I'm a Privacy & Security Engineer for Mozilla (maker of Firefox). I've done "full-stack" software engineering for 25 years. I love exploring where web tech intersects with security. And I've been getting into AI tech too. I'm an advisory board member for University of Tulsa Computer Science program and Oklahoma State University technology program. I was previously VP and on the board of Techlahoma, and I still help organize some Techlahoma events. https://speakerdeck.com/groovecoder 2017-03-29 08:50:32 -0400 This talk is a fast, practical tour of real-world AI hacking: not sci-fi doom, but hands-on exploits against LLMs and agents that are already embedded in developer tools, browsers, chatbots, and cloud systems. NOTE: The Firefox example is a PROTOTYPE. I'm not sure how well it will come across as a slides-only deck. This talk is a fast, practical tour of real-world AI hacking: not sci-fi doom, but hands-on exploits against LLMs and agents that are already embedded in developer tools, browsers, chatbots, and cloud systems. NOTE: The Firefox example is a PROTOTYPE. I'm not sure how well it will come across as a slides-only deck. Fri, 20 Feb 2026 00:00:00 -0500 https://speakerdeck.com/groovecoder/mr-brokebot-lethal-language-attacks-against-ai-agents-f7e423bf-d8c1-48b4-a868-fb4383940744 https://speakerdeck.com/groovecoder/mr-brokebot-lethal-language-attacks-against-ai-agents-f7e423bf-d8c1-48b4-a868-fb4383940744 Want to learn more about data networks & security? This high-level survey of centuries of data networking takes the audience all the way from homing pigeons in ancient Egypt to Napoleon's semaphore network to HTTPS, concluding with practical advice for how the audience can maximize HTTPS security. Want to learn more about data networks & security? This high-level survey of centuries of data networking takes the audience all the way from homing pigeons in ancient Egypt to Napoleon's semaphore network to HTTPS, concluding with practical advice for how the audience can maximize HTTPS security. Wed, 23 Oct 2024 00:00:00 -0400 https://speakerdeck.com/groovecoder/pigeons-to-padlocks-5000-years-of-network-security https://speakerdeck.com/groovecoder/pigeons-to-padlocks-5000-years-of-network-security Thu, 15 Feb 2024 00:00:00 -0500 https://speakerdeck.com/groovecoder/cryptory-up-to-https-atlas-2024 https://speakerdeck.com/groovecoder/cryptory-up-to-https-atlas-2024 This talk starts with the simplest (and oldest) forms of secret communication: from the first invisible ink, to the ancient “scytale” anagram tool, to Caesar ciphers used in ancient Greece and Rome. These simple techniques give an accessible introduction to fundamental aspects of all cryptographic systems thru-out history. In particular, the establishment of a secure “key-exchange”, which will be shown thru-out the talk to be the most important and practical knowledge for developers. From those ancient foundations, it explores the evolution of cryptography over centuries of “battle” between code-makers and code-breakers: from frequency cryptanalysis of the Islamic Golden Age, to the Alberti Cipher Disk and the Vigenère Square used in Renaissance and pre-Industrial Europe, to the World War II stories of making and breaking the Enigma machine – the first popular use of electromechanical cryptography, and the pre-cursors to modern computers. Coming into contemporary times, it covers the development of computer cryptography: from the “Lucifer” cipher that would become the Data Encryption Standard (DES), to the Advanced Encryption Standard (AES) used today in protocols like TLS/HTTPS, along with modern key-exchange protocols like RSA, Diffie-Hellman, and Elliptic Curve. This talk starts with the simplest (and oldest) forms of secret communication: from the first invisible ink, to the ancient “scytale” anagram tool, to Caesar ciphers used in ancient Greece and Rome. These simple techniques give an accessible introduction to fundamental aspects of all cryptographic systems thru-out history. In particular, the establishment of a secure “key-exchange”, which will be shown thru-out the talk to be the most important and practical knowledge for developers. From those ancient foundations, it explores the evolution of cryptography over centuries of “battle” between code-makers and code-breakers: from frequency cryptanalysis of the Islamic Golden Age, to the Alberti Cipher Disk and the Vigenère Square used in Renaissance and pre-Industrial Europe, to the World War II stories of making and breaking the Enigma machine – the first popular use of electromechanical cryptography, and the pre-cursors to modern computers. Coming into contemporary times, it covers the development of computer cryptography: from the “Lucifer” cipher that would become the Data Encryption Standard (DES), to the Advanced Encryption Standard (AES) used today in protocols like TLS/HTTPS, along with modern key-exchange protocols like RSA, Diffie-Hellman, and Elliptic Curve. Fri, 08 Apr 2022 00:00:00 -0400 https://speakerdeck.com/groovecoder/cryptography-500-bc-to-https https://speakerdeck.com/groovecoder/cryptography-500-bc-to-https Mon, 15 Mar 2021 00:00:00 -0400 https://speakerdeck.com/groovecoder/mozilla-observatory-first-draft https://speakerdeck.com/groovecoder/mozilla-observatory-first-draft Fri, 08 Jan 2021 00:00:00 -0500 https://speakerdeck.com/groovecoder/vpns https://speakerdeck.com/groovecoder/vpns Tips, techniques, and tools for protecting your online privacy & security. Pulled together from Mozilla, EFF, Wired, and Consumer Reports resources. First presented at Tulsa Library. Tips, techniques, and tools for protecting your online privacy & security. Pulled together from Mozilla, EFF, Wired, and Consumer Reports resources. First presented at Tulsa Library. Sat, 18 Jan 2020 00:00:00 -0500 https://speakerdeck.com/groovecoder/digital-privacy-and-security https://speakerdeck.com/groovecoder/digital-privacy-and-security Have you always wanted to learn more about cryptography? This high-level survey of crypto takes the audience all the way from Scytales and Caesar ciphers in ancient Greece, to Vigenere Square, to Enigma in World War II, to TLS, and even Post-Quantum Cryptography! Have you always wanted to learn more about cryptography? This high-level survey of crypto takes the audience all the way from Scytales and Caesar ciphers in ancient Greece, to Vigenere Square, to Enigma in World War II, to TLS, and even Post-Quantum Cryptography! Tue, 22 Oct 2019 00:00:00 -0400 https://speakerdeck.com/groovecoder/cryptography-500-bc-to-quantum-computing https://speakerdeck.com/groovecoder/cryptography-500-bc-to-quantum-computing Whatever their price, Bitcoin and cryptocurrencies continue to provide interesting technical and security opportunities. This talk gives a comprehensive introduction of bitcoin & cryptocurrency technology, and then analyzes how cryptojacking attacks are executed with JavaScript. Whatever their price, Bitcoin and cryptocurrencies continue to provide interesting technical and security opportunities. This talk gives a comprehensive introduction of bitcoin & cryptocurrency technology, and then analyzes how cryptojacking attacks are executed with JavaScript. Fri, 12 Apr 2019 00:00:00 -0400 https://speakerdeck.com/groovecoder/just-enough-bitcoing-to-go-cryptojacking-with-javascript https://speakerdeck.com/groovecoder/just-enough-bitcoing-to-go-cryptojacking-with-javascript The web is the biggest legacy application ever developed or supported by software engineers, and it's also blurring the line between the consumption of data and the leaking of personal details. Browser makers may be the only line of defense. This deck was first presented at the 2019 Tulsa Cyber Summit. It's an expanded presentation of the material from: "Can we build a privacy-preserving web browser we all deserve?" XRDS: Crossroads, The ACM Magazine for Students - Pseudonimity and Anonymity Volume 24 Issue 4, Summer 2018 Pages 40-44 The web is the biggest legacy application ever developed or supported by software engineers, and it's also blurring the line between the consumption of data and the leaking of personal details. Browser makers may be the only line of defense. This deck was first presented at the 2019 Tulsa Cyber Summit. It's an expanded presentation of the material from: "Can we build a privacy-preserving web browser we all deserve?" XRDS: Crossroads, The ACM Magazine for Students - Pseudonimity and Anonymity Volume 24 Issue 4, Summer 2018 Pages 40-44 Mon, 25 Mar 2019 00:00:00 -0400 https://speakerdeck.com/groovecoder/can-we-protect-privacy-without-breaking-the-web https://speakerdeck.com/groovecoder/can-we-protect-privacy-without-breaking-the-web For simple, privacy-preserving data-sharing. For simple, privacy-preserving data-sharing. Tue, 18 Dec 2018 00:00:00 -0500 https://speakerdeck.com/groovecoder/hash-range-queries https://speakerdeck.com/groovecoder/hash-range-queries What is it? How does Firefox use it? How can you use it as a web developer? What is it? How does Firefox use it? How can you use it as a web developer? Mon, 15 Jan 2018 00:00:00 -0500 https://speakerdeck.com/groovecoder/google-safe-browsing-high-level https://speakerdeck.com/groovecoder/google-safe-browsing-high-level Tor is an open anonymized network and web browser. Millions of users connect with Tor every day. Is your code ready for them? This talk introduces Tor, provides an overview of how it works and the adversaries and attacks its designed to stop, and shows that optimizing your code for Tor is quite practical, and improves your code for everyone. Tor is an open anonymized network and web browser. Millions of users connect with Tor every day. Is your code ready for them? This talk introduces Tor, provides an overview of how it works and the adversaries and attacks its designed to stop, and shows that optimizing your code for Tor is quite practical, and improves your code for everyone. Fri, 03 Nov 2017 00:00:00 -0400 https://speakerdeck.com/groovecoder/how-to-run-your-code-on-the-dark-web-full-version https://speakerdeck.com/groovecoder/how-to-run-your-code-on-the-dark-web-full-version Short summary of some of the privacy & security fixes, features, and enhancements landing in Firefox 57. Short summary of some of the privacy & security fixes, features, and enhancements landing in Firefox 57. Mon, 16 Oct 2017 00:00:00 -0400 https://speakerdeck.com/groovecoder/privacy-and-security-in-firefox-quantum https://speakerdeck.com/groovecoder/privacy-and-security-in-firefox-quantum An high-level primer on dark web tech (for non-developer end-users) An high-level primer on dark web tech (for non-developer end-users) Fri, 06 Oct 2017 00:00:00 -0400 https://speakerdeck.com/groovecoder/dark-web-primer https://speakerdeck.com/groovecoder/dark-web-primer Tor is an open anonymized network and web browser. Millions of users connect with Tor every day. Is your code ready for them? This talk introduces Tor, provides an overview of how it works and the adversaries and attacks its designed to stop, and shows that optimizing your code for Tor is quite practical, and improves your code for everyone. Tor is an open anonymized network and web browser. Millions of users connect with Tor every day. Is your code ready for them? This talk introduces Tor, provides an overview of how it works and the adversaries and attacks its designed to stop, and shows that optimizing your code for Tor is quite practical, and improves your code for everyone. Wed, 04 Oct 2017 00:00:00 -0400 https://speakerdeck.com/groovecoder/how-to-run-your-code-on-the-dark-web-15m-version https://speakerdeck.com/groovecoder/how-to-run-your-code-on-the-dark-web-15m-version From July-August 2018, we conducted a study to learn privacy settings effects' on website breakage. From July-August 2018, we conducted a study to learn privacy settings effects' on website breakage. Thu, 17 Aug 2017 00:00:00 -0400 https://speakerdeck.com/groovecoder/firefox-privacy-settings-breakage-study https://speakerdeck.com/groovecoder/firefox-privacy-settings-breakage-study A 60-minute overview of content from The Code Book by Simon Singh, covering secrecy from ancient Greece to Enigma machines used in World War II. This is a cursory, high-level, mostly-non-mathematical survey of centuries of crypto - good as an intro to crypto for developers and non-devs alike. A 60-minute overview of content from The Code Book by Simon Singh, covering secrecy from ancient Greece to Enigma machines used in World War II. This is a cursory, high-level, mostly-non-mathematical survey of centuries of crypto - good as an intro to crypto for developers and non-devs alike. Fri, 24 Mar 2017 00:00:00 -0400 https://speakerdeck.com/groovecoder/crypto-500-bc-present-sorta https://speakerdeck.com/groovecoder/crypto-500-bc-present-sorta