1Password teams with OpenAI to Stop AI Coding Agents from leaking Credentials.

The companies announced a new integration for OpenAI Codex that gives AI coding agents access to credentials during development workflows without exposing those secrets in prompts, source code, repositories, terminals or the model’s context window.

https://1password.com/blog/1password-trusted-access-layer-for-openai-codex

AI coding has become the de facto go-to tool for developing new apps. But there are two issues with this approach: the coding tool is agentic AI and inherits all the agentic security concerns; and app development requires widespread company access to credentials.

⁉️“Every action that AI coding agents take against a database, an API, or a deployment pipeline requires access to credentials,” explain Dennis Kromhout van der Meer and Robert Menke in an accompanying blog post. “Today, these credentials typically live in .env files, scripts, or hardcoded in repositories, where they can be easily exfiltrated and are difficult to govern and audit.”⁉️

#1password #security #privacy #tech #media #ai #coding #agents #infosec #secure #vibecoding #developer #news

We do not want to clean up slop! We are tired of it already! Millennium bug was an honest oversight and of course COBOL programmers were happy to pause their retirement and fix it. But slop is not an honest mistake. It is a systematic corporate malice! They have chosen slop over humans, they deserve to drown in slop!

https://circumstances.run/@mawhrin/116776087234013214

#AI #noAI #LLM #LLMs #vibeCoding #codingAgents

flere-imsaho 🇺🇦 (@[email protected])

the next ten-twenty years will be an interesting time for people cleaning codebases from the currently fashionable autoconfabulator folly

GSV Sleeper Service

#Steady #Klimacrew

#Datenanalyse von #Stromspeicher​n: Warum tauchten manche #Pumpspeicherkraftwerke in meiner Datenanalyse gar nicht auf, obwohl sie im #Marktstammdatenregister gelistet sind? Über diesem Mysterium musste ich doch etwas länger knobeln. Aber die Nuss wurde geknackt. 😊

https://tino-eberl.de/vibe-coding/stromspeicher-das-raetsel-um-die-pumpspeicherdaten/

#Energiewende #Pumpspeicher #Stromspeicher #OpenData #PythonCoding #VibeCoding

Stromspeicher: Das Rätsel um die Pumpspeicherdaten

Fehlerhafte Stromspeicher-Daten im Marktstammdatenregister? So wurde der Bug bei Pumpspeicherkraftwerken entdeckt und behoben.

Tino Eberl

Falls sich jemand gefragt haben sollte, warum es hier die letzen sechs Wochen etwas stiller war … ich war damit beschäftigt den #VibeCoding-#HypeCycle einmal komplett zu durchlaufen. 🤪

https://dibonds.de/vibecoding-segen-fluch-beides/

#Digitalisierung

VibeCoding - Segen? Fluch? Beides. - dibonds.de

Erleben Sie, wie ich als Digitalexperte die digitale Bildung in Niedersachsen vorantreibe. Entdecken Sie meine Reise von der Automobilindustrie zur Schule!

Attention builders! Are you aware of the increasing security risks associated with Vibe coding? From exposed databases to SQL injection flaws, it's crucial to stay informed. Stay safe, stay secure! #VibeCoding #SecurityRisks #AIApps #CyberSecurity Vibe Coding Security Risks Every Builder Needs to Know
https://www.squaredtech.co/vibe-coding-security-risks-every-builder-needs-to-know?fsp_sid=13389
Vibe Coding Security: Critical Risks Explained

Vibe coding security risks are growing fast. From SQL injection to exposed databases, here's what every AI-assisted developer needs to know before shipping.

SquaredTech

🏦 Bain usa l'AI per clonare software e valutare acquisizioni

Il colosso del consulting sta "vibe-coding" centinaia di prototipi AI per replicare i prodotti delle aziende target e testare i loro vantaggi competitivi.

Fonte: CryptoBriefing / FT

Segui 👇

#AI #VibeCoding #Bain 🤖🏦💼

🏦 Bain usa l'AI per clonare software e valutare acquisizioni

Il colosso del consulting sta "vibe-coding" centinaia di prototipi AI per replicare i prodotti software delle aziende target, testando se i loro vantaggi competitivi reggono davvero. Addio due diligence tradizionale.

Fonte: CryptoBriefing / Financial Times

Segui 👇

#AI #VibeCoding #Bain 🤖🏦💼

Гайд по безопасности вайб-кодинга: что сделать, чтобы не слить данные в прод

Статья призвана не испортить праздник вайбкодинга, а сделать так, чтобы этот праздник не закончился публичным позором и потерями. Написана по мотивам проблем которые я доставил себе и своим работодателям. Я сливал ssh ключи, ловил датамайнера через торчащий наружу редис, огребал от атаки в npm пакете и много чего еще. Осторожно заглянуть

https://habr.com/ru/articles/1050340/

#vibecoding #aicoding #claude #antigravity #cursor #codex #безопасность #gitleaks #github #секреты

Гайд по безопасности вайб-кодинга: что сделать, чтобы не слить данные в прод

Скорость вайбкодинга против безопасности Статья призвана не испортить праздник вайбкодинга, а сделать так, чтобы этот праздник не закончился публичным позором и потерями. Она про гигиену секретов без...

Хабр
Today in nothing works reliably.. I can't select a delivery address on something I want to order on eBay! RAAAAAA! #ebay #Enshittification #vibecoding (?)
Memory Safe Inline Assembly

0 comments

Lobsters