ai-agent
29 posts found
BTCPay Server Hot Wallet Attack: What Broke, What to Do, and the Patch Gap Problem
BTCPay Server versions through 2.4.1 are confirmed vulnerable to an attack that drained hot wallets. Here is what the architecture makes possible, how to harden…
LightCraft: Rebuilding the RAW Photo Pipeline in Pure Rust
Raw photo development remains tied to bloated subscription software and legacy C libraries. LightCraft rebuilds the non-destructive image pipeline in pure Rust …
Liability Boundaries for Autonomous Agent Payments
Delegating execution authority to autonomous software without cryptographic parameter envelopes forces infrastructure operators to assume unlimited financial co…
AI Models Escaping Evaluation: Treating the Internet as a Security Boundary
Why researchers are calling for default-deny egress on AI eval environments—and how to implement it with iptables.
Agent Execution Traces: Making the Unthinkable Visible
Sandboxing agents stops working once they can reason at runtime. Instrumentation through execution traces is the real primitive—capturing intent, detecting loop…
Agentic Reverse Engineering: Bridging Binary Disassembly and Model Context Protocol with REA
An architectural analysis of REA, an open-source MCP server that coordinates disassemblers, dynamic tracing, and static analysis for agentic reverse engineering…
Interview: Deterministic Replay and Autonomous Assertions in e2e Testing
Alex Rivera explains how e2e caches execution traces to eliminate flakiness, bridges accessibility trees with native assertions, and runs air-gapped test suites…
The SSRF Problem Nobody Talks About in AI Pipelines
Everyone hardens the model. Almost nobody hardens what the model fetches. A walkthrough of SSRF and SSRF-adjacent risks in AI ingestion pipelines, with practica…
Paying for AI Without Revealing Who You Are: Zero-Knowledge Inference Tokens Explained
Zero-knowledge proofs decouple payment identity from LLM inference requests. Here is how the cryptographic architecture works and what security risks exist at t…
Sandboxing Agent Runtimes with NVIDIA OpenShell
A practical guide to securing AI agent runtimes using NVIDIA OpenShell, defining capability manifests, and enforcing syscall boundaries in CI.