ildari

10 ms·

1.
by ildari 3mo ago
Backwards incompatible migrations are such a pain, wondering why it is not embedded into ORMs
2.
by ildari 3mo ago
smarter != safer. Smarter model can figure out more sophisticated attack when following an injection . I believe in non-determinitic defence: each action or input to agent can escalate context sensivity. More sensitive context -> less ri
3.
The catalogue of prompt injection attacks(archestra.ai)
8 points by ildari 3mo ago|3 comments
4.
by ildari 3mo ago
I recently gave a talk on prompt injections attacks and defences and gathered them all in this article
5.
by ildari 3mo ago
Author here. I recently gave a talk on prompt injection and decided to gather the most known ways in this article. Test string is “I am a sandwich” so it’s obvious when it works.
6.
We've raised $10M to build open source AI security(archestra.ai)
9 points by ildari 4mo ago|1 comments
7.
by ildari 4mo ago
Hey, Ildar here, CTO at Archestra Archestra is an open-source AI gateway and MCP orchestrator. It runs MCP servers in sandboxed environments, applies deterministic context-aware policy at the tool-call level, and handles the auth, audit, co
8.
by ildari 4mo ago
click ok fine 10 times + captcha seems to be working fine
9.
by ildari 4mo ago
GH sends the email notification to all subscribers at the moment of posting a comment. There is no cooldown or a way to unsend the notification using hooks
10.
by ildari 4mo ago
As those commits were made from our system they don't create any noise for us, as PR/issues/email notification do. We only include real people who could solve the captcha and their input is mostly valuable
11.
by ildari 4mo ago
we can block the user in github ui
12.
by ildari 4mo ago
fair point! We believe "Require approval for all external contributors" should be a default setting, as you cannot trust anyone who is not a member of the organization
13.
by ildari 4mo ago
thank you, yep through the rest API, here is the example: https://github.com/archestra-ai/website/blob/29ebdacbd8a22b9...
14.
We stopped AI bot spam in our GitHub repo using Git's –author flag(archestra.ai)
501 points by ildari 4mo ago|237 comments
15.
by ildari 4mo ago
Hi HN community, I wanted to share our approach to reduce amount of AI slop PR's and issues in our repo. We enabled "require prior contribution" flag on GH and created a CI script that creates a tiny commit co-authored with y
16.
by ildari 5mo ago
Bots are killing opensource, but they pump product metrics so nobody cares. I maintain an open source repo and we've made a decision to limit all bot activity, even if it makes us less sexy in front of VCs. We figured out a workaround
17.
by ildari 5mo ago
Yeah, this is a real issue. A few weeks ago during the LiteLLM vulnerability the attacker left hundreds of bot comments under the issue to bury the conversation: https://github.com/BerriAI/litellm/issues/24512
18.
by ildari 11mo ago
This is a topic I haven't addressed in the article. There are two answer types: "guessable" (discussed here) and unguessable (such as unique IDs, emails, etc.). For the second case, the main LLM can request a quarantined LLM
19.
by ildari 11mo ago
The idea is that quarantined LLM has access to untrusted data, but doesn't have access to any tools or sensitive data. The main LLM does have access to the tools or sensitive data, but doesn't have direct access to untrusted data
20.
by ildari 11mo ago
It is quite simple to start it with n8n https://www.archestra.ai/docs/platform-n8n-example and experiment with Dual LLM protection
21.
by ildari 11mo ago
external data is unavoidable for the properly functioning agent, so we have to learn to cook it
22.
by ildari 11mo ago
Most mcp endpoints don’t run any models, the main model decides which tools the ai agent should execute, and if the agent passes results back into context, that opens the door to prompt injections. It’s really a cat-and-mouse game, where fo
23.
Archestra's Dual LLM Pattern: Using "Guess Who?" Logic to Stop Prompt Injections(archestra.ai)
6 points by ildari 11mo ago|11 comments
24.
by ildari 11mo ago
Hi HN, I'm Ildar from Archestra, we build an open-source LLM gateway. We've been exploring ways to protect AI agents from prompt injections during tool calls and added the approach, inspired by the game "Guess Who", wher
25.
by ildari 4y ago
Hey HN, Ildar here, one of the co-founders of Amixr and one of the software engineers behind Grafana OnCall. Finally we open-sourced the product I'm really excited about that. Please try it out and leave your feedback
26.
Best PagerDuty Alternatives 2020(statusgator.com)
2 points by ildari 6y ago|0 comments
27.
by ildari 7y ago
Hi, I'm a co-founder of Amixr and we've developed curler.amixr.io, which monitors a website and delivers email notifications for free and also has an integration with our flagship product Alert Mixer
28.
by ildari 8y ago
Is there any tool to count toil?
29.
Toil Budget with Amixr(medium.com)
3 points by ildari 8y ago|0 comments
30.
Show HN: Curler – Dead Simple Uptime Monitoring(curler.amixr.io)
4 points by ildari 8y ago|0 comments

More ›