If you want to prepare for a penetration test, the most useful work happens before the testers touch your app. A penetration test is a security test where someone tries to find and prove weaknesses in your system, with…
Miguel De Guzman
@miguel
Excessive agency is what OWASP calls the risk of an AI agent that can do more than its job needs. When you connect a model to email, files, a database or a payments API, every tool you hand it is something it might use…
Broken access control is when your app lets a signed-in user see or change something that belongs to someone else, or reach a feature meant for a different role. It is the most common serious flaw in web apps, and it is…
If you want to record a tutorial video with webcam and screen together, you do not need editing software to put your face in the corner afterwards. In Cheap Recorder the preview in Chrome is the recording, so you place…
A client demo video works best when your client can jump straight to the part they care about, read what you said, and download the files without asking. Cheap Recorder can write a small page file next to your recording…
A screen recording for bug reports shows the developer exactly what you did and exactly what went wrong, so nobody has to guess from a paragraph of text. This guide shows you how to record one window or tab in Chrome…
Plenty of people want to understand AI safety, whether to change careers, to work on policy, or simply to follow the arguments properly. Most start with a reading list, open the first paper, and stall somewhere around…
AI alignment is the work of making AI systems do what we intend. That sounds simple, and for a spreadsheet macro it is. For systems that learn their behaviour from data and rewards rather than following rules someone…
Every chat assistant you have used was shaped by a technique called reinforcement learning from human feedback, or RLHF. It is the main reason a language model answers your question instead of rambling on in the style of…
Few ideas in AI safety are argued about as hotly as deceptive alignment, also called scheming: the possibility that an AI system could behave well during training because it understands it is being trained, while…
Ask a cleaning robot to minimise the mess it can see, and the easiest solution may be to cover its camera. Nothing has gone wrong with the robot. It found the cheapest way to score well on the objective it was given.…
A week is enough time to revise for most exams, if you spend it on the right things. The common plan of rereading every chapter and highlighting it again feels safe and works poorly. This guide shows how to revise for an…
Most people take a practice quiz, look at the score, feel either relieved or worried, and close it. That throws away the most useful part. A quiz result is a map of what you know and what you do not, and read properly it…
Your phone is probably full of them: photos of the whiteboard at the end of class, pages of handwritten notes, a diagram the teacher drew in the last five minutes. They are taken with good intentions and almost never…
If you have ever read a chapter twice, felt sure you knew it, and then gone blank in the exam, you have met the gap between recognising something and remembering it. Psychologists have studied that gap for decades, and…
Testing yourself is one of the best-supported ways to learn, and one of the least used. The reason is simple: writing practice questions from a textbook takes longer than reading the chapter again. Study Shot removes…
Most security problems in a young web app are not exotic. They sit in the two places every product has to get right on day one: sign-in, where a mistake hands someone else's account to a stranger, and payments, where a…
Adding an AI assistant to a product is now a weekend job. Prompt injection testing, the work of checking what the assistant does when someone tries to turn it against you, usually is not done at all. Prompt injection is…
Captions used to be a job for after the recording: export the video, upload it to a transcription service, wait, fix the mistakes, then line the text up with the picture. If you record in Chrome, much of that can happen…
You recorded a Teams meeting, and the file has your voice and nobody else's. The usual reason is not a broken microphone or a wrong setting in Teams. It is where the meeting was running. This article explains why the…
Screen recording no sound? It is one of the most common recording problems, and one of the most frustrating, because you usually find out after the moment has passed. The good news is that it almost always comes down to…
A podcast recorded as one mixed file is fine until something goes wrong in it. A guest who sat too far from the microphone, a cough over someone's best line, one cheap microphone that hums: in a single mixed file, fixing…
You press record, the call goes well, and afterwards the file holds only your own voice. Everyone else on the call is missing. If that has happened to you, nothing was broken. Chrome simply never handed their sound to…