Links tagged “security”
53 links, newest first.
kevinak.se
Who actually owns your ATProto identity?: the cold-water counterpoint. That portable identity still routes through one central directory you do not really control.
roman.pt
A backdoor in a LinkedIn job offer: a recruiter’s take-home test turns out to ship malware. A clean walkthrough of how the trap works.
github.com
Claw Patrol: a protocol-aware firewall for AI agents, parsing HTTP, Postgres and SSH to decide what your agent may actually do. See the intro for why you might want one.
daniel.haxx.se
Curl will not accept vulnerability reports during July 2026: Daniel Stenberg pauses the bug bounty, drowned in AI-generated slop reports.
projectcalico.org
Project Calico, the open-source networking and network-policy layer for containers, VMs and bare metal, with eBPF, iptables, nftables and VPP data planes.
b-list.org
Why usernames are harder than a unique column — case folding, Unicode normalisation, homograph attacks, reserved names, and the tripartite identity pattern.
django-guardian.readthedocs.io
Documentation for django-guardian, an extra authentication backend adding per-object permissions to Django.
consideratecode.com
Walks through six web security acronyms — CSRF, HTTPS, XSS, SOP, CORS and HSTS — and what each one means for a Django developer.
