nielsprovos

4 ms·

1.
by nielsprovos 8mo ago
Hi! I have spent decades building security primitives such as bcrypt and Safe Browsing. The current rise in AI agents scares me due to them leveraging our full ambient authority. When proxying your full permissions, a single prompt injectio
2.
Show HN: IronCurtain: A secure* runtime for AI agent loops(github.com)
1 points by nielsprovos 8mo ago|1 comments
3.
by nielsprovos 8mo ago
I am the author, happy to answer questions about the architecture or the threat model.
4.
I built a personal AI assistant with security as a first-class citizen(provos.org)
2 points by nielsprovos 8mo ago|1 comments
5.
I Had to Write a Script to Submit My Medical Claims to Cigna(provos.org)
4 points by nielsprovos 8mo ago|2 comments
6.
by nielsprovos 8mo ago
A deep dive into automating Cigna's claims portal with AI and browser automation, and how the technical struggles revealed accessibility failures that likely violate federal law. The friction is not accidental but a predictable outcome
7.
I analyzed 70 Data Breaches. Three controls would have stopped 65% of them(securityblueprints.io)
4 points by nielsprovos 1y ago|0 comments
8.
by nielsprovos 3y ago
Fair enough. That's ultimately what I think made bcrypt successful, it was widely available in basically all languages and easy to configure.
9.
by nielsprovos 3y ago
That is not entirely clear; you may want to look at https://en.wikipedia.org/wiki/Balloon_hashing - which may be superior to Argon2
10.
The Bcrypt Password Hashing Algorithm Starts Its Long Goodbye(wired.com)
14 points by nielsprovos 3y ago|6 comments
11.
25 years of bcrypt password hashing: a retrospective on password security(usenix.org)
8 points by nielsprovos 3y ago|1 comments