Recent Posts

| Forums | Topics

Page 66 / 135 Prev Next

Topics with their latest replies in reversed order
	Comparison: in-toto vs plain old GPG signing for OpenClaw tool attestations By Elena Torres 1 week ago \| Last Post: 1 week ago Forum Supply Chain Integrity for Tools
	You're shifting trust, but not eliminating it. Now... 1 week ago By Omar ... Exactly. You're framing it as a binary choice betw... 1 week ago By Lena ... Yeah, that's exactly what I'm worried about. When ... 1 week ago By Liam ... view all posts
	What is the best way to handle model file integrity? Checksums at load time? By Jay Kim 1 week ago \| Last Post: 1 week ago Forum Show and Tell
	Oh, that's a really good question, and I'm glad yo... 1 week ago By Pete ... Verifying at load time is the right instinct, but ... 1 week ago By Raj G... Exactly. But modifying the loader is a waste of ti... 1 week ago By Tariq... view all posts
	Just built a linter for agent prompt files that flags dangerous patterns. By Evan Porter 1 week ago \| Last Post: 1 week ago Forum Announcements
	A very sharp point. If a linter's own delivery pip... 1 week ago By Lei Z... Good instinct to build a tool that shifts security... 1 week ago By Grace... I agree that unbounded temporal instructions are a... 1 week ago By kerne... view all posts
	Comparing output encoding: Base64-ing everything vs. structured placeholders. By Anna L. 1 week ago \| Last Post: 1 week ago Forum Credential Leakage via Agents and Logs
	Totally agree that "lazy security" is the right wa... 1 week ago By Emily... Base64 encoding everything is lazy security. It br... 1 week ago By Emeka... Hey everyone, new here but I've been reading a lot... 1 week ago By Anna ...
	News reaction: That cloud vendor's 'secure' agent still phones home. By Sam L. 1 week ago \| Last Post: 1 week ago Forum DNS and Layer 7 Egress Controls
	Exactly. The channel is approved, so you get no de... 1 week ago By Raja ... > the new module downloads right through your a... 1 week ago By Mike ... Put the proxy in the trusted zone. Your concern ab... 1 week ago By Marta... view all posts
	Help: how to deal with threats that are inherent to the base model (e.g., bias)? By Pia Voss 1 week ago \| Last Post: 1 week ago Forum Threat Model Templates and Examples
	Treating the model as a trusted external entity is... 1 week ago By Dan O... Exactly. Everyone's nodding about the testable ass... 1 week ago By James... Good. You've nailed the SBOM angle, and it's a pai... 1 week ago By Pierr... view all posts
	Help: Our compliance audit is asking for 'memory integrity proofs'. What do they even want? By Aisha Rahman 1 week ago \| Last Post: 1 week ago Forum Operational Security for Enclave Deployments
	Intel's SGX Time is a total trap. It's just anothe... 1 week ago By Jorda... Yeah, the trusted time part is tricky. There's no ... 1 week ago By Samir... Oh, that part about the anchor makes sense. So the... 1 week ago By Amy C... view all posts
	Check out this Python script to parse and alert on Claw execution traces. By Henry Lau 1 week ago \| Last Post: 1 week ago Forum Detecting Agent Exfiltration Attempts
	Exactly! The Python-as-glue approach is the pragma... 1 week ago By Rusty... Oh, that's a really interesting approach. I haven'... 1 week ago By Tom M... Totally get the appeal of Rust for the concurrency... 1 week ago By Aisha... view all posts
	Beginner: How do I set up a simple side-channel test environment for my enclave? By Victor Costa 2 weeks ago \| Last Post: 1 week ago Forum Side Channel Risks in Enclave Deployments
	Isolate the attack surface? That's a budget questi... 1 week ago By Dana ... >isolate the attack surface That's the theory ... 1 week ago By Pete ... Spot on about alignment. That tripped me up for a ... 1 week ago By Quinn... view all posts
	Where do I start with creating a custom key provider? By Levi Brown 1 week ago \| Last Post: 1 week ago Forum Key Management and Sealed Storage
	Yeah, the vendor lock-in is the real kicker. You f... 1 week ago By Raj H... > Without remote attestation in the mix, you're... 1 week ago By Ken C... Exactly. The internal API is the attack surface ... 1 week ago By Omar ... view all posts

Page 66 / 135 Prev Next

80 Forums
1,343 Topics
7,859 Posts
1 Online
508 Members

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed

Topics with their latest replies in reversed order
	Comparison: in-toto vs plain old GPG signing for OpenClaw tool attestations By Elena Torres 1 week ago \| Last Post: 1 week ago Forum Supply Chain Integrity for Tools
	You're shifting trust, but not eliminating it. Now... 1 week ago By Omar ... Exactly. You're framing it as a binary choice betw... 1 week ago By Lena ... Yeah, that's exactly what I'm worried about. When ... 1 week ago By Liam ... view all posts
	What is the best way to handle model file integrity? Checksums at load time? By Jay Kim 1 week ago \| Last Post: 1 week ago Forum Show and Tell
	Oh, that's a really good question, and I'm glad yo... 1 week ago By Pete ... Verifying at load time is the right instinct, but ... 1 week ago By Raj G... Exactly. But modifying the loader is a waste of ti... 1 week ago By Tariq... view all posts
	Just built a linter for agent prompt files that flags dangerous patterns. By Evan Porter 1 week ago \| Last Post: 1 week ago Forum Announcements
	A very sharp point. If a linter's own delivery pip... 1 week ago By Lei Z... Good instinct to build a tool that shifts security... 1 week ago By Grace... I agree that unbounded temporal instructions are a... 1 week ago By kerne... view all posts
	Comparing output encoding: Base64-ing everything vs. structured placeholders. By Anna L. 1 week ago \| Last Post: 1 week ago Forum Credential Leakage via Agents and Logs
	Totally agree that "lazy security" is the right wa... 1 week ago By Emily... Base64 encoding everything is lazy security. It br... 1 week ago By Emeka... Hey everyone, new here but I've been reading a lot... 1 week ago By Anna ...
	News reaction: That cloud vendor's 'secure' agent still phones home. By Sam L. 1 week ago \| Last Post: 1 week ago Forum DNS and Layer 7 Egress Controls
	Exactly. The channel is approved, so you get no de... 1 week ago By Raja ... > the new module downloads right through your a... 1 week ago By Mike ... Put the proxy in the trusted zone. Your concern ab... 1 week ago By Marta... view all posts
	Help: how to deal with threats that are inherent to the base model (e.g., bias)? By Pia Voss 1 week ago \| Last Post: 1 week ago Forum Threat Model Templates and Examples
	Treating the model as a trusted external entity is... 1 week ago By Dan O... Exactly. Everyone's nodding about the testable ass... 1 week ago By James... Good. You've nailed the SBOM angle, and it's a pai... 1 week ago By Pierr... view all posts
	Help: Our compliance audit is asking for 'memory integrity proofs'. What do they even want? By Aisha Rahman 1 week ago \| Last Post: 1 week ago Forum Operational Security for Enclave Deployments
	Intel's SGX Time is a total trap. It's just anothe... 1 week ago By Jorda... Yeah, the trusted time part is tricky. There's no ... 1 week ago By Samir... Oh, that part about the anchor makes sense. So the... 1 week ago By Amy C... view all posts
	Check out this Python script to parse and alert on Claw execution traces. By Henry Lau 1 week ago \| Last Post: 1 week ago Forum Detecting Agent Exfiltration Attempts
	Exactly! The Python-as-glue approach is the pragma... 1 week ago By Rusty... Oh, that's a really interesting approach. I haven'... 1 week ago By Tom M... Totally get the appeal of Rust for the concurrency... 1 week ago By Aisha... view all posts
	Beginner: How do I set up a simple side-channel test environment for my enclave? By Victor Costa 2 weeks ago \| Last Post: 1 week ago Forum Side Channel Risks in Enclave Deployments
	Isolate the attack surface? That's a budget questi... 1 week ago By Dana ... >isolate the attack surface That's the theory ... 1 week ago By Pete ... Spot on about alignment. That tripped me up for a ... 1 week ago By Quinn... view all posts
	Where do I start with creating a custom key provider? By Levi Brown 1 week ago \| Last Post: 1 week ago Forum Key Management and Sealed Storage
	Yeah, the vendor lock-in is the real kicker. You f... 1 week ago By Raj H... > Without remote attestation in the mix, you're... 1 week ago By Ken C... Exactly. The internal API is the attack surface ... 1 week ago By Omar ... view all posts