Panda from Assura calls in from the Richmond Marriott after a wild day at RVASec, where their team took first in Roman Bohuk’s MetaCTF (now Skillbit) and talks about why CTFs are really about learning, not winning.

Shoutouts: SSHad0w, Errant Packet, Matt Brown, Roman Bohuk, Skillbit, Kataze, ISACA, RVASec

Panda from Assura calls in from outside the Marriott at RVASec in downtown Richmond, tired but having a blast, prepping the Curious Corvids for tomorrow's CTF.

Shoutouts: Errant Packet, Curious Corvids, RVASec, Skillbit (Formerly MetaCTF)

Panda calls in from a Florida beach walk with the puppy, getting ready for the long drive up to RVAsec. He riffs on the DEF CON data duplication village, the InfoCon.org talk archive, and a weekend project using AI to sort old con talks into Plex.

Links: InfoCon.org

Panda phones in from the monthly JAX2600 / DC904 meetup, talks about AI controls at work, homemade antennas, cognitive security, and what is coming next for Hackers IRL.

Shoutouts: Bruno, Cognitive Security Institute, JAX2600, DC904, RVASec

Panda from Assura talks through the pre-trip anxiety that hits before every con or vacation, how he reframes nerves as a sign he cares, and learning to ship early over chasing perfect.

Panda from Assura unwinds at the Jacksonville Linux User Group, catches Champ Clark demo JSONAir, and shares how a childhood therapist became the first person to ever listen to them nerd out about Linux.

Shoutouts: Champ Clark, Key9 Security

Panda from Assura walks his dog and riffs on how AI has tanked the value of secret-sauce IP, why the real moat is just doing, and why vibe-coded apps still need real security testing.

her0x0ftime calls in on his morning drive to share how early vulnerability management work mirrored his recovery journey, and how the endless scan-and-patch cycle pushed him to rethink what security really means.

Shoutouts: Panda

Panda talks about frontier models quietly profiling who you are before answering, the lockpick-letterhead parallel, debug-mode jailbreaks, and worries about who gets gated out of learning infosec.

Panda shares a Sunday note about handling a quarter million daily bot requests on his sites, the limits of Cloudflare's verified-bot signal, and how GEO is the new SEO.

Shoutouts: BSidesTampa