Andrew Kalat

705 Followers
80 Following
1.4K Posts
Elder Nerd. Pilot, IT Security Leader, firearms instructor, speaker, author, photographer. Award-Losing Co-host of the Defensive Security and Getting Defensive Podcasts. Mostly posting about Infosec, Aviation, and cats.
Twitterhttps://twitter.com/Lerg
Defensive Security Podcasthttps://defensivesecurity.org/
Getting Defensive Podcasthttps://gettingdefensive.com/
Youtube Podcast feed:https://www.youtube.com/@DefensivePodcasts
Tikaboo Peak, Legendary Area 51 Viewing Spot, Closed by U.S. Government https://theaviationist.com/2026/05/02/tikaboo-peak-area-51-spot-closed/
Tikaboo Peak, Legendary Area 51 Viewing Spot, Closed by U.S. Government

From 1995 until now, Tikaboo Peak - 26 miles from Groom Lake - offered the closest and best public vantage point with a complete view of Area 51.  A

The Aviationist
@jjbaumgartner I think there is this massive push at the executive level that AI = win. Without really understanding it.

I’m seeing a lot of companies say that they are measuring AI usage as a performance metric.

The assumption is AI usage == efficiency.

I think this is a poor metric. They should try to measure actual efficiency metrics, not tool use. See exhibit A:
https://arstechnica.com/ai/2026/05/amazon-employees-are-tokenmaxxing-due-to-pressure-to-use-ai-tools/

Amazon employees are "tokenmaxxing" due to pressure to use AI tools

Workers are using an internal AI tool to automate non-essential tasks.

Ars Technica
Y'all got any more of them security patches? | iOS 26.5 has fixes for 50 security issues on iPhone, details here https://9to5mac.com/2026/05/11/ios-26-5-has-fixes-for-50-security-issues-on-iphone-details-here/
iOS 26.5 has fixes for 50+ security issues on iPhone, details here - 9to5Mac

In addition to new features, Apple’s latest software updates also include security improvements, with over 50 fixes in iOS 26.5 alone.

9to5Mac

Executives bragging about coding again and shipping production code with AI because they can misses a huge massive point.

Is this really the BEST use of an executives limited time and mental energy?

Sure, it makes them feel productive and “in touch” but the role of a executive should be strategy, setting direction and priorities, hiring and mentoring their staff, holding teams accountable, and enabling their teams to be successful.

This is ego and shiny toy syndrome talking. It’s a distraction from critical high leverage work only they can do.

If you want to fast, go alone. If you want to go far, go together.

@jerry Next stop: UL Listing for professionally built apps.
@aburka Nope. I think good managers are force multipliers who do their best work by ensuring their people have the tools, air cover, priorities and time to do their jobs.
@aburka I think 7 is a reasonable max for effective leadership who actually has time for their people.

So, Brian Armstrong, CEO of Coinbase, published a letter on X about his companies future and his planned layoffs.

You can find the full post here: https://x.com/brian_armstrong/status/2051616759145185723?s=20

So many folks, rightly so, have zeroed in on this sentence with serious angst:

"Non-technical teams are now shipping production code..."

I think this is the inevitable outcome of the past 30 years. First cloud, then SaaS, now vibe coding has moved IT ownership to the masses.

I don't think this is great for security, governance, or oversight, but it's AMAZING for CEOs and boards who just want to go fast and break things and "empower their people."

I'm not belittling "the masses." But they aren't technologists, by and large.

And what is being demanded of them by misguided leaders is to run some massively complex SaaS/Cloud/Coding tool that "Looks Easy Enough" but all of the devil is in the details that only hard core technologist would know or care about.

I believe this is why we have seen so many breaches based on misconfigurations and poor secret management and poor API/Token/Oauth management. The people making those design decisions aren't equipped with the skills to understand the consequences of their design choices.

They are marketing people, or sales people, or HR people, or whatever. They have other important skills, but we have forced IT onto them because leadership massively underestimates the complexity, risk, and specialized knowledge required to run it safely.

"I mean, how hard can a surgery robot be? You just push buttons right? Get the front desk guy to do it!"

This is inevitable, but stupid. Good luck to us all.

Brian Armstrong (@brian_armstrong) on X

This is an email I sent earlier today to all employees at Coinbase: Team, Today I’ve made the difficult decision to reduce the size of Coinbase by ~14%. I want to walk you through why we're doing this now, what it means for those affected, and how this positions us for the

X (formerly Twitter)