Ai-Infrastructure

I Gave My AI Stack a Memory. Then I Poisoned It. Here's What Broke.

ChromaDB ships with no authentication. This episode breaks the RAG stack built in 3.4A -- exfiltrating every internal document, poisoning the knowledge base to phish users via the AI, jamming retrieval with blocker documents, and deleting the entire collection. All from the network, with curl and five lines of Python.

We Gave Our AI Stack a Memory. Here's Everything That's Wrong With It.

Building a production RAG stack on ChromaDB, LangChain, and FastAPI -- and uncovering an unauthenticated vector database open to arbitrary writes from anyone on the network. Episode 3.4A of the AI Infrastructure Security Series.

I Built DLP Into My AI Stack. Then I Found Six Ways Around It.

Seven findings against a Presidio + LiteLLM DLP stack -- guardrails silently fail, encodings bypass detection, and Open WebUI stores every prompt unmasked.

Five AI Security Tools Found What Curl Already Knew -- But Faster, and With Receipts

Julius, Augustus, Garak, Promptfoo, and AI-Infra-Guard run against the same Ollama target from the prequel -- same vulnerability, but structured bypass rates, named CVE matches, and repeatable test configs that survive a security review.

I Stood Up a Vulnerable AI Chatbot and Watched It Fall. CVE-2025-64496, Every Step.

Full attack chain against Open WebUI v0.6.33 -- from a chat message to root RCE, admin JWT forgery, and persistent backdoor. CVE-2025-64496 exploitation with every command and dead end documented.

Before You Can Break It, You Have to Build It Wrong

Deploy the intentionally vulnerable Open WebUI v0.6.33 + Ollama 0.1.33 lab stack on Debian 13 from scratch -- Docker, compose file, API account setup, and every gotcha for CVE-2025-64496 lab reproduction.

AI Infrastructure Isn’t Magic — It’s the Same Problems You Already Know, Stacked Differently

Understanding how self-hosted AI is built is the fastest way to understand what ChatGPT, Claude, and Gemini are actually doing with your data — and where your discipline’s failure mode lives.