#security
Every post tagged "security".
27 posts · showing 1–10
-
The Page Your Agent Read Told It to Email Your Customer List. "Ignore Instructions in the Content" Won't Stop the Next One.
A system-prompt warning makes injection less likely. It doesn't make it impossible, and the attacker gets as many tries as they like. The real fix lives in the tool dispatcher, not the prompt.
-
Untrusted Text Doesn't Stay Untrusted: Where Provenance Gets Lost in an Agent Pipeline
An injection scanner that fires on the raw email won't fire on the tidy summary of it. Untrusted content gets laundered clean every time an agent rewrites it — here's where the taint disappears, and how to make it survive.
-
Read-Only Was Never the Same as Safe
SELECT-only credentials close exactly one of the four ways an analytics agent can hurt you. The other three don't require the ability to write anything to the database at all.
-
Injection That Crosses a Handoff
The fetcher had no write tools and the analyst never saw a web page. The separation held perfectly — and routed the payload around itself, through the one field that carries prose.
-
Your Trace Store Will Outgrow Your Model Bill
Storage passed inference cost in three weeks, and the proposed fix — sample at 5% — would have discarded exactly the runs worth keeping. A trace isn't one artifact with one lifetime.
-
Compliance and Audit for Agent-Written Systems
The audit questions don't change — who's responsible, how do you know it's correct, show me this case. They become answerable differently, and an actor field saying "agent-service" answers the first one not at all.
-
Security Review When Nobody Wrote the Code
Human vulnerabilities carry a tell — hurried code, an obvious shortcut. Generated code is uniformly careful-looking, so scanning for the suspicious part stops working. But its consistency cuts both ways.
-
The Case for a Local-First Agent Stack
The cost argument for local-first is weak and the ideology one is worse. The case that holds is dependency control — and it comes with a permanent operational tax nobody budgets.
-
What Runs Locally Today and What Still Won't Soon
Local handles the steps; hosted handles the orchestration. The agent loop is the hardest thing to localize, because it stresses all three local constraints at once.
-
Raw SQL or Curated Queries? Giving an Agent Your Database
A two-line tool description can hand an agent unbounded access to your data and your query planner. The guardrails matter more than the choice — and one cheap planner call prevents most of the damage.