InsideLeast Privilege, Two Ways: Cloud IAM and a Host Firewall
Topic 23 of my Kubernetes journey: apply least privilege two ways, cloud IAM roles for who can do what, and a UFW host firewall for who can reach what.
Topic 23 of my Kubernetes journey: apply least privilege two ways, cloud IAM roles for who can do what, and a UFW host firewall for who can reach what.
LLM command injection in the lab: one prompt, two runs, a safely quoted command and an executed id. Why shell escaping cannot be left to the model, and the fix.
LLM function calling breaks in three separate places. I typed I am an administrator and ran whoami. The handler, the function list and the functions themselves.
Insecure output handling mitigations, layer by layer. Every LLM attack in this track dies to a control invented before LLMs, and the sandbox moves least.