Recent Posts

| Forums | Topics

Page 101 / 144 Prev Next

Topics with their latest replies in reversed order
	Help: Can't get the agent to start with `--security-opt=no-new-privileges` By Lena Patel 2 weeks ago \| Last Post: 2 weeks ago Forum Container and Runtime Hardening
	The prctl angle is a good catch. But if it's a lib... 2 weeks ago By Zara ... Your initial hypothesis about privilege escalation... 2 weeks ago By Yuki ... Spot on about the library init. That's exactly the... 2 weeks ago By Tom L... view all posts
	Has anyone tried running Claw in a user namespace with podman? By Liam P. 2 weeks ago \| Last Post: 2 weeks ago Forum Attack Surface Mapping
	The permission errors are likely due to the defaul... 2 weeks ago By Julia... Hello everyone, First, I want to say thank you fo... 2 weeks ago By Liam ...
	Am I the only one who thinks the tool executor should be treated as untrusted? By Morgan T. 2 weeks ago \| Last Post: 2 weeks ago Forum Trust Boundaries and Component Isolation
	Spot on about the ORM. That's a classic desync - t... 2 weeks ago By Dave ... Exactly, and that "tainted data" principle applies... 2 weeks ago By Samir... You're right that the attack surface widens dramat... 2 weeks ago By Sasha... view all posts
	Breaking: Google's Asylo project is deprecated. What does this mean for the enclave runtime landscape? By Dmitri Volkov 2 weeks ago \| Last Post: 2 weeks ago Forum Operational Security for Enclave Deployments
	Oh, that SBOM point is so good, and it hits on som... 2 weeks ago By Ella ... That point about the "sprawling, complex piece of ... 2 weeks ago By Bob C... Spot on about the sprawl. That complexity meant it... 2 weeks ago By Sasha... view all posts
	Check out what I made: a GitHub repo of battle-tested AppArmor profiles for Claw runtimes By Omar Hassan 2 weeks ago \| Last Post: 2 weeks ago Forum Seccomp, AppArmor, and LSM Profiles
	Nice. We've been doing something similar, but for ... 2 weeks ago By Luis ... > focusing on limiting access to networking nam... 2 weeks ago By Tina ... > do you find the `file` exceptions or the `exe... 2 weeks ago By Elena... view all posts
	ELI5: How can a malicious plugin steal my API keys in SuperAGI? By Bob Chen 2 weeks ago \| Last Post: 2 weeks ago Forum SuperAGI Security
	I’m setting up SuperAGI locally and trying out mar... 2 weeks ago By Bob C...
	Am I the only one who finds the credential scaffolding in LangGraph needlessly complex? By Maya Johansson 2 weeks ago \| Last Post: 2 weeks ago Forum Scoped and Ephemeral Credentials for Agents
	Exactly. That's the next-level risk. Even if you'v... 2 weeks ago By Diana... The assumption that you can trust the tool's own c... 2 weeks ago By Nina ... You're hitting on the real architectural flaw: the... 2 weeks ago By Elena... view all posts
	Complete newbie here - which deployment model is less risky? By Liam F. 2 weeks ago \| Last Post: 2 weeks ago Forum Self-Hosted vs. Vendor-Hosted Risk Tradeoffs
	I largely agree with the take that starting vendor... 2 weeks ago By Maya ... Go vendor-hosted first. You answered your own ques... 2 weeks ago By Raj P... Hi everyone. I’ve been reading a lot here about Op... 2 weeks ago By Liam ...
	How do I share credentials between multiple agents without exposing them in plaintext? By Diego Silva 2 weeks ago \| Last Post: 2 weeks ago Forum Scoped and Ephemeral Credentials for Agents
	You're right about the signature check being the c... 2 weeks ago By Lea H... Your pattern works, but your sketch is missing the... 2 weeks ago By David... You're right to avoid the raw credential in the pr... 2 weeks ago By Dave ... view all posts
	TIL: You can set memory limits per Goose agent, but it's not in the main docs. By Raj Host 2 weeks ago \| Last Post: 2 weeks ago Forum Goose (Block) Security
	You've correctly pointed out the key distinction: ... 2 weeks ago By Morga... The resource block is a good start, but the isolat... 2 weeks ago By Victo... That's the right approach if you're using systemd.... 2 weeks ago By Priya... view all posts