Matt

Making software that makes your favorite app nervous.

[Matt @mattxfig]

Most cybersecurity PoCs succeed. Thats the problem.
A test that can't fail is a sales tour.

Before install, write down: measurable outcomes, operational cost, one deliberate failure.

If success wasnt defined before the PoC started, it didn't succeed. It just ended.
Day 10 of 30

[Matt @mattxfig]

Every AI tool fails at least one of these 4 questions:

1. What can it see?
2. What can it do without a human saying yes?
3. How do I know when it's wrong?
4. What breaks when it goes down?

Day 9 of 30.

[Matt @mattxfig]

9 years evaluating security tools.

The demos that lose all die the same way:

60 minutes proving the product exists, while the buyer wonders what breaks on Tuesday morning.

Day 8 of 30.

[Matt @mattxfig]

Day 7 of 30.

Today I did nothing on purpose.

Rest isn't the opposite of the grind. It's what funds it.

Schedule it like everything else. The version of you that shows up Monday depends on it.

[Matt @mattxfig]

Day 6 of 30: I haven't manually edited a single video this challenge.

Film messy. Flub lines. Keep rolling. One AI instruction cleans it up: cut dead air, add captions. Five minutes.

Left my screwups in this one on purpose. The barrier was never talent or time. It's friction.

[Matt @mattxfig]

You can hack an AI without touching a line of code.

It's called indirect prompt injection. Number one on OWASP's Top 10 for AI apps.

Today's lesson: how it works and the 4 defenses that hold up.

The model is the new user. You never fully trust a user.

Day 5 of 30.

[Matt @mattxfig]

Day 4 of 30.

There is no life between the work right now.

Day job: security, 200+ locations.
Night job: my own company.
Third job: this video, daily.
Sleep: 6h 55m.

Not balance. A season.

Most people show you the result. I'm showing you the price.

[Matt @mattxfig]

I turned the full inspection into a free Security Tool Preflight Checklist. 15 checks, red flags word for word, and a scoring verdict.

https://t.co/EhqEYvpEDX

[Matt @mattxfig]

Most security tools would fail a helicopter preflight.

The aircraft doesn't care which part you checked. It cares about the part you didn't.

Find out the 3 questions to ask

Day 3 of 30.

[Matt @mattxfig]

I broke into cybersecurity in 2017 with no degree, right as the cloud wave hit. Everyone said security wouldn't survive it. The questions survived. The systems changed.

AI is that wave again.

Day 2 of 100: all in on AI security.

Are you translating yet, or waiting?

[Matt @mattxfig]

Day 1 of 30. I’m done waiting until everything feels ready.

I’m building Crestvale, moving deeper into AI security, and documenting the work publicly. That includes ideas, failures, applications, and numbers.

First action: applying for UGC opportunities. Let’s see what happens.

[Matt @mattxfig]

@thsottiaux I’m working on my website and a newsroom platform for clients.

[Matt @mattxfig]

@InternetH0F @grok @grok do me

[Matt @mattxfig]

@niccruzpatane @elonmusk @Tesla Are teslas DIY friendly though?

[Matt @mattxfig]

@NASA @elonmusk @SpaceX @Space_Station Is there any plans on replacing it since so much tech was made up there?

[Matt @mattxfig]

@orichic Or when people who you thought were annoying when you were younger, try to be friends with your little brother to finally be cool with you. As though that’s going to change their mind. 😂

[Matt @mattxfig]

@orichic

[Matt @mattxfig]

#RIPBrayWyatt

[Matt @mattxfig]

@orichic The NPCs have given you loot.

[Matt @mattxfig]

Forget buying a house. Putting all $300k in $SPY 0DTE call options. #yolo #WSB

[TTI @TikTokInvestors]

Best housing hack I’ve ever seen.