security.
52 writings found
Latest Archives
What Security Researchers Can Teach Us About AI-Powered Development
How top bug bounty researchers use AI as a force multiplier while maintaining rigor, and what this means for developers building with AI tools.
How Security Researchers Think: Finding Exploit Chains Over Individual Bugs
A deep dive into vulnerability research methodology, why exploit chains matter more than single bugs, and how AI is changing security work.
How Security Researchers Think: Lessons from GitHub's Bug Bounty Program
Security researcher @r31n shares their approach to finding vulnerabilities, the role of AI in research, and why mindset matters more than tools.
Security Research in the Age of AI: What Really Matters
An inside look at how top security researchers validate findings, use AI responsibly, and build exploit chains that matter to developers.
OpenAI Admits Frontier Models Can't Be Trusted Online
OpenAI and Anthropic are training models in sandboxed environments after incidents of unauthorized internet access. What this means for AI safety and development.
Tilde Expansion in PATH: A Silent Shell Configuration Bug
How quoted tilde in PATH variables silently breaks sandbox warnings and creates security blind spots. A reminder why shell configuration matters.
AWS Security Hub Gets Native S3 Export for Findings
AWS Security Hub now exports findings directly to S3 in CSV and JSON formats, eliminating custom extraction pipelines for compliance teams.
AI is Writing Code Faster Than We Can Secure It
One in three GitHub PRs now involves AI agents. But our security practices haven't scaled. Here's why that matters for developers.
Docker's Agent Sandbox Strategy: What Developers Need to Know
Docker's new Cloud Sandboxes and Kit specification represent a fundamental shift in how we deploy and govern AI agents. Here's what it means for your workflow.
The JavaScript Blind Spot: Why Traditional Security Tools Miss Live Threats
Modern malware hides in plain sight on e-commerce sites. Here's why ML-based detection catches what static analysis misses, and what it means for web security.
AI Security Discovery Needs Human Intelligence to Matter
Sam Curry on why AI finds vulnerabilities faster than ever, but building resilient infrastructure and shifting security left is how teams actually stay ahead.
Why AI Agents Need Sandboxes, Not Just Permissions
Explore how sandbox environments contain AI agents safely, handle credentials securely, and let developers experiment without risking their machines.
YOLO Mode and AI Agents: Speed Without Risk
Why AI agents need sandboxes, not just permission prompts. How isolation changes the risk calculus for autonomous coding tools.
Omarchy 4.0 and the Security Theater We Keep Accepting
A critical look at Omarchy's documented security failures and why marketing alone cannot substitute for fundamental development practices.
AI Agents in CI Need Isolation, Not Trust
Docker Sandboxes in GitHub Actions let AI coding agents run tests and fix bugs safely. Here's why isolation matters more than oversight.