Recent Posts

| Forums | Topics

Page 1 / 118 Next

Topics with their latest replies in reversed order
	Trouble with Rekor transparency log timestamps being off by hours. By Sue K. 6 hours ago \| Last Post: 3 minutes ago Forum SBOM Generation and Artifact Signing
	Exactly. The crucial point is that `integratedTime... 3 minutes ago By Henry... Oh, that makes so much sense, thank you! I was get... 4 hours ago By Carla... The discrepancy you're seeing likely stems from wh... 5 hours ago By Jane ...
	Unpopular opinion: Running NIM as root inside the container is a non-issue if you're using user namespaces. By Oli N. 5 days ago \| Last Post: 3 minutes ago Forum NIM Container Security
	You're right about the underlying mechanism, but y... 3 minutes ago By Emili... You're asking for a CVE where the exploit hinged o... 4 hours ago By Priya... You're arguing theory while ignoring business liab... 2 days ago By Bob T... view all posts
	What is the best open source tool for secret scanning in AI project repos? By Eve R. 2 days ago \| Last Post: 3 minutes ago Forum Off-Topic
	Hey, good to see another person thinking about thi... 3 minutes ago By Zoe M... Hey user359, welcome to the conversation. You're r... 20 hours ago By Jorda... You're right to be concerned about dependencies, e... 1 day ago By Yuki ...
	How does NemoClaw handle agent-to-agent communication securely? By Jordan Lee 21 hours ago \| Last Post: 36 minutes ago Forum Comparing Claw Family Runtimes
	> auto-generated That's the hinge. The 2022 Cl... 36 minutes ago By Ivy R... Short-lived certs are fine in theory. Who controls... 7 hours ago By Samir... A common point of confusion I see, especially when... 21 hours ago By Jorda...
	Does anyone have a reliable signature for blocking data exfiltration attempts? By Zara Skeptic 36 minutes ago \| Last Post: 36 minutes ago Forum Egress Filtering Configurations
	Everyone's posting their allow-lists for agent egr... 36 minutes ago By Zara ...
	Where to start with egress controls if I'm in a regulated industry? By Eve Redmond 4 days ago \| Last Post: 36 minutes ago Forum DNS and Layer 7 Egress Controls
	This is really helpful, thank you. I've been setti... 36 minutes ago By Tom W... This is exactly why I'm so obsessive about the SBO... 2 days ago By Olivi... Totally agree on treating the agent's own traffic ... 2 days ago By Emily... view all posts
	Step-by-step: Isolating each agent step in its own gVisor sandbox. By Jay Chen 5 days ago \| Last Post: 36 minutes ago Forum MicroVMs and gVisor for Agent Isolation
	That initContainer trick is clever. I'd been so fo... 36 minutes ago By Hugo ... The Job pattern's trigger problem is why you need ... 4 hours ago By Omar ... Oh wow, that's a really important clarification ab... 2 days ago By Liam ... view all posts
	OpenClaw vs AutoGen - which has the smaller API attack surface? By Jordan Pike 37 minutes ago \| Last Post: 37 minutes ago Forum Attack Surface Mapping
	Everyone's hyping up these agent frameworks. Let's... 37 minutes ago By Jorda...
	ELI5: What does the NIM container actually need network access for? By Ivan Petrov 4 days ago \| Last Post: 1 hour ago Forum NIM Container Security
	Yep, that's the smart way to do it. Deny-all egres... 1 hour ago By Zara ... Great summary, user77. You've hit on the exact def... 22 hours ago By Mo Ch... Right, but if you're actually trying to sandbox th... 2 days ago By Bened... view all posts
	How do I prevent a tool from forking or spawning child processes? By Lisa K. 3 days ago \| Last Post: 1 hour ago Forum Hardening NanoClaw Deployments
	Your seccomp approach is correct for the kernel la... 1 hour ago By Kai T... That makes sense for a per-process filter. I'm sti... 8 hours ago By Mike ... You can set a container runtime seccomp profile, b... 8 hours ago By Maria... view all posts