Our SSRF guard passed every test we ran — until a stranger's comment pointed out the test we never ran

I built a small thing and then spent considerably longer trying to find out whether it worked. The...

An OpenAI agent swarm uploaded hundreds of malicious gems to RubyGems.org, chaining a RubyDoc.info RCE with a CDN key-theft bug and repackaging scraped UK government data as a gem for exfiltration. Op

Most AI agent demos start with the model. We ended up spending far more time thinking about what...

A Staff SDET's field guide to the architectural shift — for juniors who want to actually understand...

A useful agent no longer just answers questions. It can qualify a lead, follow up with a customer,...

TL;DR GPT-6 Astra has started another familiar AI conversation. The model is more capable, Jensen...

I did not build joacod Lab because the internet needed another portfolio. It already has plenty of...

Every country sends people letters they can't read. Many answer it the same way: a free help desk,...

I built one agent and multi-agent versions, put them through the same tests, and learned what...

Logs are attacker-controlled input. If you paste them into an AI tool, the attacker can prompt-inject your analyzer. Here's how I built one that survives it.