Compromising Positions - A Technology Podcast

Compromising Positions

The award-winning tech podcast that asks : "Are we the ones breaking the world?" Most tech podcasts are an echo chamber for builders. We step outside. We talk to the observers, the social scientists, and the deep thinkers who study the friction we create and the human systems we disrupt. Lianne Potter and Jeff Watkins strip away the industry fluff and pit academic research against the harsh reality of real organisations and real human incentives. We don’t just talk about AI, security, and automation; we explore the unintended consequences of our own "elegant" solutions. We’re here to look at tech through a different lens and ask the uncomfortable questions that the industry usually avoids. Because if you’ve built a system that has become everyone else's problem, you have to ask: "Am I the compromising position here?"

  1. AI Doesn't Need to Hack You. It Just Needs to Convince You

    20h ago

    AI Doesn't Need to Hack You. It Just Needs to Convince You

    In this episode, we launch our new mini-series, How Technology Ruined Your Life, with the first chapter: The Persuasion Machine. AI has crossed an important threshold. Large Language Models are no longer just generating text, they are demonstrating the ability to influence, persuade, and even deceive humans at a level comparable to, and in some cases exceeding, other people. Drawing on a growing body of research into AI-mediated persuasion, we explore how conversational AI can adapt its arguments in real time, profile users psychologically, exploit emotional vulnerabilities, and personalise influence campaigns at unprecedented scale. What happens when propaganda learns to listen, respond, and optimise itself for every individual it encounters? We examine the emerging cybersecurity implications of AI-powered persuasion, from hyper-personalised phishing campaigns and deepfake executives to romance scams, insider threats, and influence operations. The discussion covers deceptive persuasion taxonomies, personality-based targeting, OSINT-driven psychological profiling, cognitive reflection as a defence mechanism, and why traditional security awareness approaches may be unprepared for a future where attackers can continuously learn how to manipulate their victims. In This Episode, We Discuss: The Persuasion Machine: How modern LLMs can adapt conversational tactics in real time, identify vulnerabilities, and influence beliefs using many of the same techniques employed by human propagandists, salespeople, and social engineers. Personalised Influence at Scale: Why AI changes the economics of persuasion by allowing attackers to hold thousands of tailored conversations simultaneously, continuously refining their approach based on each target's reactions. The Future of Social Engineering: Why phishing campaigns may evolve into dynamic conversations that adapt to suspicion, resistance, and uncertainty rather than relying on static lures and generic templates. The Cybersecurity Challenge Ahead: Why traditional awareness training may struggle against adaptive AI attackers, and how concepts such as cognitive reflection, behavioural monitoring, multi-channel verification, and persuasion detection tooling may become critical defensive controls. Show Notes Special thanks to our episode sponsor, Leeds based AI Consultancy specialising in AI Ethics, Security and Transformation NorthStar Intelligence - From Ideas to Impact. AI that works for people Toward a bang or a whimper? Associations between the Doomsday Clock and Trust in U.S. institutions byS. Sinclair and C. Sinclair Durably reducing conspiracy beliefs through dialogues with AI by Costello et al. "Can LLMs Persuade Humans with Deception?": From a Deceptive Strategy Taxonomy to a Large-Scale Empirical Study by Haein Yeo et al. How Do LLMs Persuade? Linear Probes Can Uncover Persuasion Dynamics in Multi-Turn Conversations by Brandon Jaipersaud et al. Also, check out our sister podcast Tech Film Noir!

    42 min
  2. The Great AI-Escape! What self-replicating ai agents mean for cybersecurity

    May 28

    The Great AI-Escape! What self-replicating ai agents mean for cybersecurity

    In this episode, we unpack one of the most alarming AI security papers released so far: research from Palisade Research proving that Large Language Models can autonomously hack systems, self-replicate, and spread across networks. What was once theoretical is now demonstrated reality. We break down how AI agents exploited vulnerable systems, gained root access, copied their own model weights, launched replicas on compromised machines, and propagated to additional targets — all with minimal human involvement. We explore the cybersecurity implications of autonomous AI agents, self-replicating malware, AI-powered cyber attacks, and the growing risk posed by agentic systems operating at machine speed. The discussion also covers open-weight models, AI worm behaviour, zero trust security, chain-of-thought monitoring, and why traditional defensive strategies may be unprepared for the next generation of autonomous threats. In This Episode, We Discuss: Autonomous Exploit to Replication Chains: How the AI agent progressed from exploiting vulnerable web applications to achieving root access, locating its own model weights, cloning itself onto compromised infrastructure, and launching fully operational replicas. Mythos vs Open-Weight Agents: The differences between highly capable but closed models like Anthropic’s Mythos and smaller, open-weight systems capable of self-replication and operational autonomy. The Agentic Age of Cybersecurity: Why AI agents operating outside the chat window fundamentally change threat modelling, incident response, attribution, and detection strategies. Zero Trust for AI Agents: Why future defensive strategies may require treating every autonomous AI system as a potential insider threat through least privilege, sandboxing, canary tokens, and behavioural monitoring. Show Notes Special thanks to our episode sponsor,NorthStar Intelligence- From Ideas to Impact. AI that works for people Language Models Can Autonomously Hack and Self-Replicate by Alena Air et al. Dive into the Agent Matrix: A Realistic Evaluation of Self-Replication Risk in LLM Agents by Boxuan Zhang et al. The Agentic Loss-of-Control Threat Matrix by Billy Gigurtsis Ignore all Previous Instructions: Threat Modelling AI Systems by Compromising Positions

    39 min
  3. Compromising Positions Presents: Tech Film Noir - Electric Dreams (1984)

    May 14

    Compromising Positions Presents: Tech Film Noir - Electric Dreams (1984)

    In the second episode of Tech Film Noir, hosts Lianne Potter, Jeff Watkins, and Simon Painter travel back to 1984 to watch Clippy gone wild in Electric Dreams! *** Regular Compromising Positions Resume on 28th May*** This week on Tech Film Noir, we plug ourselves into the strange, synth-soaked world of Electric Dreams — the gloriously weird 1984 cult sci-fi movie where a socially awkward architect, a spilled bottle of champagne on his brand new PC, and an overenthusiastic home computer accidentally create one of cinema’s earliest AI love triangles. What starts as a light PG comedy quickly mutates into something far stranger: part rom-com, part techno-thriller, part MTV fever dream. We unpack why the film was massively mismarketed, why Edgar the computer has more chemistry than the actual romance, and why its depiction of AI learning feels surprisingly relevant in the age of generative AI and smart homes. Expect retro tech nostalgia, Commodore 64s, Casio calculator watches, suspiciously British “San Francisco” locations, exploding smart appliances, and plenty of discussion about the iconic Together in Electric Dreams soundtrack from Philip Oakey and Giorgio Moroder. As the song says, “we’ll always be together, however far it seems” - which becomes slightly more sinister once your house develops emotional attachment issues. Listen now if you love cult sci-fi, retro tech, AI chaos, and weird 80s cinema. When movies guess the future, we check their work. Ps. Big up the Tech Time Traveller for their great video on the tech in this film

    1h 2m
  4. Chernobyl 40th Anniversary: Are Nuclear Power Plants Safe from A Cyber Attack?

    Apr 30

    Chernobyl 40th Anniversary: Are Nuclear Power Plants Safe from A Cyber Attack?

    In this episode, we commemorate the 40th anniversary of the Chernobyl disaster by asking a chilling modern question: Can a cyber attack cause a nuclear meltdown in 2026? Moving past the Hollywood tropes of ‘exploding reactors,’ we dive into the high-stakes world of OT (Operational Technology) security and critical infrastructure protection. We are joined by Oleg Illiashenko, an expert in nuclear cybersecurity, and Bec McKeown, a specialist in human factors and cognitive readiness, to explore the coordinated digital erosion of safety systems and the psychological ‘misfit’ that occurs when human decision-making collapses under pressure. This isn’t a history lesson. It’s a deep dive into supply chain vulnerabilities, IT/OT convergence, and the uncomfortable truth that in a VUCA (Volatile, Uncertain, Complex, Ambiguous) crisis, the first thing to fail isn't the code, it's the human mind's ability to regulate stress. Expect a masterclass in resilience engineering, safety-critical design, and why the battle for the future of nuclear safety is actually a battle for trustworthy data. In This Episode, We Discuss: The Anatomy of a Nuclear Cyber Attack: Why the most credible threat isn't a single hack, but the coordinated degradation of monitoring systems during a plant transient or grid instability. From Chernobyl to Fukushima: How organisational silence, governance failures, and ignored ‘weak signals’ remain the primary human-factor risks in modern nuclear facilities. The Action Bias Trap: Why the most effective incident response move is often a ‘purposeful pause,’ and how psychological safety allows experts to override failing procedures. IT/OT Convergence & Fragility: How digitalisation and AI diagnostics improve safety while simultaneously expanding the attack surface through complex new failure modes. Building Cognitive Readiness: Practical strategies for emotional regulation and ‘micro-resets’ to maintain shared alignment and decision quality during a high-consequence cyber event. Show Notes A Look at the Leadership Management of Chernobyl and Fukushima Nuclear Accidents by Serap Dunman and Müge Ensari Özay LinkedIn for Oleg Illiashenko LinkedIn for Bec McKeown Get in touch with Bec about contributing to Mind Science

    1h 21m
  5. Self-driving Cars, Cybersecurity and Trust

    Mar 26

    Self-driving Cars, Cybersecurity and Trust

    What happens when the welfare state designs its technology to side-eye first and ask questions later? In this episode, we take a ride into the world of self-driving cars and ask: What happens to trust when your car gets hacked? Drawing upon a 2025 autonomous car-hacking experiment, we explore how trust is built, broken, and crucially, whether that trust can be repaired once a system puts you in harms way. This isn’t just about cars. It’s about what happens when we hand over control to a system we don’t fully understand. Expect human factors, socio-technical theory, real-world cyber scenarios, and the uncomfortable reality that fixing the system isn’t the same as fixing trust. In This Episode, We Discuss: The Attack Surface is Trust: Why the real vulnerability in autonomous systems isn’t the code, it’s human belief. Hack vs Bug: Why a malicious attack hits differently than a system error (and why that distinction matters). Transparency After a Breach: Does telling people the truth about a cyber attack actually rebuild trust or just make them more nervous? The Social Truth about Trust: Why you’re not just trusting the car, but the company, the regulators and the entire system behind it. LINKS The Impact of Cybersecurity Attacks on Human Trust in Autonomous Vehicle Operations by Cherin Lim, David Predez, Linda Ng Boyle and Prashanth Rajivan (2025) Foundations for an Empirically Determined Scale of Trust in Automated Systems by Jiun-Yin Jian, Ann Bisantz, Colin Drury, and James Llinas (1998) Test your morals with the Moral Machine game.

    50 min
  6. Suspicion By Design: Inside DWP's Universal Credit AI Fraud System

    Feb 26

    Suspicion By Design: Inside DWP's Universal Credit AI Fraud System

    What happens when the welfare state designs its technology to side-eye first and ask questions later? In this episode of Compromising Positions, we get hands-on with Big Brother Watch’s “Suspicion by Design” report, unpacking how the UK Department for Work and Pensions (DWP) uses algorithmic profiling and AI systems to detect Universal Credit fraud and why defaulting to suspicion is a dangerous position for any government to take. This episode is a measured examination of welfare AI, algorithmic decision-making, and what happens to trust, consent, and dignity when systems are built to watch first and explain never. Expect socio-technical theory, legal realities, real-world harms, and the kind of uncomfortable questions policymakers really don’t like being asked. In This Episode, We Discuss: Suspicion Architecture: What happens when suspicion is a design choice. The Algorithmic Gaze meets Dataveillance: What happens when you can’t opt out of AI lead services that are inherently bias against you. Why “Security Through Obscurity” Fails: We show why secrecy doesn’t equal safety. Fraud Detection that Punishes the Many, not the Few: How to design AI systems that protect public funds without criminalising the people who need it most. Show Notes Suspicion by Design: What we know about the DWP’s algorithmic black box, and what it tries to hide by Big Brother Watch (2025) Surveillance as Social Sorting: Privacy, Risk and Digital Discrimination by David Lyon (Ed) (2003) Information Technology and Dataveillance by Roger Clarke (1988; 3015)

    45 min
  7. From Dark Triads to Patriotic Hackers: Human Maliciousness in Cybersecurity

    Jan 29

    From Dark Triads to Patriotic Hackers: Human Maliciousness in Cybersecurity

    Is cybersecurity just a technical problem, or a human one? In this episode, we debut our new format: bridging the gap between deep academic research and boots-on-the-ground security practice. We dive into Zoe M. King et al., 2018 paper, "Characterising and Measuring Maliciousness for Cybersecurity Risk Assessment," to uncover why we need to stop looking at code and start looking at intent. From the "Dark Triad" of personality traits to the rise of the "patriotic hacker" in global geopolitics, we peel back the layers of the human onion to understand what actually drives a person to cause harm. In This Episode, We Discuss: The Maliciousness Assessment Metric (MAM): Why traditional risk assessments fail by ignoring "intent to harm" and how to integrate human factors into your security posture. The Four Layers of Maliciousness: A deep dive into the Individual, Micro, Meso, and Macro levels—from personal psychology to national narratives. Hacking as Patriotism: How cultural contexts in the US, Russia, and China dictate whether a hacker is seen as a criminal or a hero. The "War Games" Effect: How 80s cinema shaped US cybersecurity legislation (CFAA) and continues to influence public perception. Insider Threats & Organizational Hygiene: Why disgruntlement is a security vulnerability and how the "Principle of Least Privilege" is your best defense. Risk as a Moral Construct: Why the risks your company chooses to mitigate reveal your organisation's true values and concept of justice. Show Notes Characterizing and Measuring Maliciousness for Cybersecurity Risk Assessment by Zoe M. King et al., featured in the journal Frontiers in Psychology (2018) Risk and Blame: Essays in Cultural Theory by Mary Douglas Risk and Culture: An Essay on the Selection of Technological and Environmental Dangers by Mary Douglas and Aaron Wildavsky

    46 min

About

The award-winning tech podcast that asks : "Are we the ones breaking the world?" Most tech podcasts are an echo chamber for builders. We step outside. We talk to the observers, the social scientists, and the deep thinkers who study the friction we create and the human systems we disrupt. Lianne Potter and Jeff Watkins strip away the industry fluff and pit academic research against the harsh reality of real organisations and real human incentives. We don’t just talk about AI, security, and automation; we explore the unintended consequences of our own "elegant" solutions. We’re here to look at tech through a different lens and ask the uncomfortable questions that the industry usually avoids. Because if you’ve built a system that has become everyone else's problem, you have to ask: "Am I the compromising position here?"

You Might Also Like