kaguc
Essays
Notes
Tags
About
TAGS
Security
2026
Aug 28
The client security model: an input, never an authority
Every control you ship to a device you don't own can be removed. That single fact settles most mobile security questions: client checks buy …
7 min read
→
Jul 29
Executing model-generated code: a two-layer sandbox
Letting an LLM write data-plotting code and executing it (the Code Interpreter pattern) means shipping an RCE entry point: the model …
8 min read
→