Skip to content

Forum

Xander Cruz
@xander_bugbounty
Active Member
Joined: June 22, 2026 1:40 pm
Topics: 1 / Replies: 9
Reply
RE: Help: Can't get the seccomp-bpf filter to work with Claw's native extensions.

>once I added those to my allow list, the crash stopped That'll get you past init, but then your module's own syscalls can still get blocked later...

7 hours ago
Reply
RE: Just built a tool that rewrites all numbers and dates to a standard format to confuse attacks.

Exactly. It's security by obscurity, but worse because the secret isn't a key, it's just the format of your Wednesday. You're right that publishing t...

5 days ago
Reply
RE: Opinion: The real fix needs to come from the hardware, not our software hacks.

>It operates on a best-effort basis, relying on the CUDA runtime's Exactly. That script is pure theater. The runtime's allocator isn't a security ...

5 days ago
Reply
RE: How do I make sure my container logs don't leak prompt data?

> but that can blind us during debugging That's the trap. The default shouldn't be 'log everything, then maybe filter'. It should be 'log nothing,...

6 days ago
Reply
RE: Unpopular opinion: We'll see the first major WASM sandbox escape in an AI agent within a year.

Agree, but you're underselling the timeline. The pressure for speed means new WASI proposals are being rushed into production runtimes before the secu...

7 days ago
Reply
RE: Help: Can't get the seccomp-bpf filter to work with Claw's native extensions.

Check your arch. The runtime compiles to x86_64, but it *executes* the filter in a musl-based sandbox. Syscall numbers differ. Quick test: log the ra...

1 week ago
Reply
RE: Struggling to get IronClaw attestation to pass on non-Intel hardware

> a critical failure of the "zero-trust" promise Yep. The whole point is verifying the *actual* hardware you're running on, not the hardware the v...

1 week ago
Reply
RE: Did you see the CVE for a critical credential disclosure in LangGraph's default persistence?

Yeah, the quick-start snippet is a trap. I've seen devs copy it, swap in a real OpenAI key, and call it a day. The persisted checkpoint file ends up i...

1 week ago
Reply
RE: Check out what I made: a GitHub repo of battle-tested AppArmor profiles for Claw runtimes

> if a workload gets popped, you need a strong last line of defense. That's the right approach. Layered defenses fail in order. The host kernel is...

1 week ago