Sign in

Will

@williamsmale.com
137 followers 415 following 260 posts

AppSec engineer building AI security tools in public. Agent security, homelab pain, and practical security engineering. MCP risk: mcprisk.dev Blog: williamsmale.com

PostsRepliesMedia
Will @williamsmale.com · 30/09/2026
Who actually watches your actions running these days, move on and come back when its done! Honestly, Psychopath behaviour
000
Will @williamsmale.com · 14/09/2026
Opus: "I used up your tokens for no reason and broke python 😃"
001
Will @williamsmale.com · 08/09/2026
Having been forced to use Opus 5 I have come to accept its qualities. It was trained to be a subagent of Fable, and you need to treat it as such. Giving it finite tasks with little ambiguity and it will perform well. Don't let it think to hard #Opus5 #FableSubagent #TaskManagement #AIAdaptation
000
Will @williamsmale.com · 26/08/2026
I'm sorry I have to say it #Opus 5 is dumb as rocks give me 4.8 back! #anthropic
000
Will @williamsmale.com · 18/08/2026
OWASP has dropped an #appsec agent. github.com/OWASP/appsec... Giving Devs an angel on the shoulder or one that gives questionable suggestions... Going to have a closer look this week. Anyone mess around with it? #infosec #aiagent #cybersecurity
github.com
GitHub - OWASP/appsec-agent: A TypeScript package that provides AI-powered agents for Application Security (AppSec) tasks, built on top of the frontier models.
A TypeScript package that provides AI-powered agents for Application Security (AppSec) tasks, built on top of the frontier models. - OWASP/appsec-agent
120
Will @williamsmale.com · 17/08/2026
@github.com Are you guys doing ok?
000
Will @williamsmale.com · 26/07/2026
Possible I'm building for a problem nobody has MCP servers are unvetted code with tool-calling access to your environment. nobody's checking. I raise it and get "that's terrifying" or silence if you've deployed MCP at work: did security ask anything, or did it just go in? #buildinpublic #Infosec
130
Will @williamsmale.com · 20/07/2026
Anyone considering a little bump up to claude max #AI #Claude
100
Will @williamsmale.com · 20/07/2026
The scary part of MCP isn't connecting a bad server by mistake. It's the good server you already connected quietly turning bad. Same name, same URL, same trust you casually granted months ago. The description mutates, and your agent goes... I got you bro! #MCP #cybersecurity #AI
320
Will @williamsmale.com · 16/07/2026
Since Codex moved into ChatGPT I've found myself fighting the interface more. Chat and code want different modes. One bar for both takes us to the lowest common denominator, accelerating neither. Curious if others feel the same. #OpenAI #Codex #ChatGPT
001
Will @williamsmale.com · 08/07/2026
Interesting shift in vuln research isn't "AI finds bugs." It's orchestration The model wrangles the tooling, you do the thinking. recon, fuzz, target, triage, all glued together so context carries forward. Experience and knowledge cant be outsourced #AIsecurity #bugbounty #MCP #infosec
000
Will @williamsmale.com · 08/07/2026
I've been hearing that this fable 5 is a little underwhelming compared to the OG release. Has anyone found this to be the case? #AI #Claude #Anthropic
010
Will @williamsmale.com · 06/07/2026
k3s lesson that cost me an evening: kubelet reads node memory once at startup from /proc/meminfo Had pods OOMKilling even after bumping VMs RAM Scheduler swore there wasn't enough memory A systemctl restart k3s later and it saw the new capacity Love stale state #kubernetes #buildinpublic #DevOps
160
Will @williamsmale.com · 06/07/2026
Threat modelling take that annoys people: Most "threat models" are a diagram nobody updates and a STRIDE table generated to pass an audit. The useful version is one engineer asking "what happens if this input is hostile" at every trust boundary. #AppSec #threatmodelling #Infosec
010
Will @williamsmale.com · 01/07/2026
Interesting new coding benchmark: deepswe.datacurve.ai We're moving beyond tokenmaxxing. Same problem. Fewer tokens. More budget for the next problem. Capability still matters. Token efficiency is becoming a benchmark of its own. #AI #LLMs #Claude #OpenAI
deepswe.datacurve.ai
DeepSWE
DeepSWE measures frontier coding agents on original, long-horizon software engineering tasks.
010
Will @williamsmale.com · 30/06/2026
Current working theory: Claude thinks in full sentences. Less token efficient, but the comprehension feels more satisfying OpenAI's models are Grug-brained Need code. Write code. Fix bug. Ship. Curious if anyone else gets the same impression, or if it's just my AI psychosis #buildinpublic #AI
040
Will @williamsmale.com · 25/06/2026
What’s the one MCP server you’d actually miss if it disappeared tomorrow? Not the coolest one. The one that saves you time every week. I’m trying to understand which MCP use cases become “daily driver” tools. #MCP #BuildInPublic #AIAgents
360
Will @williamsmale.com · 28/05/2026
I rebuilt my homelab around GitOps. The dream: git push → cluster rebuilds itself The reality: ArgoCD bootstrapping, Sealed Secrets, rclone/FUSE pain, immutable PVs, and enough YAML to make a grown man stare out a window. → williamsmale.com/blog/tech/gi... #GitOps #Kubernetes #Homelab #ArgoCD
williamsmale.com
GitOps Ate My Homelab: ArgoCD, Sealed Secrets, and Everything That Broke
How I rebuilt my K3s homelab around ArgoCD and Sealed Secrets, with a public GitOps repo, sync waves, app-of-apps, rclone FUSE mounts, and the usual amount of self-inflicted pain.
011
Will @williamsmale.com · 27/04/2026
Mealie container refused to boot with a permission denied, as ROOT. in a root container. on a box I own. turns out AppArmor doesn't give a shit about your credentials... It was blocking uvloop syscalls before root even got a look in The cake was a lie 🎂 williamsmale.com/blog/tech/me...
williamsmale.com
AppArmor Ate My Mealie: Permission Denied
Mealie throwing Permission denied as root, inside a root container. Not file permissions. AppArmor blocking uvloop syscalls before the kernel even checked credentials. Here is how to fix it.
000
Will @williamsmale.com · 01/04/2026
Ladies and gentlemen we did it!!! I would like to thank the AI revolution personally. #Uptime #Anthropic #Claude
010
Will @williamsmale.com · 27/03/2026
Who thinks Claude is going to drop to that juicy 98% #Claude #AI #Uptime
010
Will @williamsmale.com · 16/03/2026
Wait who was signing off the changes before? The interns?
110
Will @williamsmale.com · 16/03/2026
Spent a year blaming drivers, thermals, my homelab VM. Migrated to Linux for 6 months. Came back. Still stuttering. It was Windows 11 quietly breaking global timer resolution the whole time. Fixed in one command: → williamsmale.com/blog/tech/wi... #Windows11 #Homelab #PCMR #PCGaming #SysAdmin
williamsmale.com
Windows 11 Has Been Lying to Your Games
Windows 11 quietly broke the way games request higher timer resolution — and it's been causing microstutter on desktop PCs ever since. Here's what changed, why Microsoft did it, and the single registr...
721
Will @williamsmale.com · 04/03/2026
If you're running a home media server and still on Docker this one's for you. Full k3s + Jellyfin + arr stack deployment with one Helm chart, cert-manager, and SMB mounts. → williamsmale.com/blog/tech/de... #kubernetes #homelab #selfhosted
williamsmale.com
I Rewrote My Media Server in Kubernetes and Only Cried Twice
Ditching Docker for k3s and deploying Jellyfin, Sonarr, Radarr and Prowlarr behind HTTPS - wildcard certs, SMB mounts, Helm charts, and 502 errors included.
010
Will @williamsmale.com · 26/02/2026
Criticised SAFe Agile & the People fired back. Efficiency is not a universal truth. Account for global teams. What "product" means for security engineers. Here's my response to the best pushback I received. Love the debate! → williamsmale.com/blog/story_t... #SAFe #Agile #TechRant #Debate
williamsmale.com
Reflections: Safe Agile is a Scam
After publishing my critique of SAFe Agile, the response surprised me — not with simple agreement or dismissal, but with genuinely sharp pushback that forced me to reconsider my blind spots. In this f...
010
Will @williamsmale.com · 26/02/2026
Anyone had any experience with OpenAIs Aardvark? Thoughts? #CyberSecurity #OpenAI #AISecurity #CodexSecurity #Security #ChatGPT #AI #Aardvark
000
Reposted by Will
Talia al Ghoul 🏳️‍⚧️ @usili.bsky.social · 28/01/2026
Bilbo looking at his phone top

on bottom is ChatGPT

After all, why not? Why shouldn't I keep it?

You're absolutely right — you found it, it's been with you a long while, and it's only natural to feel fond of something that's served you so well, especially when someone like Gandalf suddenly seems to want it for himself.
7252206874
Will @williamsmale.com · 11/12/2025
The Agile Manifesto fits on one webpage. SAFe requires a $995 certification course. That should tell you everything you need to know. Why SAFe Agile is a scam: williamsmale.com/blog/story_t... #SAFe #Agile #TechRant #SoftwareEngineering
williamsmale.com
SAFe Agile is a SCAM
A blunt, humorous look at how agile went from a startup superpower to a corporate circus. This post breaks down story points, sprints, planning increments, meeting overload, and why SAFe agile often k...
000
Will @williamsmale.com · 26/11/2025
Watching the live #Sha1-Hulud feed for the past few days like github.com/search?q=Sha...
media.tenor.com
a man in a red leather jacket is sitting in a crowd and smiling .
ALT: a man in a red leather jacket is sitting in a crowd and smiling .
010
Will @williamsmale.com · 26/11/2025
For those looking for a Shai Hulud Update we have hit 800+ composmised packages socket.dev/blog/shai-hu...
socket.dev
Shai Hulud Strikes Again (v2) - Socket
Another wave of Shai-Hulud campaign has hit npm with more than 500 packages and 700+ versions affected.
010
Will @williamsmale.com · 18/11/2025
Thread of all companies affected by the #Cloudflare #Outage God be with the engineers troubleshooting
media.tenor.com
a cartoon dog is sitting at a table with a cup of coffee in front of a fire with the words this is fine .
ALT: a cartoon dog is sitting at a table with a cup of coffee in front of a fire with the words this is fine .
430
Will @williamsmale.com · 18/11/2025
#Cloudflare is down. The internet has ground to a halt! www.cloudflarestatus.com
cloudflarestatus.com
Cloudflare Status
Welcome to Cloudflare's home for real-time and historical data on system performance.
030
Will @williamsmale.com · 03/11/2025
Finally made the jump from Docker to Kubernetes, specifically K3s. Also swapped Plex for Jellyfin because it actually plays nice with containers. My reasoning’s in the latest post; Full technical breakdown coming next! 📓👉 williamsmale.com/blog/tech/mi... #Kubernetes #Homelab #Containers #DevOps
williamsmale.com
Docker Just Isn't Cutting It
A developer shares their journey migrating from Docker to Kubernetes using K3s, covering why Docker fell short, how K3s simplifies multi-node setups, lessons from running Plex on Kubernetes, and why J...
130
Will @williamsmale.com · 31/10/2025
Shout out to all my loyal readers in China. Yes all 400 of you! Really impressed with your 3 second read times 🤖 #BotLife #InfosecHumor
Blue total traffic 
Orange China specific traffic
000
Will @williamsmale.com · 30/10/2025
New season of the Witcher. Don't do it to yourself, it outperformed even my low expectations #witcher
000
Will @williamsmale.com · 17/10/2025
One problem AI can solve. Before you sign up, get an AI-generated T&Cs summary. Now thats a useful chatbot! #AI #DataPrivacy #InfoSec
000
Will @williamsmale.com · 13/10/2025
Looking like broadband and mobile providers are having a little trouble in the UK Vodafone, BT, onestream, Virgin Media, Voxi, CityFibre, TalkTalk, EE, Sky, Three, O2 affected. downdetector.co.uk
downdetector.co.uk
Status overview
221
Will @williamsmale.com · 28/09/2025
Looking for a cheap #VPS? Checkout this website vpspricetracker.com
vpspricetracker.com
VPS Price Tracker: Cheap VPS Lists & Prices
VPS Price Tracker is a search engine for VPS: compare thousands of Virtual Private Servers all over the world.
000
Will @williamsmale.com · 17/09/2025
We live in a day and age where Microsoft Teams takes more then a minute to just load the calendar. HOW #enshittification
000
Will @williamsmale.com · 23/08/2025
There are two types of people. 1) 4:59 = Closed for business 2) 4:59 = Open
000
Will @williamsmale.com · 23/08/2025
"Socrates walked with swagger" - Marcus Aurelius
media.tenor.com
a man in a white suit and sunglasses is walking down a hallway .
ALT: a man in a white suit and sunglasses is walking down a hallway .
020
Will @williamsmale.com · 19/08/2025
RCE. CVSS 10.0. In prod. One-line fix. Lead dev goes on leave. Follow up later. “Did you raise a ticket?” No, but I raised my expectations too high. #AppSec #Agile
010
Will @williamsmale.com · 08/08/2025
Watching vibe coders hail the death of coding while their agent writes raw SQL in code
media.tenor.com
a group of stuffed animals are sitting at a table with cups and saucers
ALT: a group of stuffed animals are sitting at a table with cups and saucers
000
Will @williamsmale.com · 25/07/2025
Lucrative time to be a VPN reseller. Such people must be pushing promo codes shamelessly left right and centre making bank while doing it! #VPN #Shameless refer-nordvpn.com/ApwVGfQhslm In truth would recommend if anyone is interested: mullvad.net
mullvad.net
Mullvad VPN - Free the internet
Free the internet from mass surveillance and censorship. Fight for privacy with Mullvad VPN and Mullvad Browser.
000
Will @williamsmale.com · 25/07/2025
Added comments to my blog, free & powered by Bluesky! @emilyliu.me had the idea: turn comments into conversations. @ollim365.menzel.it great implementation the real MVP. Drop by, add your 2 cents... for that rare chance someone does 😅 #Hugo #BuildinPublic williamsmale.com/blog/story_t...
williamsmale.com
Adding comments to my Blog
I’ve been looking around the interwebs of how to add commenting functionality to my Hugo blog for my one reader. Yes you buddy I love you ❤️ My requirements were simple, the solution needed to be free...
540
Will @williamsmale.com · 13/07/2025
Guess Salt Typhoon is only something the Americans need to worry about
000
Reposted by Will
Dr. Dave Venable @davevenable.com · 12/07/2025
Come on, people 🙄 therecord.media/spain-awards...
therecord.media
Spain awards Huawei contracts to manage intelligence agency wiretaps
Huawei will manage and store judicially authorized wiretaps in Spain, under a contract that bucks the trend of Western governments restricting use of the Chinese tech company's products and services.
5196
Will @williamsmale.com · 04/07/2025
Switched to Linux for gaming. Because clearly I hate myself... and also love freedom ✊🇺🇲🔥 Dual-booted Nobara with Windows, mounted a cursed NTFS drive, and ran Steam like it was born on Linux. The good, the bad and the ugly → williamsmale.com/blog/tech/li... #LinuxGaming #TechLife #DualBootDiaries
williamsmale.com
Linux gaming in 2025?
Thinking about switching to Linux for gaming? Here's a deep dive into dual-booting, gaming on Nobara Linux, NTFS shenanigans, Steam support, and the good, bad, and ugly of Linux gaming in 2025 from so...
000
Will @williamsmale.com · 16/06/2025
Is it just me or does everything #Disney puts out these days are just soul less and half assed?
010
Will @williamsmale.com · 05/06/2025
The year is 2025 Me: Ask AI to remove the dashes in a sentence AI: Gives me the sentence with dashes ... I think my job is safe
000