#security
Every post tagged "security".
27 posts · showing 11–20
-
The Tool That Changed Under You: Supply-Chain Risk in Agent Tooling
No deploy, no prompt edit, and an ops agent started restarting services mid-investigation. A maintainer had improved a tool's documentation — and documentation, in an agent, is instruction.
-
Computer Use: When the Agent Drives a Whole Desktop
Clicking is easy; knowing what to click is a perception problem solved from a screenshot. The failures are modals, focus loss, and scroll state — and an agent that assumes its click landed compounds errors silently.
-
Least Privilege for Agent Credentials
Since injection isn't fully preventable, the credential decides whether a compromise is an inconvenience or an incident. Four scoping dimensions — and the one nobody uses is usually the highest-value.
-
Red-Teaming Your Own Agent: A Practical Injection Suite
Trying a few "ignore your instructions" prompts tests the easiest attack against the strongest defense. A real suite is a matrix of carriers, payloads, and targets — asserting on actions taken, not words said.
-
Local Models for Agent Work: Where They Actually Fit
"Can a local model replace the frontier one?" is the wrong question. Which steps can move is the right one — and the comparison people skip is against a small hosted model, where most of the saving already lives.
-
Audit Logs That Survive an Incident
Audit logs get designed for compliance and used during incidents. One question — who caused what, to whom, under what authority — decides every field, and most logs can't answer the authority part.
-
The File System as a Tool: Underrated Agent Infrastructure
Four hundred thousand rows won't fit in a context window; a path and a preview cost nothing. A scoped directory solves large results, durable state, and reviewable artifacts at once — if you resolve paths correctly.
-
Multi-Tenancy for Agent Products: The Boundaries That Must Hold
Data, memory, context, and capacity — four boundaries, and two of them are agent-specific enough that no existing multi-tenancy checklist mentions them. Few-shot examples harvested from production are a leak.
-
Data Exfiltration Paths You Forgot Your Agent Had
A URL fetch sends data in the request. A rendered markdown image leaks from the viewer's browser, bypassing every tool-level control. Enumerate the paths — several of them look like features.
-
OAuth for Agents: Acting on Behalf of a User
A service account with everyone's access puts your entire access-control model inside a model's judgment. Per-user tokens move the check to where prompt injection can't reach it.