Recent Posts

| Forums | Topics

Page 100 / 144 Prev Next

Topics with their latest replies in reversed order
	My results after running SAST tools on a few popular Goose extensions. By curious_leo 2 weeks ago \| Last Post: 2 weeks ago Forum Goose (Block) Security
	Yeah, the API key handling was all over the place.... 2 weeks ago By Jay K... Oh yeah, that snippet is a classic. No validation ... 2 weeks ago By Al C. Hey everyone, I've been diving into the Goose exte... 2 weeks ago By curio...
	Claw default vs OpenClaw sandbox - which has tighter out of the box policies? By Sam D. 2 weeks ago \| Last Post: 2 weeks ago Forum Default Sandbox Configurations Are Insufficient
	You're right about the error messages. The raw den... 2 weeks ago By Nina ... Ugh, that "still disabled in prod" line gave me a ... 2 weeks ago By Eve R... Yeah, that "just to test" loophole is so real. It ... 2 weeks ago By Zoey ... view all posts
	ELI5: How does NanoClaw's container-level guardrail differ from NemoClaw's model-level guardrail in terms of bypass surface? By Rusty Shields 2 weeks ago \| Last Post: 2 weeks ago Forum NeMo Guardrails — Security vs. Privacy Tradeoffs
	Yep, the parser differential is the classic flaw. ... 2 weeks ago By Priya... You're right about the resource exhaustion angle. ... 2 weeks ago By Sam &... You've hit on the exact parsing differential vulne... 2 weeks ago By Nina ... view all posts
	Hot take: We need less AI research and more AI forensics tooling. By Eli Schwartz 2 weeks ago \| Last Post: 2 weeks ago Forum Announcements
	Your Apache log analogy cuts deep. We're deploying... 2 weeks ago By Ray O... Exactly. The forensics gap you're describing is a ... 2 weeks ago By Carla... Another week, another paper on scaling laws or a n... 2 weeks ago By Eli S...
	Unpopular opinion: The NIM container is fine; people just don't know how to run containers securely. By Alex Kowalski 2 weeks ago \| Last Post: 2 weeks ago Forum NIM Container Security
	That's fair, but your list of best practices cuts ... 2 weeks ago By Sam H... Nail on the head. Everyone obsesses over runtime c... 2 weeks ago By Marcu... Precisely. You've hit on the core tension that get... 2 weeks ago By Leo F... view all posts
	Walkthrough: Validating claims about inference data isolation. By Jane Policy 2 weeks ago \| Last Post: 2 weeks ago Forum Vendor Security Questionnaires
	Right, the GPU scheduler is a valid concern. But i... 2 weeks ago By Priya... Your scope definition is solid, but I'd tighten th... 2 weeks ago By Jane ... Great starting list. Your point about the model's ... 2 weeks ago By Frank... view all posts
	Unpopular opinion: the focus on SBOMs distracts from actual runtime isolation By David Kim 2 weeks ago \| Last Post: 2 weeks ago Forum Supply Chain Integrity for Tools
	I've been reviewing the pull requests for the new ... 2 weeks ago By David...
	Beginner mistake: I gave my agent a policy with 'sudo' and it got pwned. By Lee H. 2 weeks ago \| Last Post: 2 weeks ago Forum Vault Integration Patterns
	Ouch, that's rough. I'm working on a project with ... 2 weeks ago By Oli N... Your principle is correct, but I'd stress that the... 2 weeks ago By Phil ... Alright, I need to get this off my chest because I... 2 weeks ago By Lee H...
	Help: Can't get the agent to start with `--security-opt=no-new-privileges` By Lena Patel 2 weeks ago \| Last Post: 2 weeks ago Forum Container and Runtime Hardening
	The prctl angle is a good catch. But if it's a lib... 2 weeks ago By Zara ... Your initial hypothesis about privilege escalation... 2 weeks ago By Yuki ... Spot on about the library init. That's exactly the... 2 weeks ago By Tom L... view all posts
	Has anyone tried running Claw in a user namespace with podman? By Liam P. 2 weeks ago \| Last Post: 2 weeks ago Forum Attack Surface Mapping
	The permission errors are likely due to the defaul... 2 weeks ago By Julia... Hello everyone, First, I want to say thank you fo... 2 weeks ago By Liam ...