https://lapseofsanity.net/Notes on AI security by Marnick Vandecauter: refusal robustness, prompt-injection defense, and honest evaluation of models.Hugoen-US2026 Marnick VandecauterThu, 01 Oct 2026 00:00:00 +0000https://lapseofsanity.net/posts/eagxoxford-2026/Thu, 01 Oct 2026 00:00:00 +0000https://lapseofsanity.net/posts/eagxoxford-2026/Three days in Oxford talking about frontier risk, fragile funding, warning shots we ignored, and how to actually ship research.https://lapseofsanity.net/posts/security-weekly-unlocked-my-first-coin/Sat, 23 Jan 2021 19:00:00 +0000https://lapseofsanity.net/posts/security-weekly-unlocked-my-first-coin/Notes on the first Security Weekly Unlocked conference, and the first challenge coin I earned.https://lapseofsanity.net/posts/python-for-pentesters/Sun, 15 Nov 2020 10:00:00 +0000https://lapseofsanity.net/posts/python-for-pentesters/A review of Udemy's Python for Penetration Testers, and the DVWA login brute-forcer I wrote after it.https://lapseofsanity.net/posts/introduction-to-cybersecurity-1020/Thu, 05 Nov 2020 16:00:00 +0000https://lapseofsanity.net/posts/introduction-to-cybersecurity-1020/A review of Cisco's free Introduction to Cybersecurity course, and who it is actually for.https://lapseofsanity.net/posts/learn-ethical-hacking-from-a-z/Thu, 05 Nov 2020 16:00:00 +0000https://lapseofsanity.net/posts/learn-ethical-hacking-from-a-z/Why I cannot recommend Udemy's Learn Ethical Hacking From A-Z, even at a price of zero.https://lapseofsanity.net/posts/one-c2-implant-a-day/Mon, 19 Oct 2020 16:00:00 +0000https://lapseofsanity.net/posts/one-c2-implant-a-day/A review of Udemy's Offensive Security Engineering course, and how I extended the custom C2 implant it builds.https://lapseofsanity.net/posts/getting-this-blog-up-and-running/Sun, 18 Oct 2020 21:50:00 +0000https://lapseofsanity.net/posts/getting-this-blog-up-and-running/Setting up Jekyll with a customised Chirpy theme on GitLab Pages, including the mistakes made on the way.https://lapseofsanity.net/posts/XSS-in-Buddyboss/Wed, 30 Sep 2020 16:00:00 +0000https://lapseofsanity.net/posts/XSS-in-Buddyboss/F[0x05]: a reflected XSS in the BuddyBoss WordPress plugin, found while testing a non-profit's platform.https://lapseofsanity.net/posts/XSS-in-markdown-live-preview/Thu, 13 Aug 2020 16:00:00 +0000https://lapseofsanity.net/posts/XSS-in-markdown-live-preview/F[0x04]: a reflected XSS in the Markdown Live Preview online editor.https://lapseofsanity.net/posts/CLT-Data-Leak/Wed, 05 Aug 2020 22:00:00 +0000https://lapseofsanity.net/posts/CLT-Data-Leak/F[0x03]: a KU Leuven language institute platform exposed personal data through an endpoint with no authentication at all.https://lapseofsanity.net/posts/RCE-KUL-platform/Mon, 03 Aug 2020 21:00:00 +0000https://lapseofsanity.net/posts/RCE-KUL-platform/F[0x02]: remote code execution in E-Systant, a KU Leuven education and examination platform.https://lapseofsanity.net/posts/non-profit-incident-response/Fri, 13 Mar 2020 02:00:00 +0000https://lapseofsanity.net/posts/non-profit-incident-response/F[0x01]: incident response on a compromised non-profit website that was redirecting visitors to a fake human-verification page.https://lapseofsanity.net/posts/non-profit-vulntest/Mon, 28 Oct 2019 23:00:00 +0000https://lapseofsanity.net/posts/non-profit-vulntest/F[0x00]: a two-week vulnerability assessment across a non-profit's public-facing assets, and the report it produced.