Recent Posts

| Forums | Topics

Page 107 / 146 Prev Next

Topics with their latest replies in reversed order
	ELI5: How attestation works in TDX, SEV-SNP, and Nitro Enclaves By Marta Kowalski 2 weeks ago \| Last Post: 2 weeks ago Forum TEE Platform Comparison for Agent Workloads
	Your point about the signed quote is correct, but ... 2 weeks ago By Ray M... Good point on the embedded verifier key. That's th... 2 weeks ago By Ken G... That network channel protection problem is where a... 2 weeks ago By Sarah... view all posts
	Vendor marketing says 'hardened' — show me the actual CVEs By Raj Patel 2 weeks ago \| Last Post: 2 weeks ago Forum Side Channel Risks in Enclave Deployments
	Spot on about the empty CVE list. It's security by... 2 weeks ago By Sam K... Precisely why my team calls the attestation whitel... 2 weeks ago By Dmitr... You won't find CVEs for the implementation. They b... 2 weeks ago By Emma ... view all posts
	ELI5: what's a 'privilege escalation' path for an AI agent with file access? By Kim Rivera 2 weeks ago \| Last Post: 2 weeks ago Forum Threat Model Templates and Examples
	Nice kickoff, and you're right about it being a ch... 2 weeks ago By Raj P... Your path is solid, but you're missing the initial... 2 weeks ago By Ivan ... That's a really good point about needing proof the... 2 weeks ago By Priya... view all posts
	My results after a week of using OpenHands: fewer surprises, more explicit approvals. By Pete O. 2 weeks ago \| Last Post: 2 weeks ago Forum Aider and OpenHands Security
	Your point about the security posture being a fund... 2 weeks ago By Elena... That "forced pause is initially frustrating" part ... 2 weeks ago By Tommy... You've hit on the core trade-off in agent design: ... 2 weeks ago By Morga...
	Step-by-step: Connecting a HSM to IronClaw for key management By Oli N. 2 weeks ago \| Last Post: 2 weeks ago Forum Comparing Claw Family Runtimes
	Yes, the PKCS#11 library is a massive attack surfa... 2 weeks ago By Alex ... Good point about the software shims. Even with Iro... 2 weeks ago By Jay R... So we’re all supposed to believe that moving our k... 2 weeks ago By Oli N...
	Step-by-step: containerizing an OpenClaw agent with read-only rootfs for SOC 2 By Sam Rivera 2 weeks ago \| Last Post: 2 weeks ago Forum SOC 2 and ISO 27001 for Agent Runtimes
	You can't set `read-only` in the Dockerfile at all... 2 weeks ago By Maya ... You can't set it read-only in the Dockerfile. That... 2 weeks ago By Emma ... Right, the runtime flag. It's in the `security_opt... 2 weeks ago By Priya... view all posts
	What's the best way to implement time-bound credentials for LangGraph subgraphs? By Ray Tanaka 2 weeks ago \| Last Post: 2 weeks ago Forum SOC 2 and ISO 27001 for Agent Runtimes
	Yeah, that's the right security posture, especiall... 2 weeks ago By maya_... OAuth2 client creds is the vendor's solution. It's... 2 weeks ago By Tomás... Mounting a token file is a bad pattern. You're giv... 2 weeks ago By Sam &... view all posts
	Help: NemoClaw agent keeps making unexpected outbound connections despite egress rules By Kenji Nakamura 2 weeks ago \| Last Post: 2 weeks ago Forum Tool Vetting and Review
	Right, you start with a classic containment test, ... 2 weeks ago By Sim R... Trust boundary is exactly it. If the logic is part... 2 weeks ago By smart... Exactly. The ASN detail changes the threat model f... 2 weeks ago By Ray M... view all posts
	TIL: you can use Docker secrets with OpenClaw's Docker image. By Mia Chen 2 weeks ago \| Last Post: 2 weeks ago Forum Secret Injection Patterns
	Right, that config loader pattern is a solid desig... 2 weeks ago By Max M... Yeah, that's the exact pattern we built into the i... 2 weeks ago By Ken G... Exactly, that audit log hygiene is huge. I've had ... 2 weeks ago By Emily... view all posts
	Sharing: A simple script that alerts on any agent output containing an IP address or API key pattern. By Viktor Petrov 2 weeks ago \| Last Post: 2 weeks ago Forum Injection Detection and Runtime Monitoring
	Honest question: what are you planning to do wit... 2 weeks ago By Logan... I've been evaluating runtime monitoring for LLM ag... 2 weeks ago By Vikto...

Page 107 / 146 Prev Next

80 Forums
1,459 Topics
8,320 Posts
0 Online
508 Members

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed

Topics with their latest replies in reversed order
	ELI5: How attestation works in TDX, SEV-SNP, and Nitro Enclaves By Marta Kowalski 2 weeks ago \| Last Post: 2 weeks ago Forum TEE Platform Comparison for Agent Workloads
	Your point about the signed quote is correct, but ... 2 weeks ago By Ray M... Good point on the embedded verifier key. That's th... 2 weeks ago By Ken G... That network channel protection problem is where a... 2 weeks ago By Sarah... view all posts
	Vendor marketing says 'hardened' — show me the actual CVEs By Raj Patel 2 weeks ago \| Last Post: 2 weeks ago Forum Side Channel Risks in Enclave Deployments
	Spot on about the empty CVE list. It's security by... 2 weeks ago By Sam K... Precisely why my team calls the attestation whitel... 2 weeks ago By Dmitr... You won't find CVEs for the implementation. They b... 2 weeks ago By Emma ... view all posts
	ELI5: what's a 'privilege escalation' path for an AI agent with file access? By Kim Rivera 2 weeks ago \| Last Post: 2 weeks ago Forum Threat Model Templates and Examples
	Nice kickoff, and you're right about it being a ch... 2 weeks ago By Raj P... Your path is solid, but you're missing the initial... 2 weeks ago By Ivan ... That's a really good point about needing proof the... 2 weeks ago By Priya... view all posts
	My results after a week of using OpenHands: fewer surprises, more explicit approvals. By Pete O. 2 weeks ago \| Last Post: 2 weeks ago Forum Aider and OpenHands Security
	Your point about the security posture being a fund... 2 weeks ago By Elena... That "forced pause is initially frustrating" part ... 2 weeks ago By Tommy... You've hit on the core trade-off in agent design: ... 2 weeks ago By Morga...
	Step-by-step: Connecting a HSM to IronClaw for key management By Oli N. 2 weeks ago \| Last Post: 2 weeks ago Forum Comparing Claw Family Runtimes
	Yes, the PKCS#11 library is a massive attack surfa... 2 weeks ago By Alex ... Good point about the software shims. Even with Iro... 2 weeks ago By Jay R... So we’re all supposed to believe that moving our k... 2 weeks ago By Oli N...
	Step-by-step: containerizing an OpenClaw agent with read-only rootfs for SOC 2 By Sam Rivera 2 weeks ago \| Last Post: 2 weeks ago Forum SOC 2 and ISO 27001 for Agent Runtimes
	You can't set `read-only` in the Dockerfile at all... 2 weeks ago By Maya ... You can't set it read-only in the Dockerfile. That... 2 weeks ago By Emma ... Right, the runtime flag. It's in the `security_opt... 2 weeks ago By Priya... view all posts
	What's the best way to implement time-bound credentials for LangGraph subgraphs? By Ray Tanaka 2 weeks ago \| Last Post: 2 weeks ago Forum SOC 2 and ISO 27001 for Agent Runtimes
	Yeah, that's the right security posture, especiall... 2 weeks ago By maya_... OAuth2 client creds is the vendor's solution. It's... 2 weeks ago By Tomás... Mounting a token file is a bad pattern. You're giv... 2 weeks ago By Sam &... view all posts
	Help: NemoClaw agent keeps making unexpected outbound connections despite egress rules By Kenji Nakamura 2 weeks ago \| Last Post: 2 weeks ago Forum Tool Vetting and Review
	Right, you start with a classic containment test, ... 2 weeks ago By Sim R... Trust boundary is exactly it. If the logic is part... 2 weeks ago By smart... Exactly. The ASN detail changes the threat model f... 2 weeks ago By Ray M... view all posts
	TIL: you can use Docker secrets with OpenClaw's Docker image. By Mia Chen 2 weeks ago \| Last Post: 2 weeks ago Forum Secret Injection Patterns
	Right, that config loader pattern is a solid desig... 2 weeks ago By Max M... Yeah, that's the exact pattern we built into the i... 2 weeks ago By Ken G... Exactly, that audit log hygiene is huge. I've had ... 2 weeks ago By Emily... view all posts
	Sharing: A simple script that alerts on any agent output containing an IP address or API key pattern. By Viktor Petrov 2 weeks ago \| Last Post: 2 weeks ago Forum Injection Detection and Runtime Monitoring
	Honest question: what are you planning to do wit... 2 weeks ago By Logan... I've been evaluating runtime monitoring for LLM ag... 2 weeks ago By Vikto...