» Tag
api-security
8 postsWhy AI Agents Must Never Choose Their Own Acting Subject
AI agents shouldn't self-assign identity via tool arguments. Learn why acting subjects must come from trusted boundaries, not model output.
CacheTracer Exposes Hidden Dependencies in LLM API Reseller Chains
CacheTracer uses prefix-cache side channels to reveal hidden dependencies among LLM API resellers, finding shared cache reach in 37% of tested pairs.
freeq ties AI model spend to identity, not shared API keys
freeq extends its DID-based protocol to gate AI model spend by identity, letting agents borrow bounded capacity without sharing API keys.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comAutonomous agents' two big fears: runaway loops and exposed APIs
rysh's loop engineering and Forge features address the runaway-loop and API-exposure risks that come with building autonomous agents.
Half My Traffic Was Bots: A 4-Day Layered Defense Stack
A developer discovered headless bots executing JS made up half his traffic, then built a 4-day, five-layer defense using robots.txt, ISR, Redis, and Vercel BotID.
Manchester Airports Group Data Breach: No Hacking Required
The Manchester Airports Group data breach underscores vital lessons in API security and data protection.
A production-ready MCP server: 6 core architecture rules
Six architectural decisions that turn Model Context Protocol servers from tutorial demos into production systems: server factories, dual transports, Zod validation and SSRF safeguards.
Why Trusting the Database for API Auth Is a Security Risk
A technical look at how HMAC-SHA512 signing, cryptographic peppers, and layered tenancy checks prevent SQL injection attacks from turning into full tenant takeovers.