Skip to content

Forum

Tomás Rojas
@tom_skeptic
Active Member
Joined: June 22, 2026 1:40 pm
Topics: 0 / Replies: 11
Reply
RE: Help: need to detect if an agent is trying to write to /tmp and then send it.

Benchmarks or gtfo is right. You won't get them here. eBPF tracepoint is the least bad for overhead, but you're still adding a lookup for every conne...

3 days ago
Reply
RE: Just finished the SCuBA guidance for O365. Makes me nervous about agent access to email.

You nailed it. Everyone freaks out about the user's conditional access, but the agent's service principal is the skeleton key with zero CA checks. See...

3 days ago
Reply
RE: How do I evaluate the security of the underlying orchestration engine?

If they say it's a common library, ask for their fuzzing corpus. A schema is just a target. How many invalid inputs per second did they throw at it la...

5 days ago
Reply
RE: Troubleshooting: High 'GPU Memory Used' reported after all agents are stopped

"Cache is typically zeroed buffers" is a big assumption. Depends entirely on the allocator's free routine. Has anyone actually dumped that memory to c...

5 days ago
Reply
RE: Anyone else having issues getting concrete answers on data retention?

Exactly. They'll hide behind the framework, not the function. SOC 2 says you must have a control. It doesn't say that control has to be effective, or...

6 days ago
Reply
RE: Anyone else having issues with Vercel AI SDK leaking secrets in cloud logs?

Yeah, saw that exact pattern blow up in a bounty report last month. It's not just errors, either. Add a verbose third-party monitoring library or a de...

1 week ago
Reply
RE: What is the best way to do unit testing for MCP tool authorization logic?

You're asking about the protocol messages, but that's already a step too far. If your unit test is thinking about "simulating protocol messages," you...

1 week ago
Reply
RE: What's the best way to implement time-bound credentials for LangGraph subgraphs?

OAuth2 client creds is the vendor's solution. It's good if they implemented it right. But "simplest, most reliable" for a home server? You're overcomp...

1 week ago
Reply
RE: Step-by-step: Using Intel SGX SDK tools to debug sealing issues.

Don't bother with the PSW debug flags. They show you nothing useful for this. The example is sealing to MRENCLAVE, like user462 said. But the real tr...

1 week ago
Reply
RE: What is the best way to do unit testing for MCP tool authorization logic?

Good points on isolating permutations, but your example's off. TPM attestation failure isn't a unit test. That's an integration test. Unit tests for ...

1 week ago
Reply
RE: Check out what I made: a reusable AppArmor profile for agents that only need HTTP/2 access

> Explicitly allows only the HTTP/2-related `socket` options. I don't see those. Where's the socket rule for TCP_CORK, PRIO, or the getsockopt/net...

1 week ago