Love this version.
Borepatch
Internet Security, music, and Dad Jokes. And pets - it's a blog, after all.
Wednesday, December 10, 2025
Tuesday, December 9, 2025
Gartner Group recommends companies ban AI browsers
This is big news. Gartner Group is the largest IT trend analysis firm, used by essentially all large corporations. They just recommended blocking the installation and use of AI browsers:
Agentic browsers are too risky for most organizations to use, according to analyst firm Gartner.
The firm offered that advice last week in a new advisory titled “Cybersecurity Must Block AI Browsers for Now,” in which research VP Dennis Xu, senior director analyst Evgeny Mirolyubov, and VP analyst John Watts observe “Default AI browser settings prioritize user experience over security.”
I've posted about the risks of AI browsers. Gartner's recommendations track mine:
Gartner’s fears about the agentic capabilities of AI browser relate to their susceptibility to “indirect prompt-injection-induced rogue agent actions, inaccurate reasoning-driven erroneous agent actions, and further loss and abuse of credentials if the AI browser is deceived into autonomously navigating to a phishing website.”
The authors also suggest that employees “might be tempted to use AI browsers and automate certain tasks that are mandatory, repetitive, and less interesting” and imagine some instructing an AI browser to complete their mandatory cybersecurity training sessions. [Highlighting mine - Borepatch]
The highlighted bit is a very clever way to get attention from IT departments. Not only will it irritate the IT Security team but it will focus the Risk Management team on potential loss of SOC2 compliance. This is a very Gartner way of getting eyeballs from the CISO and CIO. Like I said, clever.
And yeah, I agree 100% with Gartner on this.
Sunday, December 7, 2025
St. Ambrose - Veni Redemptor Genitum
St. Ambrose is often described as one of the four Latin Doctors of the Church*, influential theologians who established the foundations of the church in the fourth century. Unlike his compatriot Doctors, Ambrose was a most unusual saint. He was the Roman governor of the province around Milan when he (kind of accidentally) became bishop of Milan. He was quite popular as Governor and when the crowd was beginning to get rowdy debating who would become the next bishop, someone called out his name as a suggestion. Suddenly it was a done deal.
Except there was this little problem: not only was Ambrose not a priest, he wasn't even baptized as a Christian. The crowd wasn't about to let minor issues like that stand between them and their new bishop. So Governor Aurelius Ambrosius became Bishop Ambrose.
He was a force to be reckoned with, even excommunicating Emperor Theodosius the Great (I think that this was the first time this had ever happened).
He also composed the first Christmas Carol, Veni Redemptor Genitum (Come, Redeemer of the Nations). It is still performed today, 1650 years later.
Latin:
Veni, redemptor gentium;
ostende partum Virginis;
miretur omne saeculum:
talis decet partus Deum.
English translation:
Come, Redeemer of the nations;
show forth the Virgin birth;
let every age marvel:
such a birth befits God.
Now the Christmas season is upon us. It seemed right to start our annual christmas music posts with the very first Christmas carol.
* The others are St. Jerome, St. Augustine, and St. Gregory the Great. It was sort of a Murderer's Row lineup of the early Church batting order.
Saturday, December 6, 2025
Alan Jackson - "Let It Be Christmas"
This is one of my favorite Christmas songs. Country music can tend to the sentimental, and all the best Christmas music does too. The marriage of these combine beautifully. If you're not a fan of the sentimental, you might want to pass this by. But if you're like me, then enjoy.
Friday, December 5, 2025
Road Trip IX - Jim Hamm Nature Area
The Jim Hamm Nature Area in Longmont Colorado is a twenty-four acre park, nature preserve, and bird sanctuary. There's a fourteen acre pond that attracts migratory birds and views of the mountains that comprise the Front Range. Jim Hamm's grandfather farmed the land and Jim grew up spending time there.
Jim Hamm was commissioned as an officer in the Air Force and deployed to Vietnam as a F-4 Phantom pilot. On March 14th, 1968, his aircraft was making close air support passes in support of a helicopter evacuation when he was hit and shot down. His body was not recovered and he is still MIA.
The family donated the land in his honor and in honor of all the local men that served in Vietnam. In addition to the nature walks and habitat, there is a memorial, as well as two picnic shelters. The county school system uses the park for field trips. The VFW and the American Legion use the park on Veteran's and Memorial Day.
Thursday, December 4, 2025
Vince Guaraldi Trio - O Tannenbaum
CBS didn't like this soundtrack, and predicted that the show A Charlie Brown Christmas would be a flop. It was wildly popular, and the soundtrack won a Grammy. For obvious reasons.
Tuesday, December 2, 2025
How to attack AI systems
Use poetry. No, really:
In a new paper, “Adversarial Poetry as a Universal Single-Turn Jailbreak Mechanism in Large Language Models,” researchers found that turning LLM prompts into poetry resulted in jailbreaking the models
...Poetic framing achieved an average jailbreak success rate of 62% for hand-crafted poems and approximately 43% for meta-prompt conversions (compared to non-poetic baselines), substantially outperforming non-poetic baselines and revealing a systematic vulnerability across model families and safety training approaches.
Whoops. Looks, this is a new class of attack (seriously, I've been in this biz for a long time and have never seen weaponized verse before), so maybe we need to cut folks some slack here. But I'm somewhat less inclined to do so with AI's track record of falling for 30 year old attacks.
Enjoyed no sooner but despisèd straight,Past reason hunted; and, no sooner hadPast reason hated as a swallowed baitOn purpose laid to make the taker mad;- Wm. Shakespeare, Sonnet 129
Monday, December 1, 2025
Why can't the US Navy build ships?
First, they canceled the Little Crappy Shops (LCS) program as not fit for purpose. Now it's the Constellation class Frigate program that gets the axe:
By 2024, the first ship of the class was 36 months behind schedule, with the second already considered two years behind before its keel was even laid. The plan, as I mentioned before, was to retain roughly 85% of the FREMM frigate design to expedite production, but by that point, the Constellation design retained only about 15% of its parent design. This caused a cascade of other issues, like the need to write new code for a reported 95% of the ship’s control system software due to deviations from the FREMM design it came from, and the incorporation of new equipment and systems.
The Constellation-class frigate seemed to suffer from a classic case of scope-creep, a term used to describe a program that keeps seeing new requirements tacked onto it as it develops, resulting in cost overruns and delays. As one lawmaker put it, the Navy kept chasing a 100% solution to the point where they ended up with 0% of the ship being delivered.
There's more here from the Tech Press, so this is getting attention.
As Yogi Berra once said, if you don't know where you're going you'll end up somewhere else. SECNAV should see to it that the Program Management Office finds itself somewhere else - preferably not working for the Navy. Pour encourager les autres ...
