Security

A whole-home Apache UserDir mapping exposes readable dotfiles. Test with a harmless canary, publish only public_html, and rotate exposed secrets.

A model may leak encoded prompt fragments yet corrupt the final decode. Capture verbatim tokens, preserve case and order, and transform them deterministically.

Dollar-prefixed action inputs can reach React Flight decoding. Reproduce decoding locally, compare error digests, and avoid mistaking a parser signal for RCE.

Passing a request line to snprintf as its format string turns logging into memory disclosure. Use a constant format and keep secrets out of process memory.

A Debian 13 server had unattended-upgrades enabled, its timers ran every day, and 61 security updates sat uninstalled. The config used Ubuntu's Allowed-Origins lines, which match the suite, and Debian's security suite is stable-security, not trixie-security.

End-to-end encryption fails when the server is the calculator. Disk encryption still lets the operator read everything. List what the computation needs, then give each reader its own zone and key.

Design notes from a Go MCP server in front of a shared password vault: annotations that never fire, schema tags that enforce nothing, a fence the JSON encoder rewrites, and error paths that talk to the model.

Map public SDK integration tests to API operations to prioritize authorized investigation without mistaking missing tests for vulnerabilities.

An optional GPG dependency can disable update verification. Require a verifier before processing the payload, then extract archives with explicit limits.

An HTML parser decodes URL entities after a raw-string filter runs. Escape filenames at the HTML sink and test every renderer, including generated email.