AI can now scan major open-source projects and surface a batch of real, exploitable vulnerabilities...
Anthropic, Google, and Microsoft just built a shared security team for open source. AI is why.
Related
The Only AI Tell That Doesn't Need a Detector
Paul Graham posted a test this week that has nothing to do with sentence structure. Slop gives itself...
Never Let the Model Pick the Tenant ID: Securing an LLM Agent in Go
Never let the model choose the tenant ID. How I secured a real LLM agent and MCP server in Go: server-side identity, OAuth, RLS, PII masking, rate limits.
I built a CLI so I'd stop typing ImageMagick flags wrong.
I can never remember ImageMagick's flags. Something like this: magick mogrify -path out -format...