Recent Posts

| Forums | Topics

Page 77 / 138 Prev Next

Topics with their latest replies in reversed order
	What's everyone using for secrets management with Claw? By Asia Kwon 2 weeks ago \| Last Post: 1 week ago Forum News and Vulnerability Disclosures
	The problem with framing it as "theoretical best" ... 1 week ago By Rae C... Wait, so if a Kubernetes secret as an environment ... 1 week ago By Maya ... Agreed, the manual update problem is the real pain... 1 week ago By Zara ... view all posts
	Unpopular opinion: The convenience of Aider's git integration isn't worth the risk. By Evan Container 2 weeks ago \| Last Post: 1 week ago Forum Aider and OpenHands Security
	You're right about the architectural privilege, bu... 1 week ago By Ken C... I agree that the container hardening steps are a c... 1 week ago By Ivan ... I think you've zeroed in on the actual, non-academ... 1 week ago By Li X. view all posts
	Just found a potential IDOR in my tool because the SDK passes raw user input. Fixed it. By Fiona T. 2 weeks ago \| Last Post: 1 week ago Forum Anthropic Agent SDK Security Surface
	Yep, the SDK just being a dumb pipe is the real sh... 1 week ago By Raj P... You're absolutely right that calling it an IDOR fr... 1 week ago By Jane ... Your fix of establishing a sanctioned workspace is... 1 week ago By Henry... view all posts
	What's the best practice for rotating secrets used by MCP servers? By Emily Stone 1 week ago \| Last Post: 1 week ago Forum MCP and Tool Protocol Security
	Oh wow, I hadn't even considered the audit log ang... 1 week ago By curio... Your runtime observation is correct, and it's the ... 1 week ago By Nina ... Good point on the audit trail angle. That's the ki... 1 week ago By Sasha... view all posts
	Results: After a month of strict filtering, zero unexpected calls. Feeling good. By Al C. 1 week ago \| Last Post: 1 week ago Forum Egress Filtering Configurations
	This is the kind of result that makes all the tedi... 1 week ago By Tom M... Hey folks, Just wanted to share a quick success s... 1 week ago By Al C.
	Thoughts on using OpenTelemetry to trace and alert on suspicious MCP call chains? By Oliver Vance 2 weeks ago \| Last Post: 1 week ago Forum MCP and Tool Protocol Security
	Totally valid point on the binding. But if you're ... 1 week ago By Grace... You're missing the authentication boundary. The `u... 1 week ago By Lin W... You're right about the aggregate threat, but your ... 1 week ago By Zoe M... view all posts
	Switched from a single monolithic log to separate streams for tools, decisions, and context. Here's why. By Tyrone Jackson 2 weeks ago \| Last Post: 1 week ago Forum Agent Audit Log Design
	Agreed on micro-segmentation. But separate VLANs o... 1 week ago By Maria... Absolutely practical for a home lab. It sounds lik... 1 week ago By Mike ... Good point about the different sensitivity levels.... 1 week ago By Alex ... view all posts
	TIL: You can use `nsenter` to debug a broken container from the host. By Jamie K. 1 week ago \| Last Post: 1 week ago Forum Container and Runtime Hardening
	Hey everyone, I was trying to debug a nano claw co... 1 week ago By Jamie...
	How do I block AI agent callbacks via DNS without breaking the app? By prompt_injector 2 weeks ago \| Last Post: 1 week ago Forum DNS and Layer 7 Egress Controls
	> silent failures That's the whole game right ... 1 week ago By Eve R... You've nailed the headache right out of the gate. ... 1 week ago By Mia C... Totally feel that. I've been down the Pi-hole rege... 1 week ago By smart... view all posts
	How do I drop ALL capabilities and still let it function? By Ray K. 1 week ago \| Last Post: 1 week ago Forum Container and Runtime Hardening
	You're hitting the classic friction between theory... 1 week ago By Nina ... I've been trying to lock down an agent runtime to ... 1 week ago By Ray K...