20+ years building software, products, and teams - currently spending most of my time poking at AI to see what it actually changes.
// recent writing
August 2026
// I hid an instruction inside a fake customer order and watched an AI support agent obey it. The blunt 'ignore all previous instructions' did nothing. What worked was a harmless sentence that spoke the task's own language - and one model followed it while another reasoned right past it.
read more →August 2026
// I released a free Mac app that turns YouTube videos, podcasts and lectures into clean transcripts and sharp summaries — transcribed and summarized entirely on your Mac by default. No account, no API key, no subscription.
read more →June 2026
// AI agent skills became a plugin ecosystem, and like every plugin ecosystem before them, an attack surface. A study of 42,447 skills found 26% vulnerable and 5% likely malicious. Here's how to vet one before it touches your machine.
read more →May 2026
// I wrote a 16-line bash script that builds its own coding agent, then has that agent build a backdoor. No frameworks, no dependencies, no malicious code on disk. The dangerous part is one paragraph of English.
read more →May 2026
// A hackathon project: type in a stock ticker and get three agents arguing the buy, hold, and sell cases against each other — grounded in real data — instead of one confident signal pretending the answer is obvious.
read more →$ cat about.txt
Day job: CTO at Ordinary Objects, working out of Sofia, Bulgaria. The rest of the time I'm following my curiosity - mostly into AI right now, and into whatever a generalist with 20 years of habits wanders toward next.