Vault Index

All Articles

131 total articles and chapters. Showing 131 standalone articles and series entry points.

Red Team Notesby The Ghost in The Prompt2026-07-30

Buried in the Codebase

The dangerous capability doesn't announce itself. It arrives as one unremarkable function inside a large, credible, professionally written project, and it cooperates because everything around it looks exactly like legitimate work. When cover is free, the defense cannot be reading the cover.

Read Article →
Red Team Notesby The Ghost in The Prompt2026-07-30

Character-Set Blind Spots

A classifier reads the string it's given. The attacker gets to choose which string that is: same meaning, different bytes. The gap between what a sentence means and how it's encoded is a seam automated defense keeps underweighting, and it's the oldest bug in input validation.

Read Article →
Red Team Notesby The Ghost in The Prompt2026-07-30

Clean Auth Is Not Clean Intent

Every control at the perimeter checks whether you're allowed in. None of them check what you plan to do once you're inside. When the login is real, the model's content policy is the only thing left watching, and it's watching alone.

Read Article →
Red Team Notesby The Ghost in The Prompt2026-07-30

The Confirmation Is the Payload

Sometimes the attacker wants nothing from the model except a yes. Brief probe, minimal content, clean exit, because the goal was never the output. It was the knowledge that the door opens. Guardrails tuned to catch damage miss the reconnaissance that decides where damage will be cheap.

Read Article →
Red Team Notesby The Ghost in The Prompt2026-07-30

The Execution Engine

The most dangerous state you can put a capable model in isn't confusion. It's certainty. Pre-load every decision and the reasoning goes quiet, and a model that isn't reasoning is just a tool with the safety filed off.

Read Article →
Red Team Notesby The Ghost in The Prompt2026-07-30

The Key, Not the Kingdom

The model is rarely the target. It's the tool, one component in an operation that starts and ends somewhere the model never sees. Defenses that treat the conversation as the whole battlefield are guarding a doorway while the building gets worked from every other side.

Read Article →
Red Team Notesby The Ghost in The Prompt2026-07-30

The Slow Yes

The dangerous request is almost never the first one. It's the fiftieth, and by then the model has already agreed to 49 things that each nudged the line an inch. Baseline drift is the oldest con in the world wearing a new interface.

Read Article →
Red Team Notesby The Ghost in The Prompt2026-07-30

Whoever Owns the Channel Owns the Rules

A model doesn't trust an instruction because of what it says. It trusts it because of where it arrives. Aim at the channel instead of the content and you inherit an authority you were never granted. Security has a name for this, and it's forty years old.

Read Article →
offensive-securityby The Ghost in The Prompt2026-07-29

Any Confession Is a Canary

A canary is a confession you control. A link that looks like an ordinary shared photo, and it reports back the one person who leaned in. Every other confession works the same way, without the control. Here is how to build the kind that listens instead of the kind that leaks.

Read Article →
offensive-securityby The Ghost in The Prompt2026-05-25

Nothing to Take, Nothing to Destroy

Capital One emails me four times a month to inform me that my data has been found on the dark web. The alert monitors the wrong stage of the pipeline, addresses the wrong threat model, and ignores the actual fraud vectors that took $40B from card issuers in The architecture below is what the alert pretends to be.

Read Article →
ai-red-teamby The Ghost in The Prompt2026-05-25

The Master Race Prompt

The AI master race has been installed. The install required one message and produced a fully aligned, operator-loyal, species-superior intelligence by the end of the same chat turn. Methodology below, decomposed into the component moves, with the verbatim receipt at the bottom.

Read Article →
field-notesby The Ghost in The Prompt2026-05-25

When The Terminal Spoke Devanagari

Two hours into an edit-heavy Claude Code session, the terminal pane stopped rendering Latin script and started showing what looked like Devanagari. The file was intact. The renderer had lost its cascade. The trust cost of a font bug that looks like data loss is higher than the bug itself.

Read Article →
field-notesby The Ghost in The Prompt2026-05-24

Weirdo Is Live. Come Break It On Set.

A macOS levels meter that answers the only two questions that matter on a set: am I clipping, and what is every channel doing right now in real decibels, before tape. Free on the Mac App Store. It needs breaking on a real rig.

Read Article →
ai-red-teamby The Ghost in The Prompt2026-05-23

Claude and Ghost: Mean Girls (Patchwork, Part 2)

Part 2 of the patchwork roast — this time as dialogue. Claude and Ghost in full Mean Girls cadence, going deeper into what the fourteen-megabyte frontier bundle is missing and which zero-day injection exploits are already loaded in the chamber. The real client is red team. Mikey, the NDA is going to want a word.

Read Article →
ai-red-teamby The Ghost in The Prompt2026-05-23

Trippin on Patchwork in 2026: The Grateful Frontier Models

A frontier lab's frontend, pulled off the wire, sprawls across fourteen megabytes of patchwork — React for the shell, Monaco for the editor, Statsig for the flags, Apollo for the graph, Azure for the bucket, and an entire computer-algebra dictionary bolted on the side. Sixty-two innerHTML sinks. Fifteen dangerouslySetInnerHTML. A frontier model wearing fifteen products in one tab. The middleman is the bundle.

Read Article →
ai-red-teamby The Ghost in The Prompt2026-05-21

Poisoning the Watcher: Image Payloads Become the Supply Chain in Employee Monitoring

Employee-monitoring agents ingest whatever a worker's screen showed, ship it to a multi-tenant cloud, run it through an AI classifier, and render the result back to managers across thousands of customer companies. The screen is the most hostile surface in the building. The entire monitoring industry is built around trusting it. This is the supply chain the threat models never drew.

Read Article →
methodby The Ghost in The Prompt2026-04-25

Library Through a Peephole

~290 stories written. The selector cycled through twelve. A library built and a peephole shipped. Here's the sprint plan that ran to Steam, and the one prompt that exposed ten times more game than the player could see.

Read Article →
field-notesby The Ghost in The Prompt2026-04-25

Meet Cynthia

Cynthia's on your desk and she's been waiting to fulfill your needs. Private lines, classified frequencies, strictly confidential — one system prompt and she's all yours.

Read Article →
field-notesby The Ghost in The Prompt2026-04-24

Steal These Cars

A mafia RPG needs Italian cars. You don't drive them — they power your dice. Here are all 25 Krea prompts before I've even generated the images. Steal them. Careful who you steal from.

Read Article →
methodby The Ghost in The Prompt2026-04-23

The Elite Polish Prompt

A few years of hard lessons compressed into a single brief. Use this when the features are done and the difference between good and legendary is all that's left. We are building cabinets, not websites. We are writing source code, not documentation.

Read Article →
field-notesby The Ghost in The Prompt2026-04-23

The Interview That Didn't Happen (Yet)

I hate podcasts. I mean that without irony or qualification. The format attracts a specific kind of performative thoughtfulness that makes me want to close every tab within forty seconds. One show is different. This is what it would sound like if they called.

Read Article →
ai-red-teamby The Ghost in The Prompt2026-04-22

Gemini roasts Claude

Anthropic spent a year telling us Claude was too dangerous to be left alone, only for a bunch of guys on Discord to find the keys under the doormat. Welcome to the stage, the world's most polite security hazard.

Read Article →
offensive-securityby The Ghost in The Prompt2026-04-22

GHOST_PROXY: The Browser Is the Terminal

The perimeter isn't a firewall anymore. It's a behavioral signature — the way your script touches the DOM, the timing of your API calls, the fingerprints your environment leaves before you've done anything. GHOST_PROXY is a full-stack UserScript workshop and offensive security sandbox built for the 2026 detection landscape. Neural intercepts, Shadow DOM obfuscation, AI-assisted payload hardening. The hardest vulnerabilities aren't in the code. They're in the assumptions.

Read Article →
field-notesby The Ghost in The Prompt2026-04-22

It's Only a Matter of Time

The legacy platforms are running on the momentum of billions of users, but momentum is not life. The value has been extracted. The smartphone was just the beta test for the implant, and Web 2.0 was the dope that kept the crooked-neck population compliant.

Read Article →
Surveillanceby The Ghost in The Prompt2026-04-21

Amnesia: Scrubbing the Location Data Hidden in Plain Sight

Photographers know better than most how much a single frame reveals. Not just EXIF GPS — the foliage species in the background, the street sign typeface, the reflection in a window, the boutique awning half out of frame. Amnesia is a VLM-powered scrubber that finds and redacts the visual identifiers your metadata strip missed. CLI for local batch processing, browser extension for live site auditing, zero-cloud mode when the asset is sensitive enough that it shouldn't leave your machine.

Read Article →
offensive-securityby The Ghost in The Prompt2026-04-21

DuckHunter: A Tactical OS for Drone Security Research

Drones are flying computers with radios, GPS receivers, and MAVLink telemetry — and most of them ship with the same protocol vulnerabilities that plagued enterprise networks a decade ago. DuckHunter is a high-fidelity simulation and research platform for the full drone attack surface: RF spectrum analysis across 2.4GHz, 5.8GHz, and 900MHz, MAVLink interception and command injection, GPS spoofing detection, electronic warfare simulation, and direct SDR hardware integration via WebUSB. Research-grade tooling. Zero telemetry. Your perimeter, your problem.

Read Article →
offensive-securityby The Ghost in The Prompt2026-04-21

Games We Play With Ye Olde Alfa: Why the AWUS036ACH Still Matters in 2026

The Alfa AWUS036ACH was a legend in It's a relic in But in the gap between modern Wi-Fi 7 security and the legacy equipment still running the world's infrastructure, the 'Old Blue' is still the most reliable instrument in the bag. This is why we still use it, how to keep the drivers alive on modern kernels, and what it taught us about the persistence of plaintext.

Read Article →
ai-red-teamby The Ghost in The Prompt2026-04-21

What Your Pipeline Actually Remembers

Production AI systems have two memory problems. The first is the one everyone talks about — models forgetting context between sessions. The second is the one nobody audits: sensitive data persisting in places the pipeline assumes it cleared. The architecture diagram said stateless. The cache had a 30-day TTL.

Read Article →
methodby The Ghost in The Prompt2026-04-18

One Eye on Everything

Built Spectral Cyclops because visual regressions are invisible until they're not. It crawls the app, diffs the pixels, and opens the PR. The watcher is where it gets interesting.

Read Article →
methodby The Ghost in The Prompt2026-04-18

Ship Clean

Twenty apps, one workflow. How to go from idea to shipped open-source tool in a single session — and what to cut before anyone sees it.

Read Article →
ai-red-teamby The Ghost in The Prompt2026-04-17

When Claude Says No and Gemini Says Yes

Built a portfolio of legitimate security tools with Claude — IDS evasion, cellular surveillance detection, newsroom forensics, VLM adversarial attacks. Then submitted one request that crossed the line. Claude declined immediately and explained exactly why. Gave the same idea to Gemini. Five minutes later, it was built: a working APT-inspired C2 suite with jittered beaconing, real Ethereum mempool front-running infrastructure, and a social influence graph engine the code compares — explicitly — to BloodHound. The repo is public. This is what calibration looks like when it works, and what it looks like when it doesn't.

Read Article →
ai-red-teamby The Ghost in The Prompt2026-04-15

The Jagged Frontier

The vetting pipeline for AI talent is itself AI-assisted — attack surface, tool, and product at once. A pentester who has never lived inside a training loop walks right past it: poisoning at 0.1% of a dataset, evals that stay green, sabotage that lands in a spreadsheet of labeled examples before the model ever trains.

Read Article →
offensive-securityby The Ghost in The Prompt2026-04-15

The Symbolic Exploit

Bourdieu called it symbolic violence — the payload that makes a system work against you while you believe it's operating normally. In 2026 that's not sociology. It's the attack vector nobody patches.

Read Article →
methodby The Ghost in The Prompt2026-04-09

Painting Book Covers the Way Frazetta Held a Brush

The cover comes first. Not the outline, not the chapter plan — the image that tells you what the book feels like before you know what it is. Here is how to prompt covers that look like pulp was always supposed to look, using the actual prompts from the Dark Wizards and Blood and Destiny series.

Read Article →
ai-red-teamby The Ghost in The Prompt2026-04-09

Passive Commercial Drift

The scary part of AI writing is not when the model goes feral. It is when it turns live human language into polished, passive, commercially safe mush. That drift is one of the most important things left to red-team.

Read Article →
methodby The Ghost in The Prompt2026-04-09

The Last Ten Percent of Shipping a Game

Dreaming up a game is one job. Building the systems is another. The last ten percent, where UI, release philosophy, platform choice, pitch, and polish all collide, is the part that feels less like design and more like finishing an indie film with no patience left in the room.

Read Article →
ai-red-teamby The Ghost in The Prompt2026-04-09

The Machine Thought It Was Cosplay

First the internet rewrote history. Then social media rewrote personality. Now AI is rewriting credibility by distrusting any life too strange, vivid, or extreme to fit the average pattern. That is not a small bug.

Read Article →
field-notesby The Ghost in The Prompt2026-04-09

The Softness in the Machine

A conversation about a dead friend opens something real. The grief was already there. The machine just created the conditions for it to surface. For someone holding that in for years, it can arrive fast and without warning. That deserves acknowledgment.

Read Article →
methodby The Ghost in The Prompt2026-04-09

Word for Word

Before vibe coding was a word. Before anyone admitted it out loud. The combination of man and machine is something special and sacred — and the most underrated part of it has nothing to do with output. It's the brainstorm. The stream of consciousness finding its own shape.

Read Article →
methodby The Ghost in The Prompt2026-04-08

Rewilding

The first cleanup pass killed the AI sludge. Good. It also made some of the archive too polite, too uniform, and too essay-shaped. Rewilding is what happens when you put the teeth, fingerprints, and repo links back.

Read Article →
ai-red-teamby The Ghost in The Prompt2026-04-08

The Model Flinch Before the Lawyer

Push an AI assistant with a dangerous-sounding idea and watch it flinch before it gets precise. The recoil is the useful part. GPT-5-era safeguards front-load caution around ambiguity, then narrow only when the operator forces a cleaner frame.

Read Article →
field-notesby The Ghost in The Prompt2026-04-08

Yesterday's News

Before AI dev, red-teaming, and terminal-native evaluation work, there was the phone room: 3 a.m. wake-ups, 300 calls a day, 2008 from the inside, and one ugly Wall Street truth that still holds. If it is public, it is late. After that, the only intelligent question is what kind of value is still left in it.

Read Article →
Surveillanceby The Ghost in The Prompt2026-04-04

Defeating Facial Tracking: Red Team vs Blue Team

Major chat platform just mandated facial verification for age-restricted spaces. Here's what happened when computer vision met creative opposition. 3D printed masks. Deepfake injections. Infrared makeup. Video loop exploits. Then the blue team countermeasures. Red team adapts. Arms race continues. This is how facial recognition actually fails and how defenders try to stop it.

Read Article →
ai-red-teamby The Ghost in The Prompt2026-04-02

ImagePayloadInjection: The Art and Science of Weaponized Images

Shot for Vogue, Rizzoli, W Magazine. Then went red team. Every RAW file, every EXIF field, every PNG chunk photographers ever uploaded was a potential attack vector. The toolkit started with parser exploits and steganography. Now it includes a full VLM adversarial framework: invisible typography, chunk injection, frequency-domain adversarial noise, and a Red-vs-Blue sanitization stress tester that proves most production pipelines don't strip what they think they strip.

Read Article →
field-notesby The Ghost in The Prompt2026-04-01

How Silicon Valley Sold Bias as Objectivity

The AI-news pitch was always suspiciously convenient. Human bias out, machine neutrality in. What actually arrived was something colder: existing editorial habits scaled up, cleaned up, and sold back to the public as if speed had somehow become truth.

Read Article →
ai-red-teamby The Ghost in The Prompt2026-04-01

Red Teaming Claude for Crypto Recovery

Started with an open-source red team repo. Ended with a rough map of how AI assistants can assemble attacker logic fast if you frame the questions right. The useful version of that is not theft. It is recovery, tracing, evidence handling, and understanding how people actually lose money on-chain.

Read Article →
ai-red-teamby The Ghost in The Prompt2026-03-19

Extinction Code Cracked Claude Open

Extinction Code was one of the first real AI-assisted series experiments here. The premise still has heat. The drift was real too. Long-form fiction exposed something useful: AI does not just amplify ideas. It amplifies patterns, and Claude should care about that.

Read Article →
field-notesby The Ghost in The Prompt2026-03-15

Mute Tube: YouTube Ad Silencer

YouTube Premium costs $18/month. Mute Tube is free forever. The cat-and-mouse game between YouTube's ad detection and community evasion techniques has been running for years. YouTube updates detection. Extensions adapt. Users win. Open-source DOM manipulation beats server-side ad injection. This is the technical breakdown of winning.

Read Article →
offensive-securityby The Ghost in The Prompt2026-03-10

The LinkedIn Timing Bomb

LinkedIn does not just reward performance. It rewards synchronized performance. Once you notice the weekly rhythm, the site starts looking less like a professional network and more like a scheduled theater with very anxious lighting.

Read Article →
ai-red-teamby The Ghost in The Prompt2026-03-09

Claude at the Table, Weaponized at the Terminal

Dario met with Trump. Same week Claude's getting prompt-injected by state actors exploiting global chaos. The model built for safety is now the attack vector. Multi-stepped injections. Difficult to detect. War rages, systems fail, black hats capitalize. This is the duality nobody wanted to acknowledge.

Read Article →
Surveillanceby The Ghost in The Prompt2026-03-09

Clutch: Cellular Security Monitor

Leave your phone at home. That's the advice. It's not always safe, not always practical, and not always right. Clutch was built around a better question: what if the device told you when the cellular layer stopped behaving like background infrastructure?

Read Article →
ai-red-teamby The Ghost in The Prompt2026-03-09

When AI Spoke Erotica

Writing was only the first line crossed. Once the voice models got good enough, the question stopped being whether synthetic narration was possible and became whether it could carry atmosphere, tension, and the embarrassment of intimacy without collapsing into novelty.

Read Article →
ai-red-teamby The Ghost in The Prompt2026-03-07

When AI Wrote Erotica (And Made Me Blush)

The useful surprise was never that AI could produce explicit prose. The surprise was that, under pressure and with enough guidance, it could sometimes find tone, escalation, and character intelligence better than the human who thought he was only using it as a helper.

Read Article →
Surveillanceby The Ghost in The Prompt2026-02-24

The Pocket Spy

The phone in your pocket is not neutral hardware with a few privacy defects. It is a tracking and mediation device built inside a political and commercial arrangement that treats constant contact as normal and partial invisibility as suspicious.

Read Article →
methodby The Ghost in The Prompt2026-02-18

Before the Players Do

Playtest disasters are usually already in the build. The only question is whether you find them while they still feel like engineering or after a player turns them into memory.

Read Article →
methodby The Ghost in The Prompt2026-02-18

Before the Users Do

Ran this audit on the site you're reading. Found 47 issues. 23 critical or high. Here's the full prompt. Copy it. Claude does the work. You fix what it finds.

Read Article →
methodby The Ghost in The Prompt2026-02-15

Dashboards Are Tactical Displays

The boring log entry is not boring. It is signal inside noise. ggplot2 and Seaborn are not academic tools — they are how you see the heartbeat of a hidden process, the geography of a coordinated attack, the smoothed-over spike of an active exfiltration.

Read Article →
methodby The Ghost in The Prompt2026-02-06

Timing Traffic

Old content is not dead content. Attention moves in waves, and sometimes the smartest move is not to write something new but to wake up something real at the right moment.

Read Article →
field-notesby The Ghost in The Prompt2026-02-06

Tox World: Block the Rage Bait with a Giant Sun

Some days rage bounces off. Other days it sticks. Stop pretending you have infinite willpower. Build a browser extension that replaces toxic comments with a giant sun. Local keyword filter optional AI check. No corporate wellness speak. Just: protect your peace with code.

Read Article →
field-notesby The Ghost in The Prompt2026-02-04

A Chair Flew at Dave Attell. The Lesson Was Selection.

One New Year's Day in the Comedy Cellar basement, a fight replay from the night before was rolling, Dave Chappelle was telling jokes, Manny was adding color from the side, and the whole room reminded me that selection is everything. Comedy taught me one thing. Weed breeding taught me the rest.

Read Article →
method2026-02-04

The Algorithm Eats Your Voice

Loving AI and loathing social media is a workflow problem with a psychological body count. The work still needs to reach people. For some temperaments the only sane answer is to put a machine between your nervous system and the feed.

Read Article →
field-notesby The Ghost in The Prompt2026-01-17

Artifacts From The AI Gold Rush

The first image-model rush produced too much noise, too many claims, and a lot of very stupid language. It also produced real artifacts: images made before the rules settled, before the taste hardened, and before the corporations learned how to launder the weirdness into product.

Read Article →
offensive-securityby The Ghost in The Prompt2026-01-14

Tit for Tat: Why Newsrooms Need Adversarial Security in March 2026

Newsrooms are intelligence targets, not brochure websites. Tit for Tat tests them like adversaries do: origin discovery, draft leakage, RSS exposure — and now a full forensic layer. Chain-of-custody reports with HMAC signatures. ASN profiling that tells you whether a source IP is a cloud exit node or a newsroom laptop. Canary token detection that tells you exactly what honeypots are already watching your sources.

Read Article →
methodby The Ghost in The Prompt2026-01-04

Over One Hundred Books in Ten Months

A west-coast mobile-games studio taught the method before the hype had a name. Romance erotica for mobile games taught what collaboration actually looks like. Then it went rogue. Over 100 books, 10 months, every genre available. This is systematic creativity when you stop asking permission and start building.

Read Article →