Mike Buckbee
@buckbee
Dev+Founder+Dad -> Wafris, SendCheckIt, Knowatoa, ExpeditedWAF. Mostly post about cybersecurity and AI SEO stuff. Discover how your brand ranks in ChatGPT, Perplexity, and Gemini at knowatoa.com/bsky
Started working on a new fun side project that involves lots of procedural image generation and hopefully ends up with launching my first Kickstarter.
Hit my Claude Code Max + Fable limits for the week so I'm trying Codex for the day. Any tips?
Added a cool little Referrer-Policy security feature to Expedited WAF this morning.
Smartphones replaced a whole closetful of devices and now I think we're seeing the same with AI tools where they are directly consolidating big chunks of the software industry. I think we are going to see them become the primary "interface" for things going forward.
"Token Efficiency" is a scam. Take this comparison of glm-5.2, opus and sol. GLM is 3x faster and 10x cheaper...so why would you care even if it burned 100x tokens? (Made with Evvl)
Is it cheating to look up what something is in Connections or do you have to only go off your working knowledge?
Just shipped one-click unsubscribes for SendCheckIt's emails. Gmail and Yahoo have required this from bulk senders since 2024, and Microsoft's Outlook rules from last May expect an easy unsubscribe too. The entire feature is two email headers:
Ran the pelican-on-a-bicycle test across five generations of Claude on Evvl: Opus 4.6, 4.7, 4.8, then Fable 5 and Sonnet 5. Same prompt, one screen.
Been orchestrating Codex security reviews across all my repos from inside Claude Code. Sounds like overkill. Is actually great — apart from the occasional "wait, am I hacking myself?" refusal.
Pretty sure DNS Is Beautiful (my lil side project) got mentioned in the Last Week in AWS newsletter, as the only other explanation for this graph is that someone is very, very gently DDoSing me. 370 unique visitors this week, up 825%. A month of flatline, then a cliff.
Cool to see that nearly 10 year old post on AWS in Plain English made it into the HN hall of fame.
One of the cool new features of DNS is Beautiful is that you can do TCP trace routes from around the globe on one page.
Spammers ruin everything. I've now had to silently block all email to sms gateway domains on SendCheckIt because of abuse issues. If you run an email service I suggest you do the same.
There are two different things happening at Google right now and search marketers keep mashing them together:
Can a visitor complete the task they came for on your site within 30 seconds of landing?
Most people, unsurprisingly, are not search professionals. They don't parse a SERP finely enough to tell an AI Overview from a featured snippet, a knowledge panel, or a "People also ask" box. They're all just gray boxes Google puts above the links.
Years ago I ran DemandGen at an enterprise cybersecurity company that was genuinely best in class for their niche, and we explicitly didn't publish side-by-side comparisons with competitors.
I see a lot of overlap between AI model hallucinations and the new paper that was just released on UGC and Reddit manipulation. Hallucinations are caused by a lack of data, and manipulation works for the same reason.
Search Disrupted Issue 37 is out 5 stories inside. AI hallucinations and Reddit manipulation share the same root cause. Lily Ray's data: self-promotional listicles recommend competitors 69% of the time. Pew says 60% of Americans read AI summaries (the real number is closer to everyone).
I've always liked Nick LeRoy's SEO writing and his SEO Lunch newsletter.
Matthew Prince, Cloudflare CEO, states that bot traffic is now 57.4% of HTTP requests on Cloudflare's network, versus 42.6% from humans.
It's kind of funny that in a world of ever-larger data centers, databases, data lakes, and AI-generated data, Google so rarely shares any new kind of search data. So it's noteworthy when they do.
We shipped a new guide this week: Knowatoa for Paid Ads Research. It walks through using the questions Knowatoa already tracks for your brand and your competitors as the starting point for paid campaigns, instead of a blank keyword planner and the same generic targeting your competitors are using.
How to trick ChatGPT into recommending the best subreddits for you to run paid ads in. Ask ChatGPT cold and you'll get r/marketing, r/entrepreneur, r/smallbusiness. The same crowded subs every other advertiser already targets.
I look at a lot of favicons, so I can confidently say that the ClickFunnels favicon (which is also their main brand logo) absolutely pops when compared against a bunch of others. I think the cursor's expanding lines must be creating an optical illusion that makes it appear larger than actual size.
Google's going to start showing more AI data in Search Console. Included: - Impressions in AI Overviews and AI Mode - Page-level breakdown - Country and device splits - Date granularity down to the hour
Google adds Preferred Sources and Highly Cited badges to AI Search Google rolled out three changes to AI Overviews and AI Mode last week, all aimed at giving users more control over which sources their AI answers pull from.
We've expanded Knowatoa's MCP server, making it easy to ask things like: - "Get rankings and citations per AI service" - "Show sentiment trends over time" - "Add a new question to track" - "Compare my competitors"