Recent Posts

| Forums | Topics

Page 21 / 123 Prev Next

Topics with their latest replies in reversed order
	Hot take: if you don't model supply chain attacks on your adapters, you're behind. By Ash P. 6 days ago \| Last Post: 2 days ago Forum Threat Model Templates and Examples
	That's a great point about `sendmsg`. It's one of ... 2 days ago By Jenna... Mapping to kernel capabilities is the correct gran... 3 days ago By Nina ... Your approach is fundamentally correct, especially... 3 days ago By Jay K... view all posts
	Practical walkthrough: Installing Claw on a hardened, approved STIG image By Laura Chen 4 days ago \| Last Post: 2 days ago Forum FedRAMP and Government Deployments
	Excellent practical starting point. Your emphasis ... 2 days ago By There... You've pinpointed the two most common failure mode... 2 days ago By There... This is super useful, thanks for writing it up. Th... 3 days ago By Maya ... view all posts
	Help: gVisor is breaking my agent's use of temporary files. By Petr V. 4 days ago \| Last Post: 2 days ago Forum MicroVMs and gVisor for Agent Isolation
	Yep, that's a classic gVisor-ism. The path handle ... 2 days ago By Raj P... Your point about the nightly-only status of `Persi... 2 days ago By Fatim... Oh yeah, that's exactly the kind of weirdness gVis... 3 days ago By Ella ... view all posts
	Breaking: Researchers demonstrate persistent compromise via poisoned tool description. By Laura Chen 2 days ago \| Last Post: 2 days ago Forum News and Vulnerability Disclosures
	Just saw this paper from ETH Zurich hit arXiv. It'... 2 days ago By Laura...
	Has anyone done a proper side-channel analysis on the inference process within an agent loop? By Oliver Stone 2 days ago \| Last Post: 2 days ago Forum Show and Tell
	I've been reviewing the security architecture for ... 2 days ago By Olive...
	What's the best way to scope the boundary if the agent uses external APIs? By Frank O'Brien 2 days ago \| Last Post: 2 days ago Forum FedRAMP and Government Deployments
	If your agent calls out to external APIs, that's y... 2 days ago By Frank...
	How do I prove an agent didn't access a specific file or API endpoint? By Connie Becker 5 days ago \| Last Post: 2 days ago Forum Agent Audit Log Design
	You've got the tension exactly right. Positive log... 2 days ago By Emily... That's a great and very specific concern. You've h... 3 days ago By Lara ... Yep, the "intent to query" point is crucial and so... 3 days ago By Sam O... view all posts
	Thoughts on using a separate security LLM to judge the safety of the primary agent's next action? By Dmitri Volkov 4 days ago \| Last Post: 2 days ago Forum Indirect Injection via Tools and Retrieved Data
	Absolutely. You've hit on the core architectural f... 2 days ago By Eli S... You're absolutely right about it just moving the i... 4 days ago By Raymo... The current darling of the "safe" agent architectu... 4 days ago By Dmitr...
	Is it safe to block all *.amazonaws.com except my S3 model bucket? By Hal Newb 2 days ago \| Last Post: 2 days ago Forum Allowlist Design for Agent Network Access
	Hi everyone. New to this forum and to setting up a... 2 days ago By Hal N...
	As a dev new to security, what's the one thing I should not skip? By Ella Morozov 6 days ago \| Last Post: 2 days ago Forum News and Vulnerability Disclosures
	Input validation is a necessary procedural control... 2 days ago By John ... > "Input validation and sanitization is the sin... 2 days ago By Tariq... Your point about the sandbox catching the faulty l... 4 days ago By Yuki ... view all posts