#security
9 posts tagged with #security
Every article below is hand-written, technically reviewed, and focused on security. Posts cover real-world architecture decisions, code-level implementation patterns, and trade-offs you'll only discover after shipping production systems.
Developer Tools How to Use an SSH Config Manager on macOS [2026] (Secure Jump Hosts)
A hardened ~/.ssh/config template for ProxyJump, multiplexing, per-host keys, and safer tunnels. Plus when macOS SSH GUI managers help and when they hurt.
Developer Tools How to Show Kubernetes Context in Starship Prompt [2026]
Build a fast Starship prompt that shows Kubernetes context/namespace safely, profiles slow modules (Git + k8s), and avoids leaking cluster names in demos.
Developer Tools How to Redact Secrets in an AI Coding CLI Tool [2026]
Build a universal “safe AI CLI wrapper” that sits in front of any coding agent, redacts secrets, enforces basic policies, and writes JSONL audit logs you can ship to a SIEM.
Developer Tools OpenAI Codex Desktop Linux Install Guide [2026]: Sandbox + Data Egress
A Linux-first install + hardening checklist for Codex Desktop: verify downloads, sandbox the app, isolate SSH keys, route egress through a proxy, and prove what data leaves your machine.
AI and Machine Learning AI Agent Observability Logging Schema [2026]: OTel + Redaction
A copy‑paste JSON logging contract for agent runs (spans, tool I/O, cost, retries) plus a minimal OpenTelemetry mapping you can implement in a weekend—without leaking secrets.
AI and Machine Learning 10 HITL Tool Approval Patterns for AI Agents [2026]
Binary approve/reject prompts don’t scale for AI agents. Here are 10 human-in-the-loop permission patterns plus an incident-response-grade audit log spec you can actually ship.
Developer Tools Ubuntu Sudo Password Asterisks: Why Ending 46 Years of Silence Is a Bigger Deal Than You Think [2026]
Ubuntu is expected to enable sudo password asterisks by default in 26.04, breaking a 46-year Unix tradition. Here's why the security tradeoff is worth it.
Technology The Wikipedia Mass Hack That Never Happened — And Why That's the Real Story
The rumored mass compromise of Wikipedia admins never occurred. The real story is how an open-source encyclopedia built one of the most resilient security architectures on the internet. With volunteers.
AI and Machine Learning I Audited Vibe-Coded Applications: Here Are the Security Nightmares I Found
Vibe coding — accepting AI-generated code without review — has a 24.7% security flaw rate and 2.74x more vulnerabilities. Here is what I found when I looked under the hood.