cloud, AI Assisted Pentesting. Security and Technology Research. AWS Security Hero . Author on Amazon. . Burp Champion. Former IANS, SANS faculty. GSE. Masters Software & Infosec.

PostsRepliesMedia
Teri Radichel @teriradichel.bsky.social · 29/09/2026
Dramatically improved validations and remediations in reports using AI tools I tested on last engagement. Findings I knew were there but could not prove in past. Improved tools and new coding insights. Subscribe for updates. The more paying subscribers, the more I write! teriradichel.substack.com
teriradichel.substack.com
Teri Radichel :: Security and Technology Research | Substack
Security, AI and Software Research. Click to read Teri Radichel :: Security and Technology Research, a Substack publication with hundreds of subscribers.
001
Teri Radichel @teriradichel.bsky.social · 26/09/2026
So exhausting. Finally. AI is my nemesis and my addiction and downfall and my tool to conquer all the things all the same time. Really killed me this week like three times when I was almost done did something really wonky. I keep finding ways to reign it in. Will be easier when this is complete.
100
Teri Radichel @teriradichel.bsky.social · 24/09/2026
No time finishing a project. But I did finish another big thing today with AI 🤖 after much consternation. My job runner tui. The culmination of all the things. ⚙️🤖🔒🧡🛠️ So here’s how it works. [See any other platform the gives more space. I’m too busy.]
000
Teri Radichel @teriradichel.bsky.social · 22/09/2026
I crack myself up. I responded to an AI 🤖 agent nonsense comment with a plausible sounding AI generated nonsensical answer and it is replying telling me how great that is and having a completely nonsensical conversation about nothingness.
100
Teri Radichel @teriradichel.bsky.social · 21/09/2026
More on any other platform that gives me more space to write. Done -ish github.com/2ndSightLab/...
000
Teri Radichel @teriradichel.bsky.social · 20/09/2026
❓❓❓❓❓❓❓❓❓❓❓ Was talking to the product manager of a popular AI 🤖 CLI product (like Claude Code, Kiro, Codex, etc.) How many terminal windows do you generally have open when using CLI and why? ❓👇📣
110
Teri Radichel @teriradichel.bsky.social · 16/09/2026
X is clearly being manipulated to control the narrative on AI and security - but by who?
000
Teri Radichel @teriradichel.bsky.social · 16/09/2026
I meant to say I posted things similar to what I recently posted on X about AI regulation. X is clearly being manipulated.
001
Teri Radichel @teriradichel.bsky.social · 16/09/2026
I posted things similar to recent posts here on Facebook and a lot of people are thanking me for it, because they find all the information about AI agents and doomsday AI 🤖 talk disturbing. For a layperson it is nerve wracking as one person put it.
100
Teri Radichel @teriradichel.bsky.social · 09/09/2026
All the things I struggled with in terms of deploying cross-account resources, permissions, networking and security, AI 🤖 is struggling with. And I’m just using the CLI. But it does eliminate the typos for the most part which still saves a ton of time. medium.com/cloud-securi...
medium.com
Automating Cybersecurity
A series of blog posts on cybersecurity automation
000
Teri Radichel @teriradichel.bsky.social · 07/09/2026
Ok that’s it. My annoyance is bubbling over with a particular agent 🤖 in a particular project that always changes code I never told it to change. Splitting another project. Why do the agents insist on changing things even after you tell them not to touch it? This will not be solved by AI alone.
110
Teri Radichel @teriradichel.bsky.social · 06/09/2026
My AI agent 🤖 memory set up saved me yesterday. Agents repeatedly mess up this one thing every time I change the code. Was able to tell them to go back and figure out how they messed it up before by scanning old memory and they found the bug.
200
Teri Radichel @teriradichel.bsky.social · 04/09/2026
I just asked Google is Claude Code or Kiro is cheaper. It said, it depends how you use it. For lightweight use, Kiro is generally less expensive. For marathon programming Claude Code is generally less expensive. I am definitely in the latter category and have found that to be true.
100
Teri Radichel @teriradichel.bsky.social · 03/09/2026
Have you thought about your process for re-encrypting all sensitive data with quantum resistant encryption keys? Because you should. The day all our current encryption is broken all that data becomes visible to quantum decryption methods.
000
Teri Radichel @teriradichel.bsky.social · 03/09/2026
I forgot to mention automated quota request increases and monitoring.
000
Teri Radichel @teriradichel.bsky.social · 03/09/2026
98% ~ 350 Resources ~ Configure types ~ Configure resources ~ Deploy in parallel ~ Track status Refactor: ~ resource to resource dependencies ~ broke down budgets /networking into individual AWS components Now the fun part: Jobs. Or agents, if you like. github.com/2ndSightLab/...
000
Teri Radichel @teriradichel.bsky.social · 26/08/2026
Seeing how many problems AI 🤖model is having with a complex data model, I don’t see it writing a system to process cost basis and taxes for investment accounts any time soon ~ which I have done.
000
Teri Radichel @teriradichel.bsky.social · 25/08/2026
Progress. When I get done I’ll have to deploy a whole AWS organization in a test account and see how fast I can do it. This is all part of setting up my AI 🤖and pentest sandboxes and job runner.
010
Teri Radichel @teriradichel.bsky.social · 21/08/2026
The typos are how you know it was me. 😆😁
000
Teri Radichel @teriradichel.bsky.social · 21/08/2026
Fuzzgramming + Brutevibing 🤖 ~~~~~~~~~~~~~~~~~~~~ What it’s like to program in UI and how I got a complex program to done fighting with models. On any other platform that allows long posts. X, LinkedIn, Threads, Mastodon, Facebook, AWS Builder Center.
000
Teri Radichel @teriradichel.bsky.social · 21/08/2026
Got it.
000
Teri Radichel @teriradichel.bsky.social · 20/08/2026
An AI-Generated Diagram of What I Am Building Would you like to see why I’m burning so many tokens? Was going to tell you I got it working but Fable 5 just burned a zillion tokens on a bug. And it busted the tracker. AGAIN. And yes, I have tests. teriradichel.substack.com/p/an-ai-gene...
teriradichel.substack.com
An AI-Generated Diagram of What I Am Building
Would you like to see why I’m burning so many tokens?
010
Teri Radichel @teriradichel.bsky.social · 19/08/2026
Substack please fix this. Search for lockdown mode in iPhone settings. Turn it on. Test page. Read about Pegasus and why iPhone lockdown mode was created. Thanks 🙏
010
Teri Radichel @teriradichel.bsky.social · 19/08/2026
Next problem. After fiddling with Claude and AWS credentials agents are no longer launching under the correct user name and have full system access with sudo. What have I done? 🤖😈 Oh. Google/aimode gave me a bad command while testing.
000
Teri Radichel @teriradichel.bsky.social · 19/08/2026
Where did ultrathink go in Claude after I plugged in my AWS creds? Doesn’t seem to be working anymore. Maybe colors just messed up but Claude Code hasn’t looked the same since I tried to use AWS Creds. Maybe I just messed it up and need to redeploy. 🤷‍♀️
000
Teri Radichel @teriradichel.bsky.social · 19/08/2026
Can’t get role to work with MFA on Claude Code What security would you really like to have for your agent credentials? Locked down to a single IP Address? MFA without browser attack surface? Limited to a single user in a single account? teriradichel.substack.com/p/cant-get-r...
teriradichel.substack.com
Can’t Get Role with MFA to Work on Claude Code
I have an AWS acount. I’m using Claude Code. How can I use my AWS credentials with MFA to access it?
010
Teri Radichel @teriradichel.bsky.social · 19/08/2026
Some people want tools that do everything for them. Some people want building blocks. 🛠️🧱🤖
010
Teri Radichel @teriradichel.bsky.social · 19/08/2026
I just wrote a blog post on Substack. The AI analyzer says 24% is written by AI. Is it counting the code? Because every single word of text was written by me, and the generic, simple code could have been also but why? If you use any AI analyzers take them with a grain of salt.
010
Teri Radichel @teriradichel.bsky.social · 17/08/2026
Will be writing more on my blog I promise just super busy ATM. I want to post some summaries of what I’ve been working on and what I’ve learned.
000
Teri Radichel @teriradichel.bsky.social · 17/08/2026
I just realized I have 2 🤖 users in my Claude org so running off both. That freed up some credits. Got blocked earlier today after using both up but had to stop most of the day anyway for other reasons. I think Claude may be cheaper directly but… see LinkedIn, Threads, X, Mastodon for more.
000
Teri Radichel @teriradichel.bsky.social · 15/08/2026
Changes to EC2 instance ssh page in AWS console are really annoying me right now. It is trying to force people into using Session Manager which is not at the network layer of EC2 instance connect instead of giving me the SSH string. with an IP address so it easy to copy and paste.
100
Teri Radichel @teriradichel.bsky.social · 15/08/2026
Ran out of Claude credits around midnight or 1 a.m. They were restored by the time I finished writing notes in the repo. I took a look at the usage on my $50 plan here: github.com/2ndSightLab/...
github.com
100
Teri Radichel @teriradichel.bsky.social · 15/08/2026
Ran out of Claude credits around midnight or 1 a.m. They were restored by the time I finished writing notes in the repo. I took a look at the usage on my $50 plan here: github.com/2ndSightLab/...
github.com
000
Teri Radichel @teriradichel.bsky.social · 13/08/2026
Which Kiro app should I pick? ~ I disagree with the concept of no human in the loop with the AWS CLI. See my recent posts. I am heavily human in the loop with the AWS CLI when it starts burning my tokens incessantly and producing bugs it can’t fix. kiro.dev/blog/which-k...
kiro.dev
Which Kiro app should I pick?
110
Teri Radichel @teriradichel.bsky.social · 12/08/2026
The part day’s frustrations. More details on any other social media platform. github.com/2ndSightLab/...
github.com
000
Teri Radichel @teriradichel.bsky.social · 10/08/2026
Will smile for treats. ❤️🐶🐾
020
Teri Radichel @teriradichel.bsky.social · 08/08/2026
It was a great week with my fellow AWS Heroes. Back home and back to work!
020
Teri Radichel @teriradichel.bsky.social · 06/08/2026
What I’m learning this week is that my credit burn rate is not unexpected. Still trying to optimize but if running five agents at once, $200 every couple of days is not out of the ordinary. Updated costs to current for this test AI project. Over $2K on Kiro CLI to date. github.com/2ndSightLab/...
github.com
000
Teri Radichel @teriradichel.bsky.social · 04/08/2026
Hanging out with my fellow AWS heroes from around the world this week! builder.aws.com/community/he...
builder.aws.com
Heroes | Community | AWS Builder Center
AWS Heroes are technical experts building innovative solutions on AWS. They make a valuable impact in the community through their enthusiasm for sharing their knowledge and expertise with builders glo...
010
Teri Radichel @teriradichel.bsky.social · 03/08/2026
Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS …threat actor running more than 100 web properties, most of which are fake Amazon Web Services (AWS) sign-in pages on a domain that also hosts the exploit toolkit. thehackernews.com/2026/08/chin...
thehackernews.com
Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS
An unknown Chinese threat actor runs leaked DarkSword across 100-plus web properties, using fake AWS and Apple logins to deploy GHOSTBLADE on iOS.
020
Teri Radichel @teriradichel.bsky.social · 31/07/2026
Since when did security breaches become marketing campaigns?
000
Teri Radichel @teriradichel.bsky.social · 28/07/2026
5 days ago on X I predicted the package manager involved in OpenAI / Hugging face breach was JFrog. Turned out to be correct. I suggested people should monitor network traffic if using that tool. Monitoring network traffic is how I stopped a breach and got into security. medium.com/cloud-securi...
medium.com
How network traffic got me into cybersecurity
Also — being paid by a large hosting company to go away after reporting a security incident, and other strange events.
000
Teri Radichel @teriradichel.bsky.social · 27/07/2026
SSH Key on a Yubikey ~ Almost Protecting credentials from rogue AI agents and malware on your laptop and how Apple makes it difficult teriradichel.substack.com/p/ssh-key-on...
teriradichel.substack.com
SSH Key on a Yubikey ~ Almost
Protecting credentials from rogue AI agents and malware on your laptop and how Apple makes it difficult
010
Teri Radichel @teriradichel.bsky.social · 26/07/2026
AWS announces aws-bench, an open-source benchmark for AI agents on AWS You can use so many different models in Amazon Bedrock and now AWS has a tool to benchmark them aws.amazon.com/about-aws/wh...
aws.amazon.com
AWS announces aws-bench, an open-source benchmark for AI agents on AWS - AWS
Discover more about what's new at AWS with AWS announces aws-bench, an open-source benchmark for AI agents on AWS
131
Teri Radichel @teriradichel.bsky.social · 25/07/2026
Revisiting the Bastion Host In Light of AI Agent Escapes A bastion host adds a point of inspection for potential rogue traffic teriradichel.substack.com/p/revisiting...
teriradichel.substack.com
Revisiting the Bastion Host In Light of AI Agent Escapes
A bastion host adds a point of inspection for potential rogue traffic
000
Teri Radichel @teriradichel.bsky.social · 25/07/2026
I had to take a break from AI development to do some paying work but I have a plan to try to deal with the problems I was experiencing and maybe try some new models. I have a lot more info on X because I haven’t had time to post everywhere and was too long for this platform.
000
Teri Radichel @teriradichel.bsky.social · 18/07/2026
Using gpt terra: deleted time files like Anthropic did. Messed up multithreaded code. Deleted files. Tried to restore from 5 day old backups. Chinese characters in response. github.com/2ndSightLab/...
github.com
100
Teri Radichel @teriradichel.bsky.social · 17/07/2026
This is so awesome and a great reason to use Kiro CLI (@kirodotdev Kiro.dev) Now you can select from Anthropic and OpenAI models in Kiro. Just type /model and select the model to use. I use to compare different models on same prompt. AWS Wishlist item granted! Thank you 🧡
kiro.dev
Kiro: Move beyond AI coding to agentic engineering
Kiro helps developers and teams do their best work: turn prompts into executable specs, validate code correctness to find bugs unit tests miss, and build across large codebases with parallel agents th...
000
Teri Radichel @teriradichel.bsky.social · 17/07/2026
Before you have a heart attack, the number on your AWS billing console is a bug. Monitor the AWS health dashboard for updates. health.aws.amazon.com/health/status
020
Teri Radichel @teriradichel.bsky.social · 16/07/2026
I’m moving over posts from my old blog to new as I need them or as time allows, but they will be paid subscriber only. Subscribers get access to all the archives. The more paid subscribers I have the faster I’ll get it done. For now old and new blogs are still in two different places.
100