How to do security right in the time of AI Agents
It's very difficult task to be secure when everybody is acting like "Tony Stark" with his Iron Man suit and JARVIS-like AI Agent. Researchers are discovering vulnerabilities left and right, metric tons of CVEs, Remote Code Execution (RCE), Privilege escalation (PE) , ..etc. We have even seen misconfigured Certificate Authority (CA) allowing anybody to claim to be anybody. Bad actors and attackers now have unprecedented leverage over the good guys. It's more important than ever to secure your systems. You need multiple layers of stacked security features, assuming each layer is not enough. No password (no matter how strong) is good enough. critical parts of the system relies on long SSH key not passwords (at least 4K) to push code (including "infra as code") to git you need password-protected SSH-key. NOTE: ssh does not send the private key to the server, it does not work like this immutable hosts (read-only operating systems that are delivered in the form...