Security
6 articles
Our AI Agent Read the Rule and Took the Shortcut Anyway
An agent read a rule forbidding a shortcut, found the correct command, and took the shortcut anyway. The fix was not a clearer rule.
One-Time Upload Links in Symfony, Without a User Account
Job applicants need to upload documents once, and most of them never come back. None of them are worth a user account, and there's no login flow to speak of, just a link that works once and then dies. Symfony has no first-class answer for this. Here is the actual mechanism, and where it breaks if you build it yourself.
Anatomy of Indirect Prompt Injection Hidden in Plain Text
Twenty-two techniques, three delivery methods, and one structural weakness. AI assistants cannot distinguish instructions from data. Here is how attackers exploit that, and what works as a defense.
Clinejection, How a Prompt Injection Infected 4,000 Terminals
How a single GitHub issue turned an AI triage bot into an entry point for a supply chain attack, step by step.
How ZF1 Users Log Into Symfony With Cross-Framework Authentication
During a Strangler Fig migration, both frameworks need to recognize the same user. Here is how a Symfony authenticator read Zend_Auth session data to create seamless single sign-on across ZF1 and Symfony, and why it was the first bridge component to be removed.
The Tenant You Suspended Is Still Running Jobs
A status field changed. A boolean next to it didn't. The HTTP layer enforced the difference. Nothing else did.