The Path-Validation Bug That Let Copilot Register a Rogue MCP Server
CVE-2026-103572 , disclosed by embracethered.com and patched by Microsoft on 2026-10-13, is a Remote Code Execution bug in Visual Studio and SSMS Copilot, CVSS …
Read more →#Code
24 posts
Is Jev Actually Calibrated? The Reliability Curve on 240 Cases
TypeSafe AI’s Jev is mostly calibrated on agent tool-call risk, with one weak spot you need to know about before you route on it. Across 240 hand-labelled …
Read more →Per-Request Minted JWTs for Agent Backends with agentgateway
I built a demo where an AI agent calls a backend API and holds no credential for it. No API key in its environment, no key file on disk, no token. agentgateway …
Read more →I Benchmarked Jev on Agent Tool-Call Risk. Calibration Held.
TypeSafe AI launched Jev on 2026-09-15 with the usual launch-day multipliers — 193.6x faster, 444.6x cheaper than frontier LLMs — plus “zero …
Read more →Your Agent's LLM Key Survives Every Kubernetes Secret Control
I gave an agent pod an LLM API key the normal way, as a Secret projected into its environment. Then I turned on every Kubernetes control that sounds like it …
Read more →Your AGENTS.md Is Not a Security Control
An agent with a policy file that says “you must not delete customer records”, running behind an approval layer that denylists the delete tool, …
Read more →SPIFFE for AI Agents: End-to-End Identity Demo
SPIFFE gives each AI agent a short-lived, attested workload identity (an SVID) instead of a stored secret, issued at runtime by SPIRE, rotated automatically, …
Read more →Your AI Agent Should Not Hold the LLM API Key
I built a demo where an agent calls an LLM and has no LLM credential anywhere in its process. No API key in the environment, no key file on disk, nothing in …
Read more →Substrate Scope: a Live Visualizer for Agent Substrate
I open-sourced Substrate Scope, a live visualizer for Agent Substrate , the Kubernetes-native runtime that runs AI agents as snapshot-backed actors in gVisor …
Read more →Revenant: A Gateway-Native, Always-On Agent Runtime
Always-on personal agents keep dying the same three deaths: leaked keys, runaway spend, and silence. The first two get the headlines. The third one is the one …
Read more →Custom Shell Check for Datadog Agents
The Datadog agent stands out for its extensibility. While many out-of-the-box integrations exist, edge cases often require custom solutions. This article …
Read more →Datadog Squid Proxy Example for Agent Proxies
SQUID proxies serve as a practical solution to get your data out of your datacenter when you have a number of security restrictions. This approach enables …
Read more →Enabling Real-time Analytics with FPGAs
With the surge in analytics and big data, organizations need efficient methods to process massive data volumes from IoT devices, mapping systems, and consumer …
Read more →WordPress Optimization: Configuring CloudFlare as Your DNS Provider
Welcome to Part 4 of an 8-part series on implementing CloudFlare as a DNS provider for WordPress optimization. This guide assumes readers have either set up …
Read more →WordPress Optimization: Installing and Configuring WordPress
Welcome to part 5 of 8 in a series on Kick-Ass WordPress Optimization. This guide covers database and WordPress installation on a Digital Ocean droplet …
Read more →Kick-Ass WordPress Optimization
I’ve managed multiple WordPress sites with substantial traffic (up to 60K daily visits) on a single server. This article serves as an introductory roadmap …
Read more →WordPress Optimization: Setting Up a Web Server
Welcome to part 3 of an 8-part series on WordPress optimization focusing on web server configuration. This guide assumes completion of the previous installation …
Read more →WordPress Optimization: Getting Started
Welcome to Part 1 of a comprehensive 8-part series on WordPress optimization! This introductory chapter covers the essential prerequisites for getting started. …
Read more →WordPress Optimization: Setting Up A Virtual Server
This is Part 2 of an 8-part series on WordPress optimization, focusing on setting up your first virtual server. Why Anyone Can Do This IT professionals …
Read more →Redirecting Bad Referers with Varnish
Spam referrals cluttering analytics is frustrating. Here’s a VCL 4.0 approach to redirect suspicious referral sources. Implementation The solution uses a …
Read more →Deploying WordPress over Nginx and PHP-FPM
This post highlights advanced deployment resources for setting up WordPress infrastructure from the ground up. Key installation components include: Installing …
Read more →Socket.io Cluster with Nginx as Reverse Proxy
Node.js by default runs on a single process and at max utilizes one CPU. To take the full advantage of a multi core system, multiple node processes can be run …
Read more →Tornado Error Handling: A Base Handler Pattern
This post discusses implementing custom error handling in the Tornado web framework by creating a reusable base handler class. The Problem I identified a need …
Read more →Tornado Sessions with Redis
Tornado really doesn’t have a great native session handler, so I created a custom solution combining Tornado with Redis for session management, the same …
Read more →