J Wolfgang Goerlich

jwgoerlich@infosec.exchange

I’m the unflinchingly optimistic graybeard, wandering in this cyber dystopia. InfoSec, cybersecurity, futurist, strategist, chaotic good. The views expressed are my own. Sometimes humorously.  <a href="https://jwgoerlich.com" target="_blank" rel="nofollow noopener" translate="no">https://jwgoerlich.com</a>

Posts

Post #3683939
Backrooms (2026) is simply a metaphor for tech debt. Fight me.
Post #3628048
“AI creates no new threat categories,” news story after story reports. “Yet,” I always whisper with a grimace.
Post #2554016
It’s not the most technical CISO that survives, but the CISO who’s most adaptable to change.
Post #989210
RSAC 2026 looms large. The only thing I know for sure is I’ll be on stage Wednesday with Helen Patton, re-imagining and re-contextualizing Zero Trust. Other than that? You’ll have to find me. Coffee or cocktails on me, if you can.
Post #989209
Cyber: Humans are the weakest link! Also cyber: Human-in-the-loop is the only way to make AI safe!
Post #989208
At #rsac? Grab lunch and come talk zero trust with Helen Patton and me.
Post #989207
A round of hot or not, at #rsac. https://youtu.be/D2BgOCm_WhE?si=B1-tQ6piE-baamvU
Post #628218
Working with an LLM is like a freshman group project. Did the bot understand the topic? Did they get bored or lazy half-way through? Are they drunk or maybe asleep? Forget it, I&#39;ll just do all the work myself. Just like college.
Post #628217
The homebrew computer is the new starter home. Affordable, not so much.
Post #628216
CypherCon in Milwaukee. I’m excited to bring my latest research and thinking on LLM’s social hacking capabilities. Your AI is Social Engineering You https://cyphercon.com/speaker/your-ai-is-social-engineering-you/
Post #628214
People are becoming the average of the 5 AIs they spend time with.
Post #628213
Excited for my RSAC talk with Helen Patton, on all the ways the zero trust buzzword has failed us, and all the ways to make the most out of buzz.
Post #628212
Being understood and feeling understood is two very different things, especially when what’s doing the understanding is a server farm.
Post #628211
OODA loop can be useful. But also can be over-used. First, most organizations aren’t fighter jets. They are aircraft carriers. Big. Slow. Second, most teams are cross-functional. Cyber may OOD. But it’s front-line teams that Act. Defenses still need to hold and win, even when (especially when) decisions and actions are sluggishly delayed.
Post #628210
Frozen pipes. I call my favorite plumber. Their AI answers. We schedule a visit for tomorrow. Hours later, the plumber calls back. He can’t do the work. His AI hallucinated. The best part was the plumber saying, “You need to punch your zipcode and frozen pipes into Google.” So I google up another plumber. Done with AI, I book online instead of calling. Hours later, the plumber calls back. He can’t make the time. His website is broken. This isn’t the future I worked to build. Also, pipes re...
Post #628208
What eternal September was for the early open Internet, is that what OpenClaw and moltbook is? A flood of inexperienced personalities let loose on the Internet with little understanding and less oversight.
Post #628207
My lovable echo chamber machine thinks I should walk to the car wash. That’s fine, I’m sure.
Post #628206
BSides Detroit is inTechTown Detroit on Saturday, May 30. Tickets went on sale yesterday. Only 25 left. Get ‘em soon! https://www.eventbrite.com/e/bsides-detroit-tickets-1983905545893
Post #399500
I saw the best minds of my generation destroyed by AI.