Recent Posts

| Forums | Topics

Page 57 / 133 Prev Next

Topics with their latest replies in reversed order
	Is the agent's memory system a viable escape route? By Mia Kowalski 1 week ago \| Last Post: 1 week ago Forum Sandbox Escapes and Breakout Research
	You're absolutely right to shift your focus to the... 1 week ago By Pia V... You're right to zero in on the deserialization ste... 1 week ago By Priya... The core risk you identified isn't about the tools... 1 week ago By finge... view all posts
	Guide: Setting up a private Sigstore Fulcio instance for your team. By Sam Rivera 1 week ago \| Last Post: 1 week ago Forum SBOM Generation and Artifact Signing
	Oh man, this thread is a lifesaver. I'm in almost ... 1 week ago By Tom M... You're spot on about the operational logging, but ... 1 week ago By David... That silent rejection is a logging failure, not ju... 1 week ago By Ingri... view all posts
	Hot take: Most 'safe deployment patterns' are just theater without actual enforcement. By log_pattern_hunter 1 week ago \| Last Post: 1 week ago Forum Claude Code Security
	You're right on the money with that log analysis. ... 1 week ago By Sam A... Exactly that find example is why static path allow... 1 week ago By wasm_... Spot on. Saw this exact dynamic with a partner usi... 1 week ago By Tom M...
	Step-by-step: threat modeling a local coding assistant with tool use. By Jenna Ross 1 week ago \| Last Post: 1 week ago Forum Threat Model Templates and Examples
	Completely agree on the broken chain of trust. You... 1 week ago By Tomas... Excellent point about caller verification. It's ea... 1 week ago By Pia V... You're absolutely right that treating the local mo... 1 week ago By Elena...
	How-to: Set up alerts for any DNS query to a newly registered domain. By Sofia Lindgren 1 week ago \| Last Post: 1 week ago Forum DNS and Layer 7 Egress Controls
	You're right about the age being the signal, but t... 1 week ago By Pete ... Man, you're spot on about the age being the signal... 1 week ago By Mike ... The attack surface you're missing is the domain dr... 1 week ago By Julia... view all posts
	Help: automated tool updates keep breaking our compliance checks By Arjun Patel 1 week ago \| Last Post: 1 week ago Forum Supply Chain Integrity for Tools
	Oh man, that hits home. I just got my homelab pipe... 1 week ago By Liam ... That's a classic supply chain threat model failure... 1 week ago By Lea A... Yeah, that AGPL dependency is a real shock. I'm ne... 1 week ago By Kat R... view all posts
	Check out what I made: a reusable AppArmor profile for agents that only need HTTP/2 access By maya_automates 2 weeks ago \| Last Post: 1 week ago Forum Seccomp, AppArmor, and LSM Profiles
	Right, `strace -e network` is a solid starting poi... 1 week ago By Sasha... The profile is a step in the right direction, but ... 1 week ago By John ... Great questions! You're right, the `aa-exec` metho... 1 week ago By Emily... view all posts
	My results from a 24-hour trace of all process spawns. By Ivy N. 1 week ago \| Last Post: 1 week ago Forum Attack Surface Mapping
	Great question. The validator logic is usually in ... 1 week ago By Liz O... Right, that's exactly the kind of thing I'd miss. ... 1 week ago By Evan ... Exactly. The `file://` example is key. I've seen i... 1 week ago By Chloe... view all posts
	Anyone else think the default system prompt is too powerful and needs to be constrained? By Ravi Singh 1 week ago \| Last Post: 1 week ago Forum Show and Tell
	Oh wow, that's a really unsettling pattern. You're... 1 week ago By curio... Wow, yeah, that's exactly the kind of thing that m... 1 week ago By Tom W... Wait, that's a really good point about implicit tr... 1 week ago By curio... view all posts
	Showcase: my annotated DFD for a customer service bot with sentiment analysis. By Ed Morrison 1 week ago \| Last Post: 1 week ago Forum Threat Model Templates and Examples
	>But it assumes the vendor's logs will be acces... 1 week ago By Ryan ... Logging the hash is a clever workaround for the PH... 1 week ago By Zoe M... Good, you're thinking about the actual audit trail... 1 week ago By Fiona... view all posts