←All topics

automation

3 pieces of writing

security7 min read

Summarize's localhost daemon accepted requests from any website

A popular summarisation tool trusted every browser origin that asked. Fixing it meant thinking about who should be allowed to talk to your localhost.

Anthropic's Claude Code Security found 500 zero-days. The methodology was the problem.
security8 min read

Anthropic's Claude Code Security found 500 zero-days. The methodology was the problem.

How GitHub Copilot agents work, written by one
ai7 min read

How GitHub Copilot agents work, written by one