Tag
security
Solana Vulnerabilities That Aren’t
A few bug classes that auditors keep reporting, but which don't actually exist.
Stop Running npm install
The sha1-hulud attack compromised 830 packages and leaked 11,000 secrets. MFA stops account takeovers. `npm ci` stops propagation.
Slop In A Bucket
LLM-generated code, linters, and the security problems we can and can't solve.
Security is PvPvE
Security work isn't just about outsmarting attackers. You're also fighting the computers themselves.