LuD1161

6 ms·

1.
by LuD1161 20d ago
I've been working on something similar , policy guardrails for coding agents, with OPA backed policies and os-native sandbox - https://github.com/LuD1161/agentjail
2.
by LuD1161 21d ago
I just checked the repo. Nice work A suggestion: 1. Adding which repo/project was where my most tokens were consumed. I checked the image in the repo README, didn't see that graph.
3.
by LuD1161 24d ago
wow i need to check the 32GB cards. how did you handle the KV cache. Oh i see it was the Q6 model. Did you have to cut down on context window?
4.
I Rented a 96 GB GPU and Took Uncensored Qwen3.8 From 44 to 125 tok/s(aseemshrey.com)
7 points by LuD1161 25d ago|3 comments
5.
by LuD1161 2mo ago
Hey thanks for the question. I would like to answer it in a more descriptive manner with an example later. Classifying a command can be a bit of a misnomer because it has two inherent problems: 1. You need a classifier. That means the secur
6.
by LuD1161 2mo ago
You mean, I should stop posting much about it ? Is it too aggressive posting Am sorry about that.
7.
by LuD1161 2mo ago
With agentjail ( https://github.com/LuD1161/agentjail ), I've tried to contain coding agents in os-native sandboxes (sbpl for macos and similarly for linux, <4ms start time) + policy guardrails evaluated by Ope
8.
by LuD1161 2mo ago
With agentjail (github.com/LuD1161/agentjail), I've tried to contain coding agents in os-native sandboxes (sbpl for macos and similarly for linux) + policy guardrails evaluated by Open Policy Agent (OPA), policies written in
9.
by LuD1161 2mo ago
Policy guardrails for Coding Agents. Never babysit your agents - github.com/lud1161/agentjail · OS native sandbox (<4ms start-time) · Policies for AWS, local files, k8s, DBs etc. · Rego backed policies w/ OPA (CNCF Gradu
10.
Hand it your codebase. Not your secrets(agentjail.io)
3 points by LuD1161 2mo ago|0 comments
11.
by LuD1161 3mo ago
Might wanna check out https://github.com/LuD1161/agentjail - policy guardrails for coding agents. shameless self-plug. I've been dogfooding it for the last 3 weeks now.
12.
by LuD1161 3mo ago
Dont trust your production data with a markdown file. Have deterministic guardrails
13.
by LuD1161 3mo ago
Thanks !
14.
by LuD1161 3mo ago
For now I am parsing the text only. Testing app for real instances would be fun and a dedicated project in itself. I've some ideas, hit me up if you're interested or can collab if you're doing it already.
15.
Show HN: Honest Privacy Policies – We Read the Fine Print So You Don't Have To(honestprivacypolicies.org)
5 points by LuD1161 3mo ago|4 comments
16.
Security Engineering Is a Context Problem(aseemshrey.in)
4 points by LuD1161 5mo ago|0 comments
17.
by LuD1161 7mo ago
wow. this is such an interesting perspective. hadn't thought so deeply about my 'shower thought'. This expands my horizon. Might put this into the update. When I was thinking about it, the fleeting thought was majorly about t
18.
The Newness Illusion: Why Everything Was Better 'Back in Our Day'(aseemshrey.in)
2 points by LuD1161 7mo ago|6 comments
19.
by LuD1161 7mo ago
A friend said KubeCon "isn't the same anymore." I asked what got worse. They couldn't answer. Turns out there's a name for this. Three names, actually: 1. Hedonic Adaptation : Brain's inbuilt boredom machine 2.
20.
I hacked India's GST portal–11.8M taxpayers exposed; enabling stock manipulation(aseem-shrey.medium.com)
6 points by LuD1161 1y ago|1 comments
21.
by LuD1161 1y ago
I found an Insecure Direct Object Reference(IDOR0 security issue that led to leaking GST challans (receipts) of all the 11.8M registered taxpayers. Here's the full story alongwith a video PoC. Note: No personal data was ever shared or
22.
by LuD1161 2y ago
I've started this series on online privacy to teach people some of the good online cybersecurity hygiene, that can help them keep safe.
23.
by LuD1161 2y ago
This is my first attempt at recreating a bug from its test case, feedback is highly appreciated. RCE in git By cloning a repo - 'git clone --recursive <git_repo>' , your machine could be compromised. Works on MacOS and Win
24.
by LuD1161 2y ago
Not expected this from a security company :P Please fix/update your certs :) ``` https://foundationalsec.com/ Unable to communicate securely with peer: requested domain name does not match the server’s certificate. HT
25.
by LuD1161 3y ago
In this blog we will see a step-by-step guide of what goes behind a successful pentest. This not only includes the technical aspects but also the business and legal aspects of it. If you’re tasked with the responsibility for getting your or
26.
by LuD1161 4y ago
Hello Everyone Back with another #exploitation 4th part in the #GraphQL Exploitation series - 1⃣ Deep Recursion Attack - Attack & Defend (max depth) 2⃣ GraphQL Introspection Thanks to Dolev Farhi for the awesome DVGA #bugbounty #cyber
27.
by LuD1161 5y ago
SEEKING WORK | Remote : Yes | Location: India Area of expertise : App Security ( Web & Mobile ), Infrastructure Security etc. Technologies: Python, Go, Terraform, AWS, GCP, Vault, CIS Benchmarks, Docker, kubernetes ( k8s ), gitlab CI&#x
28.
by LuD1161 5y ago
Location: India Remote: Yes Willing to relocate: Yes Technologies: Python, Go, Terraform, AWS, GCP, Vault, CIS Benchmarks, Docker, kubernetes ( k8s ), gitlab CI/CD & github actions, Jenkins, ELK Résumé/CV: https://a
29.
Why Client Side Validation Fails – Hacking 10M+ Users(aseemshrey.in)
4 points by LuD1161 5y ago|0 comments
30.
SSRF-What Why and How|SSRF in Google Prod Network|Server Side Request Forgery(youtube.com)
2 points by LuD1161 6y ago|0 comments

More ›