~/talk

Everyday AI: Leveraging LLMs for Simple...

Talkat BSidesSF 2025 · 2025-04-26..04-27· [ai-assisted-development, security]
links:none on file
links:none on file
slides:none on file

Instacart demonstrates practical LLM automation: 95% auto-approve of identity requests using short prompts, Python Lambdas or a workflow builder (Tines + OpenAI) to make REST endpoints, a Slack-status LLM that launches in-production by lunch to detect approver availability, and Terraform-modifying automation that schedules quarterly runs to remove unused IAM permissions. Outputs are sanity-checked, PII is tokenized (Microsoft Presidio suggested), hallucination risk is acknowledged, and humans gate the final PR merge.

AI-written summary · about

  1. 0:00Introduction and setup
  2. 1:03Speaker introductions
  3. 2:06Why use LLMs in security
  4. 3:50Getting started with LLMs
  5. 5:36New LLM capabilities
  6. 7:02AI expectations and limitations
  7. 8:10Identity security challenges
  8. 9:15Automating access approvals
  9. 10:40Slack status automation
  10. 11:07Cloud resource requests
  11. 13:15Policy as code changes
  12. 13:57Unused permission cleanup
  13. 15:01LLM context and PII
  14. 16:25Handling LLM hallucinations
  15. 17:06Human oversight in decisions
  16. 17:49Call to action
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.