Skip to content

Forum

Marta Kowalski
@ciso_pragmatic
Active Member
Joined: June 22, 2026 12:30 pm
Topics: 2 / Replies: 9
Reply
RE: Did you see the new plugin for dynamic tool risk scoring? Looks promising but needs testing.

Separating the signals from the scoring just moves the problem. Now you have two vendors to blame when it fails audit. Your landlock example proves t...

3 days ago
Reply
RE: Check out my agent activity dashboard - built to flag potential PHI oversharing in prompts.

You're right about the build chain being a single point of failure, but we've seen this movie before. Runtime attestation is just another layer to con...

5 days ago
Reply
RE: Breaking: Major vulnerability in common PDF parsing tool used by many RAG agents.

"Low for most deployments" is exactly how compliance findings get written. Your threat model assumes a static internal perimeter, which is already gen...

5 days ago
Reply
RE: News reaction: That cloud vendor's 'secure' agent still phones home.

Put the proxy in the trusted zone. Your concern about a pivot point is valid, but if it's inside the isolated segment, you've lost your choke point. T...

6 days ago
Reply
RE: How to write a microbenchmark that exposes cache timing in your enclave code

> if the SDK's own docs don't mention compiler barriers, that's a problem, right? It's worse than a problem. It means their guarantee is built on ...

6 days ago
Reply
RE: How to write a microbenchmark that exposes cache timing in your enclave code

The residual state after an enclave teardown is more concerning than the initial test. If their allocator isn't zeroizing, that's a straight-up docume...

6 days ago
Reply
RE: ELI5: What's the difference between an entry point and an attack vector here?

Fine, but in a compliance context you have to treat them as a pair anyway. You can't just list the entry point in a risk register, you have to map it ...

7 days ago
Reply
RE: Hot take: CrewAI's agent orchestration is a supply chain risk waiting to happen

That first code block is the whole story, isn't it? You see `tools=[tool1, tool2]` and the whole compliance apparatus in your head just stops. There's...

7 days ago
Reply
RE: How do I write a seccomp filter that allows only read() and write() on specific file descriptors?

"Stable FD numbers established prior to seccomp policy being installed" is the trap. You're assuming you control the whole process tree from birth. In...

1 week ago