A summary of a talk on a new language-agnostic approach using abstract interpretation to find critical vulnerabilities in Zero-Knowledge Proof (ZKP) programs by modeling and detecting mismatches between prover computations and verifier constraints.
A deep dive into building, testing, and iterating on Agent Skills to improve AI agent performance. This workshop covers the core concepts of progressive disclosure, eval-driven development, and practical application using a real-world Supabase and PostgreSQL security scenario.
Q-Day, the day a quantum computer will be powerful enough to break current encryption standards, is an inevitable threat. This summary explains how quantum algorithms like Shor’s and Grover’s will compromise both asymmetric and symmetric cryptography, the severe consequences for data confidentiality and digital trust, and why the "Harvest Now, Decrypt Later" attack vector makes immediate migration to post-quantum cryptography a critical priority for all organizations.
This GOTO Book Club episode features an in-depth conversation between Sam Newman and Lukasz Dynowski, co-author of "Learning API Styles," exploring the foundational network layer of APIs, various API styles, critical trade-off decisions, and future trends like WebTransport and gRPC. The discussion emphasizes treating APIs as products, understanding consumer context, and the eight key characteristics of a well-designed API, complemented by a cautionary tale on database access.
Sam Khavari, the creator of Pydantic, introduces Monty, a new, secure, and high-performance Python interpreter written in Rust. Monty is designed specifically for AI agents, bridging the gap between simple, limited tool-calling and complex, slow, full-featured sandboxes.
Jiquan Ngiam, CEO of MintMCP, discusses the paradigm shift from static programs to dynamic AI agents, outlining the significant security risks involved—supply chain vulnerabilities, third-party data poisoning, and inadvertent agent behaviors—and presents a three-pronged strategy for enterprise readiness: comprehensive monitoring, preventative guardrails, and secure, role-based deployment of Model Context Protocols (MCPs).