DEV Community

black box Series' Articles

Back to Sam LABBE's Series
The AI Act went live two months ago. Your agent's logs are still editable.
Cover image for The AI Act went live two months ago. Your agent's logs are still editable.
slabb profile

The AI Act went live two months ago. Your agent's logs are still editable.

#ai #security #python #compliance
7
Comments 6
6 min read
Always-on agents arrived this week. Here's the gate for what they read.
Cover image for Always-on agents arrived this week. Here's the gate for what they read.
slabb profile

Always-on agents arrived this week. Here's the gate for what they read.

#ai #security #python #mcp
1
Comments
4 min read
I attack-tested my agent's seatbelt. Here's what survived.
Cover image for I attack-tested my agent's seatbelt. Here's what survived.
slabb profile

I attack-tested my agent's seatbelt. Here's what survived.

#ai #programming #productivity #shell
6
Comments
5 min read
She used Claude as a diary. The terms of service are now part of the charge.
Cover image for She used Claude as a diary. The terms of service are now part of the charge.
slabb profile

She used Claude as a diary. The terms of service are now part of the charge.

#ai #security #privacy #law
5
Comments 3
5 min read
Docker just shipped the agent wall I wanted. It's off by default.
Cover image for Docker just shipped the agent wall I wanted. It's off by default.

Defaults are policy and the sandbox matters
slabb profile

Docker just shipped the agent wall I wanted. It's off by default.

#ai #docker #security #devops
24
Comments 52
5 min read
Someone anchored 339 billion web pages to Bitcoin. Here's how it works.
Cover image for Someone anchored 339 billion web pages to Bitcoin. Here's how it works.
slabb profile

Someone anchored 339 billion web pages to Bitcoin. Here's how it works.

#security #opensource #data #bitcoin
7
Comments 1
5 min read
One quoted tilde in your .bashrc is an attacker-controlled PATH entry
Cover image for One quoted tilde in your .bashrc is an attacker-controlled PATH entry
slabb profile

One quoted tilde in your .bashrc is an attacker-controlled PATH entry

#security #bash #linux #shell
6
Comments 2
4 min read
Five witnesses and two RIRs: the CAs just discovered custody
Cover image for Five witnesses and two RIRs: the CAs just discovered custody
slabb profile

Five witnesses and two RIRs: the CAs just discovered custody

#security #webdev #dns #devops
8
Comments
5 min read
OpenCode lost the keys that lived in its cloud. The ones on disk were fine.
Cover image for OpenCode lost the keys that lived in its cloud. The ones on disk were fine.

Natural experiment proving local storage security
slabb profile

OpenCode lost the keys that lived in its cloud. The ones on disk were fine.

#security #ai #devtools #api
11
Comments 11
5 min read
The quietest backdoor runs on your own GPU
Cover image for The quietest backdoor runs on your own GPU
slabb profile

The quietest backdoor runs on your own GPU

#security #ai #machinelearning #infosec
7
Comments
5 min read
A 9.2 unauthenticated RCE in PHP: the audit, the patch window, and the offline switch
Cover image for A 9.2 unauthenticated RCE in PHP: the audit, the patch window, and the offline switch
slabb profile

A 9.2 unauthenticated RCE in PHP: the audit, the patch window, and the offline switch

#security #php #webdev #devops
6
Comments
5 min read
Who watches the watcher when the watcher is a file in the repo?
Cover image for Who watches the watcher when the watcher is a file in the repo?

Permissions beat interpretation for repo security
slabb profile

Who watches the watcher when the watcher is a file in the repo?

#security #ai #agents #devops
11
Comments 14
5 min read
php2shell: two critical RCEs in PHP core — lab demo and how to fix CVE-2026-109618 and CVE-2026-109619
Cover image for php2shell: two critical RCEs in PHP core — lab demo and how to fix CVE-2026-109618 and CVE-2026-109619
slabb profile

php2shell: two critical RCEs in PHP core — lab demo and how to fix CVE-2026-109618 and CVE-2026-109619

#security #php #cybersecurity #rce
7
Comments 1
5 min read
A CA private key was the number 4. Your curl still trusts it (CVE-2026-111943)
Cover image for A CA private key was the number 4. Your curl still trusts it (CVE-2026-111943)
slabb profile

A CA private key was the number 4. Your curl still trusts it (CVE-2026-111943)

#security #infosec #tls #pki
6
Comments 2
6 min read
The CA whose private key was the number 4 just quit the certificate business
Cover image for The CA whose private key was the number 4 just quit the certificate business
slabb profile

The CA whose private key was the number 4 just quit the certificate business

#security #infosec #pki #tls
6
Comments
5 min read
Agents should never hold your API keys. NVIDIA just open-sourced the runtime that enforces it
Cover image for Agents should never hold your API keys. NVIDIA just open-sourced the runtime that enforces it
slabb profile

Agents should never hold your API keys. NVIDIA just open-sourced the runtime that enforces it

#ai #security #agents #opensource
6
Comments 2
5 min read