TR Noteshttps://www.xiaohei.co/Security research and learning notesenThinking About AI: When It Can Save Lives, Will We Still Care About Risk?https://www.xiaohei.co/articles/ai-progress-risk-and-the-cure/https://www.xiaohei.co/articles/ai-progress-risk-and-the-cure/A reflection on black-box medicine, AI mathematics and dual-use research: when benefits become personal, how should we weigh uncertainty, and who may accept risks on behalf of others?Tue, 10 Nov 2026 00:00:00 +0000From MCP Configuration to Server-Side Execution: A Trust-Boundary Case Studyhttps://www.xiaohei.co/articles/mcp-stdio-configuration-trust-boundary/https://www.xiaohei.co/articles/mcp-stdio-configuration-trust-boundary/An API that omits secrets, artifacts without runtime configuration, and an unreachable database led to a closer look at MCP stdio process-launch privileges. A case study in eliminating paths and separating configuration authority from runtime authority.Mon, 09 Nov 2026 00:00:00 +0000From a Client Network to Embedding Inversion: The Full Engagement and AI Errorshttps://www.xiaohei.co/articles/embedding-inversion-environment-and-ai-errors/https://www.xiaohei.co/articles/embedding-inversion-environment-and-ai-errors/A complete sanitized account of an authorized client engagement, from initial access, a misleading RAG stack, and deployment remnants to local and domain privileges, SSH identity matching, vector export, candidate recovery, and ten types of AI error.Mon, 09 Nov 2026 00:00:00 +0000Multicloud Network Control Planes: Routing and Security Operations Across OCI, GCP, Azure, and AWShttps://www.xiaohei.co/articles/multicloud-routing-soc/https://www.xiaohei.co/articles/multicloud-routing-soc/Using a hypothetical OCI, Google Cloud, Azure, and AWS deployment, this article reviews interconnects, routing control planes, Kubernetes networking, private endpoints, and multicloud security operations.Tue, 27 Oct 2026 00:00:00 +0000Gemini in Google Workspace: Data Access Boundaries and Security Reviewhttps://www.xiaohei.co/articles/google-identity-part3-gemini-offense/https://www.xiaohei.co/articles/google-identity-part3-gemini-offense/This article distinguishes the Gemini app, Workspace-integrated features, and Gemini Enterprise; reviews their data-access and administrative boundaries; and uses the publicly disclosed, patched GeminiJack case as historical context for indirect prompt-injection risk.Tue, 27 Oct 2026 00:00:00 +0000Google Workspace Identity Management and Apple Federationhttps://www.xiaohei.co/articles/google-identity-part2-workspace-gmail-apple/https://www.xiaohei.co/articles/google-identity-part2-workspace-gmail-apple/This article reviews Workspace domain and directory boundaries, organizational units, administrator roles, 2-Step Verification, federation, API controls, domain-wide delegation, unmanaged accounts, and federation with Apple Business Manager.Tue, 27 Oct 2026 00:00:00 +0000Google Cloud Identity, Resource Hierarchy, and Billinghttps://www.xiaohei.co/articles/google-identity-part1-cloud-hierarchy-credentials-billing/https://www.xiaohei.co/articles/google-identity-part1-cloud-hierarchy-credentials-billing/This article reviews consumer and managed identities, the Google Cloud organization-folder-project hierarchy, service-account credentials, and the relationship between Cloud Billing accounts and Google payments.Tue, 27 Oct 2026 00:00:00 +0000Everyone Is a Red Teamer: Four Years of AI Red Teaminghttps://www.xiaohei.co/articles/2026-10-27-ai-red-team-four-years/https://www.xiaohei.co/articles/2026-10-27-ai-red-team-four-years/*Collapsing barriers, dual loss of control, and the return of discipline*Tue, 27 Oct 2026 00:00:00 +0000Microsoft 365, Copilot, and the Security Control Planehttps://www.xiaohei.co/articles/microsoft-identity-part2-m365-copilot/https://www.xiaohei.co/articles/microsoft-identity-part2-m365-copilot/This article reviews Microsoft 365's layered authorization model, its boundaries with Azure, workload access paths, Microsoft Graph application permissions, Copilot data access, and the control planes for Sentinel, Purview, Defender, and Intune.Mon, 26 Oct 2026 00:00:00 +0000Microsoft Cloud Identity and Hybrid Authentication: Tenants, Subscriptions, and Kerberoshttps://www.xiaohei.co/articles/microsoft-cloud-identity-hybrid-auth/https://www.xiaohei.co/articles/microsoft-cloud-identity-hybrid-auth/This article examines Microsoft Entra tenant, Azure subscription, and billing boundaries; role systems and workload identities; and the hybrid authentication paths connecting on-premises Active Directory with Microsoft Entra.Mon, 26 Oct 2026 00:00:00 +0000Can Encrypted Thinking Be Revived? An Azure Reasoning-State Replay Experimenthttps://www.xiaohei.co/articles/azure-encrypted-reasoning/https://www.xiaohei.co/articles/azure-encrypted-reasoning/Starting with a cache hypothesis, I tested cross-session replay, cross-model reuse, and usage differences in Azure encrypted reasoning—and reconsidered the boundaries between state, caching, and trust.Mon, 26 Oct 2026 00:00:00 +0000AWS Identity and Billing Boundaries: Root, Management Accounts, and Cross-Account Trusthttps://www.xiaohei.co/articles/aws-identity-root-payer-trust/https://www.xiaohei.co/articles/aws-identity-root-payer-trust/AWS concentrates identity, credentials, trust, and billing around the account boundary. This article reviews the root user, the management account's payer role, credential lifetimes, and cross-account authorization.Mon, 26 Oct 2026 00:00:00 +0000About these noteshttps://www.xiaohei.co/articles/hello-lisg/https://www.xiaohei.co/articles/hello-lisg/An introduction to my red team background, the security areas I focus on, and what I plan to share in this notebook.Mon, 19 Oct 2026 00:00:00 +0000