https://olivier.reuland.ch Writing and background from Olivier Reuland on security, privacy, governance, and the work of getting them done. en Fri, 29 May 2026 07:39:47 GMT https://olivier.reuland.ch/posts/bsides-melbourne-2026 BSides Melbourne is tomorrow. I know a few people going. Who else? Fri, 15 May 2026 00:00:00 GMT https://olivier.reuland.ch/posts/bsides-melbourne-2026 https://olivier.reuland.ch/posts/frontier-ai-asic-cyber-resilience AI models are getting better at chaining exploits, and ASIC is right to push for urgent cyber resilience. My take on where the real risk sits. Fri, 15 May 2026 00:00:00 GMT https://olivier.reuland.ch/posts/frontier-ai-asic-cyber-resilience https://olivier.reuland.ch/posts/xkcd-results-age This so true Thu, 14 May 2026 00:00:00 GMT https://olivier.reuland.ch/posts/xkcd-results-age https://olivier.reuland.ch/posts/national-ai-centre-guidance The new ai.gov.au feels like wishful thinking without proper regulation, but it's a good starting point for boards serious about AI governance. Wed, 13 May 2026 00:00:00 GMT https://olivier.reuland.ch/posts/national-ai-centre-guidance https://olivier.reuland.ch/posts/artificial-analysis-coding-benchmarks Artificial Analysis added coding agent benchmarks. It shows the influence of harnesses — significant — and the work Cursor has done with theirs. Tue, 12 May 2026 00:00:00 GMT https://olivier.reuland.ch/posts/artificial-analysis-coding-benchmarks https://olivier.reuland.ch/posts/securing-ai-initiatives AI changes the attack surface, but not the basic discipline: identify the risk, assess it, treat it, test the controls, and keep reviewing. Tue, 12 May 2026 00:00:00 GMT https://olivier.reuland.ch/posts/securing-ai-initiatives https://olivier.reuland.ch/posts/startspace-breakfast-club I'll be speaking at StartSpace Breakfast Club about cybersecurity and ISO 27001 for startups. Fri, 08 May 2026 00:00:00 GMT https://olivier.reuland.ch/posts/startspace-breakfast-club https://olivier.reuland.ch/posts/stop-using-pii-as-evidence-of-identity Date of birth, address, mother's maiden name: none of these prove you are who you say you are. After years of mass breaches, PII-based identity verification is security theatre. Sat, 02 May 2026 00:00:00 GMT https://olivier.reuland.ch/posts/stop-using-pii-as-evidence-of-identity https://olivier.reuland.ch/posts/software-fundamentals-matt-pocock Matt Pocock on software fundamentals. A perfect watch for the weekend. Fri, 01 May 2026 00:00:00 GMT https://olivier.reuland.ch/posts/software-fundamentals-matt-pocock https://olivier.reuland.ch/posts/fallow-codebase-intelligence I started using fallow to replace knip and jscpd. Solid upgrade. Rust-powered, with CRAP metrics, architecture rules, and more. Fri, 24 Apr 2026 00:00:00 GMT https://olivier.reuland.ch/posts/fallow-codebase-intelligence https://olivier.reuland.ch/posts/github-copilot-plan-changes After Anthropic raised prices, GitHub Copilot is changing too. Suspended new student and pro onboarding, moving to token pricing. Fri, 24 Apr 2026 00:00:00 GMT https://olivier.reuland.ch/posts/github-copilot-plan-changes https://olivier.reuland.ch/posts/gpt-5-5-cost-analysis GPT-5.5 costs twice as much as GPT-5.4, but Artificial Analysis' Intelligence Index shows surprising value comparisons. Fri, 24 Apr 2026 00:00:00 GMT https://olivier.reuland.ch/posts/gpt-5-5-cost-analysis https://olivier.reuland.ch/posts/ai-projects-xkcd It's not as big a loss as it looks, because now I have leftover supplies, which will help me talk myself into doing this all over again with a new project! Fri, 17 Apr 2026 00:00:00 GMT https://olivier.reuland.ch/posts/ai-projects-xkcd https://olivier.reuland.ch/posts/caveman-token-savings You try. You save token. Time. Money. You thank later. 75% token reduction, 3x latency drop, no loss of accuracy. Wed, 15 Apr 2026 00:00:00 GMT https://olivier.reuland.ch/posts/caveman-token-savings https://olivier.reuland.ch/posts/compliance-platforms-vs-real-assurance The Delve saga is just the tip of the iceberg. Compliance platforms are evidence collection tools, not proof of compliance. Wed, 15 Apr 2026 00:00:00 GMT https://olivier.reuland.ch/posts/compliance-platforms-vs-real-assurance https://olivier.reuland.ch/posts/dot-ch-email-phishing The good thing about having a personal email ending in .ch is that a lot of the phishing I get is in German, so it makes it easy to spot. Wed, 15 Apr 2026 00:00:00 GMT https://olivier.reuland.ch/posts/dot-ch-email-phishing https://olivier.reuland.ch/posts/politely-invited-into-c2 Did I just get politely invited into a C2? For the non-cyber here: C2 most commonly refers to Command and Control infrastructure in cybersecurity. Wed, 15 Apr 2026 00:00:00 GMT https://olivier.reuland.ch/posts/politely-invited-into-c2 https://olivier.reuland.ch/posts/project-glasswing Dario Amodei offered to work with US officials to assess AI risks and defend against them. Then crickets. Wed, 15 Apr 2026 00:00:00 GMT https://olivier.reuland.ch/posts/project-glasswing https://olivier.reuland.ch/posts/ai-vendor-critical-infrastructure Most companies building on AI APIs have no SLA, no fallback, and no DR plan for their LLM provider. That needs to change. Fri, 10 Apr 2026 07:08:00 GMT https://olivier.reuland.ch/posts/ai-vendor-critical-infrastructure https://olivier.reuland.ch/posts/agent-controls-polite-asking We forget that many controls for agents are akin to politely asking 'please don't do anything stupid'. Wed, 08 Apr 2026 00:00:00 GMT https://olivier.reuland.ch/posts/agent-controls-polite-asking