A Thoughtworks engineer explores the nuanced risk assessment required when using AI to generate code, moving beyond a simple 'good or bad' debate.
The ls-mcp tool update adds a security feature to detect and assess the risk of credentials stored in environment variables within MCP server configurations.
The author critiques the focus on speculative AI risks at global summits, arguing for addressing real issues like corporate power and algorithmic bias instead.
A senior engineer at Lyft outlines the risks of using third-party libraries in production apps and proposes a framework for consistent risk assessment.
Explains modern cloud disaster recovery and resilience using Availability Zones, contrasting with legacy data center approaches.
A threat modeling case study using bicycle theft to illustrate security principles applicable to IT systems.
A developer's critical questions for evaluating cloud providers, focusing on problem-solving, security implementation, and customer-driven development.
An introduction to threat modeling, a security technique for identifying assets, attack vectors, and attackers to build better system defenses.
