Ai-security
Explore the latest content and insights.
I gave my website tools for AI agents with WebMCP — and thought hard about the attack surface
WebMCP lets a web page hand callable tools to browser AI agents instead of making them scrape the DOM. I wired three read-only tools into this site. The interesting part was not the API — it was decid
The Bottleneck Moved to Review: My SDLC After AI Writes Most of the Code
When a machine writes most of your diff, the constraint stops being how fast you type and becomes how well you review. Here is the SDLC I actually run — the provenance audit, the sandbox, the CI backs
I put an AI version of myself online, then tried to break it
Building a represent-me chatbot is a weekend project. Treating it like a production security surface is the part nobody writes about. Here is the architecture, the prompt leak I found by attacking my
OpenClaw: Security is the Final Boss
OpenClaw (formerly Clawdbot) changed the game for local-first AI agents, effectively giving 'Claude with hands.' But great power comes with great responsibility. In this post, I dive into the architec