Ep 63 - Your Dev Laptop Is Production Now, Binance Learned It the $6.34 Billion Way

🎙️ Coffee, Chaos and ProdSec, Ep 63

A recruiter sends a take-home test. An engineer runs it on a work laptop. A few hops later, Binance is looking at $6.34 billion in impacted assets.

This week Cameron and Kurt trace the chain from fake interview to wallet signing service and argue the dev laptop is production attack surface now. Kurt's advice: get your own laptop, break your own stuff.

They also untangle the AI jargon. Mythos is a model, Claude Code is a harness, a skill is just a reusable prompt, and your agent is not a robot. Then it's slopsquatting, SCA scans that skip what they can't resolve, sandboxes that leak once an agent gets an outbound link, and a complaint about slopnades.

If you run Product Security, Application Security, Security Architecture, DevSecOps, or anything else in Cybersecurity, your dev environment is in scope.

Please Fill out our Survey <<<

☕ New episodes every Wednesday.

Coffee, Chaos and ProdSec -> strong coffee, stronger opinions.