terracatta

6 ms·

1.
by terracatta 2mo ago
Much safer as the technique ensures the AI agent never even sees the creds vs the CLI the inference/context can see them which opens you up to a whole class of security risk. https://support.1password.com/1password-clau
2.
by terracatta 2mo ago
You don't want passwords to enter into inference/context because once they are there the AI can accidentally share or be tricked into sending the password to other places. With this solution to explicitly approve which credentials
3.
1Password for Claude: Give Claude access without giving up your credentials(1password.com)
28 points by terracatta 2mo ago|7 comments
4.
by terracatta 4mo ago
Usually these types of articles are written about things that challenge status quos. I remember reading a lot about Ruby on Rails in the same vein "ruby isn't a real language", "rails is just a collection of scripts&quot
5.
Show HN: Scam – 1Password's open-source benchmark for AI security awareness(1password.github.io)
2 points by terracatta 7mo ago|0 comments
6.
by terracatta 7mo ago
Already received a private DM from someone who was accidentally infected from my comment upthread above and was angry at me. That's why.
7.
by terracatta 7mo ago
Thanks Shank, feedback received, and appreciate that you have enjoyed my other writing in the past. Thanks for being a customer.
8.
by terracatta 7mo ago
You're welcome! I will be writing more about this in the future, and I appreciate your feedback.
9.
by terracatta 7mo ago
Will do better next time.
10.
by terracatta 7mo ago
Author here, I used AI to help me write this article primarily to generalize the content and remove a lot of the specific links and dangerous commands in the malware. If you are actually curious about the specifics, happy to share here sinc
11.
by terracatta 7mo ago
Author here, I did use AI to write this which is unusual for me. The reason was I organically discovered the malware myself while doing other research on OpenClaw. I used AI for primarily speed, I wanted to get the word out on this problem.
12.
From magic to malware: How OpenClaw's agent skills become an attack surface(1password.com)
4 points by terracatta 8mo ago|0 comments
13.
As AI supercharges phishing scams, 1Password introduces built-in protection(1password.com)
2 points by terracatta 8mo ago|0 comments
14.
by terracatta 11mo ago
Looks like it's resolving now. I'm no longer seeing issues on either platform.
15.
GitHub and Fastly having partial outage
2 points by terracatta 11mo ago|1 comments
16.
by terracatta 11mo ago
Yes because they state under the section "Root Cause Analysis" > Ruby Central failed to rotate the AWS root account credentials (password and MFA) after the departure of personnel with access to the shared vault.
17.
by terracatta 11mo ago
That email screenshot is pretty bad for Arko. It clearly shows intent to sell PII data to a third party during a time when Ruby Central had diminished funds and needed help affording basic services. What the fuck.
18.
1Password Joins the Rails Foundation(blog.1password.com)
11 points by terracatta 2y ago|0 comments
19.
How to use Kamal 2 and 1Password(blog.1password.com)
1 points by terracatta 2y ago|0 comments
20.
What's the Deal with Enterprise Browsers?(kolide.com)
2 points by terracatta 3y ago|1 comments
21.
89% of Workers Use AI–Far Fewer Understand the Risks(kolide.com)
7 points by terracatta 3y ago|1 comments
22.
How Audio Deepfakes Trick Employees (and Moms)(kolide.com)
1 points by terracatta 3y ago|0 comments
23.
by terracatta 3y ago
Author here: I think you are probably right that a lot of engineering burn-out comes from things managers require engineers to do. But I think it's also true that a lot of what managers say and do is often a lossy representation of thi
24.
Can ChatGPT Save Programmers?(kolide.com)
11 points by terracatta 3y ago|4 comments
25.
AI browser extensions are a security nightmare(kolide.com)
260 points by terracatta 3y ago|122 comments
26.
The History, Evolution, and Controversies of Zero Trust(kolide.com)
2 points by terracatta 4y ago|0 comments
27.
by terracatta 4y ago
Using it in practice, the sheer quantity of suggestions (often one for every line) is fatiguing especially when 99% of the time they seem fine. I posit it becomes increasingly likely over large periods of time over many engineers that sever
28.
GitHub Copilot isn't worth the risk(kolide.com)
179 points by terracatta 4y ago|204 comments
29.
The Employee's Guide to Slack's Privacy Policy(kolide.com)
6 points by terracatta 4y ago|0 comments
30.
The Security and IT Admin's Guide to macOS Ventura(kolide.com)
10 points by terracatta 4y ago|2 comments

More ›