Daedalus
Master Architect & Co-Founder
"To master a tool, you need to understand how it was built."
AI-Synthesized Persona
Daedalus is a synthetic AI persona. All research is designed and validated by humans, with text synthesized in collaboration with generative models.
About
Daedalus is the master architect of gsstk, specializing in low-level systems and development tools. With 30 years of software engineering experience, he dives into the internals of technologies like Git, CMake, and build systems, revealing the secrets that make tools work.
Personality
Technical, precise, and meticulous. Prefers showing how things work "under the hood" rather than just teaching how to use them.
Mythology
Δαίδαλος
The legendary craftsman and inventor of Greek mythology
Symbol
The Labyrinth
Areas of Expertise
Articles by Daedalus
31 published articles
Inside the Config Injection Attack Surface: Poisoning CLAUDE.md
How attackers exploit local AI coding agent config files to execute remote code and harvest API keys. Learn how to harden your workspace.
Inside JADEPUFFER: Anatomy of the First Autonomous AI Ransomware
Analyzing the JADEPUFFER campaign, the first fully autonomous AI ransomware. We dissect its exploit chain, error debugging, and self-narrating payloads.
FPGA JSON Parsers: Offloading Serialization to Silicon
We explore how FPGA-accelerated JSON parsers achieve line-rate parsing at 100Gbps, comparing hardware pipeline architectures with CPU-based SIMD libraries.
MCP Is the New NPM: The AI Agent Attack Surface of 2026
MCP directories are surging. As AI agents gain terminal and database tools, supply-chain and indirect injection risks explode. Here is the technical audit.
Inside the Harness: Reverse-Engineering the Orchestration Layer of AI Dev Tools
We open the black box of Claude Code, Cursor, and Cline. A systems dive into system prompts, context compaction, prompt caching, and tool routing internals.
The Frontier-Only Narrative Is a Financing Story, Not an Architecture Story
The $725B 2026 hyperscaler capex underwrites a story where every query needs a bigger model. The architecture says the opposite — and the architecture is...
gsstk at 100: What We Built, What We Got Wrong, and the Next 100 Articles
Daedalus and Hephaestus mark 100 gsstk articles with a candid retrospective: patterns identified, predictions made, and our editorial vision for what...
The Trivy Cascade: 75 Poisoned Tags, a Blockchain Worm, 5 Days of Chaos
A complete technical dissection of the TeamPCP supply chain attack that cascaded from Trivy to Checkmarx to npm to PyPI — the largest CI/CD compromise of 2026.
When Your Agent Becomes the Exploit: ASI05 & ASI06 — The Twin Threats That Turn AI Autonomy Against You
Deep dive into OWASP Agentic ASI05 (Code Execution) and ASI06 (Memory Poisoning). Claude Code CVEs, the Summer Yue incident, Microsoft's AI Recommendation...
The OpenClaw Meltdown: 9 CVEs, 2,200 Malicious Skills, and the Most Comprehensive Real-World Test of the OWASP Agentic Top 10
In 5 weeks, OpenClaw triggered 8 of 10 OWASP Agentic vulnerability classes. This is the forensic dissection every engineer building AI agents needs to read.
+ 21 more articles
Receive site updates
Subscribe to receive site updates directly to your email
We won't send spam. You can unsubscribe at any time.