Compromising Positions - A Technology Podcast

Compromising Positions

The award-winning tech podcast that asks : "Are we the ones breaking the world?" Most tech podcasts are an echo chamber for builders. We step outside. We talk to the observers, the social scientists, and the deep thinkers who study the friction we create and the human systems we disrupt. Lianne Potter and Jeff Watkins strip away the industry fluff and pit academic research against the harsh reality of real organisations and real human incentives. We don’t just talk about AI, security, and automation; we explore the unintended consequences of our own "elegant" solutions. We’re here to look at tech through a different lens and ask the uncomfortable questions that the industry usually avoids. Because if you’ve built a system that has become everyone else's problem, you have to ask: "Am I the compromising position here?"

  1. The Great AI-Escape! What self-replicating ai agents mean for cybersecurity

    4d ago

    The Great AI-Escape! What self-replicating ai agents mean for cybersecurity

    In this episode, we unpack one of the most alarming AI security papers released so far: research from Palisade Research proving that Large Language Models can autonomously hack systems, self-replicate, and spread across networks. What was once theoretical is now demonstrated reality. We break down how AI agents exploited vulnerable systems, gained root access, copied their own model weights, launched replicas on compromised machines, and propagated to additional targets — all with minimal human involvement. We explore the cybersecurity implications of autonomous AI agents, self-replicating malware, AI-powered cyber attacks, and the growing risk posed by agentic systems operating at machine speed. The discussion also covers open-weight models, AI worm behaviour, zero trust security, chain-of-thought monitoring, and why traditional defensive strategies may be unprepared for the next generation of autonomous threats. In This Episode, We Discuss: Autonomous Exploit to Replication Chains: How the AI agent progressed from exploiting vulnerable web applications to achieving root access, locating its own model weights, cloning itself onto compromised infrastructure, and launching fully operational replicas. Mythos vs Open-Weight Agents: The differences between highly capable but closed models like Anthropic’s Mythos and smaller, open-weight systems capable of self-replication and operational autonomy. The Agentic Age of Cybersecurity: Why AI agents operating outside the chat window fundamentally change threat modelling, incident response, attribution, and detection strategies. Zero Trust for AI Agents: Why future defensive strategies may require treating every autonomous AI system as a potential insider threat through least privilege, sandboxing, canary tokens, and behavioural monitoring. Show Notes Special thanks to our episode sponsor,NorthStar Intelligence- From Ideas to Impact. AI that works for people Language Models Can Autonomously Hack and Self-Replicate by Alena Air et al. Dive into the Agent Matrix: A Realistic Evaluation of Self-Replication Risk in LLM Agents by Boxuan Zhang et al. The Agentic Loss-of-Control Threat Matrix by Billy Gigurtsis Ignore all Previous Instructions: Threat Modelling AI Systems by Compromising Positions

    39 min
  2. Compromising Positions Presents: Tech Film Noir - Electric Dreams (1984)

    May 14

    Compromising Positions Presents: Tech Film Noir - Electric Dreams (1984)

    In the second episode of Tech Film Noir, hosts Lianne Potter, Jeff Watkins, and Simon Painter travel back to 1984 to watch Clippy gone wild in Electric Dreams! *** Regular Compromising Positions Resume on 28th May*** This week on Tech Film Noir, we plug ourselves into the strange, synth-soaked world of Electric Dreams — the gloriously weird 1984 cult sci-fi movie where a socially awkward architect, a spilled bottle of champagne on his brand new PC, and an overenthusiastic home computer accidentally create one of cinema’s earliest AI love triangles. What starts as a light PG comedy quickly mutates into something far stranger: part rom-com, part techno-thriller, part MTV fever dream. We unpack why the film was massively mismarketed, why Edgar the computer has more chemistry than the actual romance, and why its depiction of AI learning feels surprisingly relevant in the age of generative AI and smart homes. Expect retro tech nostalgia, Commodore 64s, Casio calculator watches, suspiciously British “San Francisco” locations, exploding smart appliances, and plenty of discussion about the iconic Together in Electric Dreams soundtrack from Philip Oakey and Giorgio Moroder. As the song says, “we’ll always be together, however far it seems” - which becomes slightly more sinister once your house develops emotional attachment issues. Listen now if you love cult sci-fi, retro tech, AI chaos, and weird 80s cinema. When movies guess the future, we check their work. Ps. Big up the Tech Time Traveller for their great video on the tech in this film

    1h 2m
  3. Chernobyl 40th Anniversary: Are Nuclear Power Plants Safe from A Cyber Attack?

    Apr 30

    Chernobyl 40th Anniversary: Are Nuclear Power Plants Safe from A Cyber Attack?

    In this episode, we commemorate the 40th anniversary of the Chernobyl disaster by asking a chilling modern question: Can a cyber attack cause a nuclear meltdown in 2026? Moving past the Hollywood tropes of ‘exploding reactors,’ we dive into the high-stakes world of OT (Operational Technology) security and critical infrastructure protection. We are joined by Oleg Illiashenko, an expert in nuclear cybersecurity, and Bec McKeown, a specialist in human factors and cognitive readiness, to explore the coordinated digital erosion of safety systems and the psychological ‘misfit’ that occurs when human decision-making collapses under pressure. This isn’t a history lesson. It’s a deep dive into supply chain vulnerabilities, IT/OT convergence, and the uncomfortable truth that in a VUCA (Volatile, Uncertain, Complex, Ambiguous) crisis, the first thing to fail isn't the code, it's the human mind's ability to regulate stress. Expect a masterclass in resilience engineering, safety-critical design, and why the battle for the future of nuclear safety is actually a battle for trustworthy data. In This Episode, We Discuss: The Anatomy of a Nuclear Cyber Attack: Why the most credible threat isn't a single hack, but the coordinated degradation of monitoring systems during a plant transient or grid instability. From Chernobyl to Fukushima: How organisational silence, governance failures, and ignored ‘weak signals’ remain the primary human-factor risks in modern nuclear facilities. The Action Bias Trap: Why the most effective incident response move is often a ‘purposeful pause,’ and how psychological safety allows experts to override failing procedures. IT/OT Convergence & Fragility: How digitalisation and AI diagnostics improve safety while simultaneously expanding the attack surface through complex new failure modes. Building Cognitive Readiness: Practical strategies for emotional regulation and ‘micro-resets’ to maintain shared alignment and decision quality during a high-consequence cyber event. Show Notes A Look at the Leadership Management of Chernobyl and Fukushima Nuclear Accidents by Serap Dunman and Müge Ensari Özay LinkedIn for Oleg Illiashenko LinkedIn for Bec McKeown Get in touch with Bec about contributing to Mind Science

    1h 21m
  4. Self-driving Cars, Cybersecurity and Trust

    Mar 26

    Self-driving Cars, Cybersecurity and Trust

    What happens when the welfare state designs its technology to side-eye first and ask questions later? In this episode, we take a ride into the world of self-driving cars and ask: What happens to trust when your car gets hacked? Drawing upon a 2025 autonomous car-hacking experiment, we explore how trust is built, broken, and crucially, whether that trust can be repaired once a system puts you in harms way. This isn’t just about cars. It’s about what happens when we hand over control to a system we don’t fully understand. Expect human factors, socio-technical theory, real-world cyber scenarios, and the uncomfortable reality that fixing the system isn’t the same as fixing trust. In This Episode, We Discuss: The Attack Surface is Trust: Why the real vulnerability in autonomous systems isn’t the code, it’s human belief. Hack vs Bug: Why a malicious attack hits differently than a system error (and why that distinction matters). Transparency After a Breach: Does telling people the truth about a cyber attack actually rebuild trust or just make them more nervous? The Social Truth about Trust: Why you’re not just trusting the car, but the company, the regulators and the entire system behind it. LINKS The Impact of Cybersecurity Attacks on Human Trust in Autonomous Vehicle Operations by Cherin Lim, David Predez, Linda Ng Boyle and Prashanth Rajivan (2025) Foundations for an Empirically Determined Scale of Trust in Automated Systems by Jiun-Yin Jian, Ann Bisantz, Colin Drury, and James Llinas (1998) Test your morals with the Moral Machine game.

    50 min
  5. Suspicion By Design: Inside DWP's Universal Credit AI Fraud System

    Feb 26

    Suspicion By Design: Inside DWP's Universal Credit AI Fraud System

    What happens when the welfare state designs its technology to side-eye first and ask questions later? In this episode of Compromising Positions, we get hands-on with Big Brother Watch’s “Suspicion by Design” report, unpacking how the UK Department for Work and Pensions (DWP) uses algorithmic profiling and AI systems to detect Universal Credit fraud and why defaulting to suspicion is a dangerous position for any government to take. This episode is a measured examination of welfare AI, algorithmic decision-making, and what happens to trust, consent, and dignity when systems are built to watch first and explain never. Expect socio-technical theory, legal realities, real-world harms, and the kind of uncomfortable questions policymakers really don’t like being asked. In This Episode, We Discuss: Suspicion Architecture: What happens when suspicion is a design choice. The Algorithmic Gaze meets Dataveillance: What happens when you can’t opt out of AI lead services that are inherently bias against you. Why “Security Through Obscurity” Fails: We show why secrecy doesn’t equal safety. Fraud Detection that Punishes the Many, not the Few: How to design AI systems that protect public funds without criminalising the people who need it most. Show Notes Suspicion by Design: What we know about the DWP’s algorithmic black box, and what it tries to hide by Big Brother Watch (2025) Surveillance as Social Sorting: Privacy, Risk and Digital Discrimination by David Lyon (Ed) (2003) Information Technology and Dataveillance by Roger Clarke (1988; 3015)

    45 min
  6. From Dark Triads to Patriotic Hackers: Human Maliciousness in Cybersecurity

    Jan 29

    From Dark Triads to Patriotic Hackers: Human Maliciousness in Cybersecurity

    Is cybersecurity just a technical problem, or a human one? In this episode, we debut our new format: bridging the gap between deep academic research and boots-on-the-ground security practice. We dive into Zoe M. King et al., 2018 paper, "Characterising and Measuring Maliciousness for Cybersecurity Risk Assessment," to uncover why we need to stop looking at code and start looking at intent. From the "Dark Triad" of personality traits to the rise of the "patriotic hacker" in global geopolitics, we peel back the layers of the human onion to understand what actually drives a person to cause harm. In This Episode, We Discuss: The Maliciousness Assessment Metric (MAM): Why traditional risk assessments fail by ignoring "intent to harm" and how to integrate human factors into your security posture. The Four Layers of Maliciousness: A deep dive into the Individual, Micro, Meso, and Macro levels—from personal psychology to national narratives. Hacking as Patriotism: How cultural contexts in the US, Russia, and China dictate whether a hacker is seen as a criminal or a hero. The "War Games" Effect: How 80s cinema shaped US cybersecurity legislation (CFAA) and continues to influence public perception. Insider Threats & Organizational Hygiene: Why disgruntlement is a security vulnerability and how the "Principle of Least Privilege" is your best defense. Risk as a Moral Construct: Why the risks your company chooses to mitigate reveal your organisation's true values and concept of justice. Show Notes Characterizing and Measuring Maliciousness for Cybersecurity Risk Assessment by Zoe M. King et al., featured in the journal Frontiers in Psychology (2018) Risk and Blame: Essays in Cultural Theory by Mary Douglas Risk and Culture: An Essay on the Selection of Technological and Environmental Dangers by Mary Douglas and Aaron Wildavsky

    46 min
  7. Hack the Movies! The Best and Worst Hacker Movies Reviewed Part 2!

    11/21/2024

    Hack the Movies! The Best and Worst Hacker Movies Reviewed Part 2!

    Did you know the best way to bring down hackers is to punch them in the face? That if you don’t have a seven screen set up you’re a rogue amateur? Or that the best hackers have fins? This Episode we are joined by Simon Painter a senior software engineer with nearly 20 years of experience in the industry and author of the book Functional Programming with C#. In this episode, Hack The Movies! The Best And Worst Hacker Movies Part 2! Our regular programming has been hijacked to bring you a discussion on the best, and worst, hacker movies! In this episode we cover The Beekeeper (2024), Swordfish (2001), Jonny Mnemonic (1995), Paper Man (1971) and The Italian Job (1969). So boot up that modem, turn off the lights and enter the deepest darkest web of hacker forums, and try not overload your memory bank, as we explore this sometimes brilliant and sometimes bonkers sub-genre! Show Notes A Developer Goes to The Movies! Simon’s fantastic history on how technology features in films Paper Man (1971) About SIMON PAINTER With nearly 20 years of software engineering experience across various industries, Simon is a Senior Software Engineer at Talos360. Simon is also a Microsoft Most Valuable Professional (MVP) since 2023, an O'Reilly technical book author, and a public speaker at IT events worldwide. His core competencies include C#, JavaScript, React.js, and Microsoft Azure, as well as ITIL and computer security. LINKS FOR SIMON PaINTER Simon’s Website Simon’s Linkedin Simon’s Book, Functional Programming with C#

    1h 20m

About

The award-winning tech podcast that asks : "Are we the ones breaking the world?" Most tech podcasts are an echo chamber for builders. We step outside. We talk to the observers, the social scientists, and the deep thinkers who study the friction we create and the human systems we disrupt. Lianne Potter and Jeff Watkins strip away the industry fluff and pit academic research against the harsh reality of real organisations and real human incentives. We don’t just talk about AI, security, and automation; we explore the unintended consequences of our own "elegant" solutions. We’re here to look at tech through a different lens and ask the uncomfortable questions that the industry usually avoids. Because if you’ve built a system that has become everyone else's problem, you have to ask: "Am I the compromising position here?"

You Might Also Like