Web Engineering •
Configure Optional OAuth Scopes for MCP Servers and Agents
Configure optional OAuth scopes so users can narrow agent permissions at consent. The API call, the UX, and handling partial grants.
6 min read
Read more →
AI Coding Agents & DX •
Self-Hosted AI Coding Agent: Sandboxed Prompt-to-Deploy for $25/mo
Build a self-hosted AI coding agent with sandboxed execution. One prompt produces a repo, tests, CI, and deployed app — $25/mo, no cloud bills.
7 min read
Read more →
Web Engineering •
Fix the Datasette SQL Injection: Why execute-sql Won't Save You
The Datasette SQL injection patched in 1.0a38 and 0.65.3 leaks private tables via unescaped filter columns. The check, upgrade, and why execute-sql is no fix.
8 min read
Read more →
AI Security •
Claude Code Leak 2026: What Escaped and What Didn't
The Claude Code leak of March 31, 2026, explained: what the source-map exposure revealed, Anthropic's DMCA sweep, and the fallout.
8 min read
Read more →
AI Security •
Axios Compromised on npm: 1.14.1, 0.30.4 Drop a Cross-Platform RAT
Axios compromised on npm on March 31, 2026: versions 1.14.1 and 0.30.4 dropped a cross-platform RAT. Verified timeline, impact, IOCs, and recovery.
4 min read
Read more →
AI Security •
Agentic AI Security: The New Enterprise Control Model
Agentic AI security breaks the old enterprise trust model. How to fix identity, delegated authority, prompt injection defense, and tool-level policy in 2026.
8 min read
Read more →
AI Security •
AI Model Distillation: Inside the $100M Claude Heist
Anthropic exposes an AI model distillation attack by DeepSeek, Moonshot, and MiniMax: 16 million exchanges, 24,000 fake accounts. The forensic breakdown.
33 min read
Read more →