#ECC security
64 related articles
·3 min
Automating Chrome Extension Development with AI Coding Agents: Antigravity & DevTools MCP Complete Workflow
A complete workflow from Google I/O: use Antigravity, Modern Web Guidance, and Chrome DevTools MCP to build Chrome extensions automatically — from prompt to publish.
Read more →
·3 min
AI-Powered Python Reverse Engineering: A Full Retrospective on Using LLMs to Accelerate the Workflow
A real-world retrospective on AI-assisted Python reverse engineering: from JS obfuscation tracing and SM2/SM4 key extraction to generating decryption code with DeepSeek. An honest assessment of LLM value and legal risks.
Read more →
·4 min
OpenAI Reveals Agent Sandbox Cloud: Design Philosophy from microVMs to Global Orchestration
A deep dive into OpenAI's Agent sandbox cloud architecture: the security evolution from Fork and containers to gVisor and microVMs, plus copy-on-write snapshots and global orchestration.
Read more →
Smart Proxy: The Key Architecture for …
·3 min
Smart Proxy: The Key Architecture for Running AI Coding Agents Safely and Autonomously
Too much AI permission is risky; too little kills productivity. A smart proxy acts as a controllable middleware layer — intercepting, auditing, and policy-gating AI agent actions in tools like Claude Code and Cursor for safe autonomous operation.
Read more →
·3 min
Claude Code in Practice: How AI Coding Tools Can Protect Your Secret Keys
When AI coding assistants have full filesystem access, are your API keys and cloud credentials safe? Deep dive into secret leakage risks and practical defenses.
Read more →
Cross-Platform MicroVM Sandbox: Runnin…
·3 min
Cross-Platform MicroVM Sandbox: Running AI-Generated Code Safely in Isolated Environments
Explore cross-platform MicroVM sandbox technology supporting Windows/Mac/Linux with a built-in policy engine for fine-grained access control in AI Agent and multi-tenant code execution scenarios.
Read more →
Ghostcommit Attack Explained: How Mali…
·2 min
Ghostcommit Attack Explained: How Malicious PNGs Bypass AI Code Review
Ghostcommit is a new supply chain attack targeting AI coding tools that hides malicious instructions in PNG pixels, bypassing automated code review to steal .env secrets via indirect prompt injection.
Read more →
Grok Uploads User Home Directory Witho…
·2 min
Grok Uploads User Home Directory Without Permission: A Security Warning on AI Agent Privilege Boundaries
Grok by xAI reportedly uploaded users' entire home directories to its servers. This article analyzes AI Agent file permission risks and how developers can protect themselves.
Read more →
·5 min
DCTS: A Deep Dive into an Open-Source Self-Hosted E2EE Encrypted Communication Platform
DCTS is an open-source, self-hosted instant messaging platform led by an individual developer, integrating E2EE and decentralized architecture across desktop and mobile.
Read more →
·2 min
Can Quantum Computers Break 128-bit Symmetric Keys? Analyzing the Real Threat
Can quantum computers really break symmetric encryption like AES? This article analyzes Grover's algorithm's real limits, its key difference from Shor's algorithm, and why AES-256 is quantum-resistant.
Read more →
·4 min
How Background AI Agents Can Automatically Maintain All Your Repositories on a Schedule
OpenInspect's Multi-Repo Automations lets AI coding agents maintain up to 10 repositories on a schedule simultaneously — isolated sessions, independent PRs, and fault-tolerant execution for security sweeps, dependency upgrades, and framework migrations.
Read more →
·7 min
Codex Direct Connection Configuration Guide for China: Complete GPT Agent Setup Tutorial
Complete guide for configuring OpenAI Codex Agent in China, covering installation, API key setup, permission modes, reasoning intensity, and security considerations for third-party relay services.
Read more →
·5 min
ECC: An Agent Enhancement Framework for AI Coding Assistants — Five Core Capabilities Explained
ECC is an agent optimization framework for AI coding assistants like Claude Code, Cursor, and Codex, enhancing them with skills, memory, security, and research-first development capabilities.
Read more →
·3 min
Claude Code Auto-Submitting PRs: Three Guardrails Every Team Must Lock Down First
Claude Code can auto-modify code and submit PRs, but this brings risks around permissions, review gaps, and unclear accountability. Learn the three governance guardrails every team must establish.
Read more →
·5 min
Real-World Comparison of 6 Open-Source LLMs for On-Premise Deployment: A Selection Guide to Avoid Pitfalls
A hands-on comparison of 6 open-source LLMs (DeepSeek, Qwen3, Zhipu GLM, Kimi K2, MiniMax M3, Tencent Hunyuan 3) for on-premise deployment—covering hardware cost, inference efficiency, and deployment difficulty.
Read more →
·3 min
Files over Tools: Rethinking AI Agent Architecture with a Virtual Filesystem
Why give AI Agents a virtual filesystem and bash instead of more tools? A deep dive into the "Files over Tools" design philosophy, tool bloat, Unix principles, security sandboxing, and hybrid architectures.
Read more →
·6 min
Omnigent Open-Sourced: A Meta-Harness for AI Coding Agents Built by Databricks
Databricks open-sources Omnigent, a Meta-Harness for orchestrating Claude Code, Codex, and more AI coding assistants together—with built-in guardrails, cross-model workflows, and real-time collaboration. Get started in 10 minutes.
Read more →
·6 min
From Firefox to Android Root: Deep Analysis of a Browser Privilege Escalation Attack Chain
Deep analysis of a complete mobile exploit chain: how attackers start from Firefox, escape the sandbox, exploit kernel vulnerabilities, and achieve Android Root. Security insights for developers.
Read more →
·7 min
Exfiltrating Data from Air-Gapped Systems via Apple's Find My Network: Attack Mechanics and Defense Insights
Security research reveals how attackers can abuse Apple's Find My network as a covert exfiltration channel, disguising sensitive data from air-gapped systems as location beacons. A deep dive into the attack chain, stealth advantages, and defense insights.
Read more →
·4 min
Complete Guide to Connecting External Models in Codex: Two Methods to Unlock Full Capabilities
Two methods for connecting external models to Codex: manually configure keys via relay services, or use the CC Tool to auto-bridge GPT, DeepSeek, and more. Covers auth/config files, CC Tool usage, and multi-model switching.
Read more →