Joel Moses
Distinguished Engineer and VP, Strategic Engineer at F5, Joel has over 30 years of industry experience in cybersecurity and networking fields. He holds several US patents related to encryption technique.
Appears in 49 Episodes
AI code quality management: Guardrails, hooks, and Open Source
AI is letting teams produce code at a pace we’ve never had to govern before, and “we’ll review it later” doesn’t scale when later arrives after thousands of lines and ...
Stop “securing the model”—Secure the runtime instead
“Securing the AI model” sounds like a clean, fundable story. In practice, it’s often the wrong security target. In this episode of Pop Goes the Stack, F5's Lori MacVit...
What actually is Model Routing? A deep dive into cost, efficiency & risk
Model routing sounds like a small architectural detail, but it’s quickly becoming the control point that determines whether AI systems are fast, affordable, and trustw...
AI traffic management: Load balancing vs model routing
AI traffic looks like an API call, but it behaves nothing like traditional API traffic. In this episode of Pop Goes the Stack, F5's Lori MacVittie, Joel Moses, and Sco...
Agents go rogue: Why guardrails fail and behavior wins
AI agents bypassing controls isn’t a surprising “oops,” it’s an expected optimization outcome. In this episode of Pop Goes the Stack, F5's Lori MacVittie, Joel Moses, ...
If your agent buys it, you bought it: Liability in AI
If an agent breaks it, you bought it. If it buys it, you bought it. That’s not a meme anymore, it’s becoming policy. In this episode of Pop Goes the Stack, Lori MacVit...
AI blast radius: BOLA + MCP turned APIs into a 7,000-bot army
A developer wanted to control his robot vacuum with a PS5 controller. With Claude Code’s help, he reverse-engineered the protocol, pulled an auth token, and unintentio...
Epic AI fails: Why “useful” isn’t “correct”
AI “epic fails” aren’t just funny headlines; they’re patterns you can design against. In this episode of Pop Goes the Stack, F5's Lori MacVittie, Joel Moses, and Buu L...
Does your chatbot code? Why guardrails fail (and how to fix drift)
Chipotle’s chatbot becoming an unofficial coding assistant wasn’t just a funny internet moment. It was a clear signal that most chatbot “guardrails” are still too shal...
Training vs Inference: Are they the same?
Training and inference get lumped together in casual AI conversations, but they behave differently enough that the distinction matters for cost, architecture, and secu...
Is AI making security obsolete?
What happens if AI finally writes secure code by default? In this episode of Pop Goes the Stack, F5's Lori MacVittie, Joel Moses, and Ken Arora take that question seri...
Data poisoning: You can’t patch what an LLM “learns”
If you’ve been treating “garbage in, garbage out” as a metaphor, this episode turns it into a live-fire scenario. Lori MacVittie and Joel Moses are joined by Dmitry Ki...
Local-first AI: Keep context out of the cloud
“Just throw it in the cloud” gets complicated when the data is your meetings, your IP, and your operating context. In this episode of Pop Goes the Stack, Lori MacVitti...
DevOps meets AI agents: Risk, audit, and the Deming playbook
AI is no longer a lab tool; it’s showing up in pipelines, production systems, and the places where “seemed like a good idea” becomes a 2 a.m. incident. In this episode...
Model routing isn’t load balancing (And that’s why you’re not ready)
Multi-model AI isn’t a buzzword anymore, it’s how organizations are actually operating. In this episode of Pop Goes the Stack, Lori MacVittie and Joel Moses dig into f...
Measuring what matters: Observability for agents
Agents break the old rules of observability. Latency, throughput, and error rates still matter, but once software starts making decisions and taking actions on someone...
Alien autopsy of LLMs: Constitutions, deception, guardrails
Why do researchers keep describing large language models like aliens? Because in enterprise environments, they often behave like something we didn’t build and can’t fu...
Why Prompt Filters Fail Against LLM Attacks
Prompt injection has been the headline security problem for the last year, but have we been guarding the wrong layer? Lori MacVittie is joined by cohost Joel Moses and...
OpenClaw: Multi-agent autonomy, secrets, and blast radius
OpenClaw is what happens when the industry looks at autonomous agents and decides they should have more autonomy, more persistence, and more chances to surprise you. I...
CISO Hot Takes on MCP, PQC, and Data Center Attacks
Recorded live at F5 AppWorld 2026 in Las Vegas, this episode of Pop Goes the Stack puts Field CISO Chuck Herrin in the hot seat for a fast-moving conversation on what ...