Kinohoy
681 posts

Kinohoy
@kinohoy
Crypto Since 2017 | AI • Web3 • DeFi Explorer | Daily Alpha & Guides | Kinohoy
India Katılım Şubat 2020
72 Takip Edilen100 Takipçiler


ANTHROPIC JUST PUBLISHED A 36-PAGE SECURITY GUIDE AND THE CORE MESSAGE IS UNCOMFORTABLE.
Stop trusting your own AI agents.
Not because they're malicious. Because they're exploitable in ways most builders haven't thought about.
Here's what the guide actually says:
Your agent reads a webpage.
That webpage has hidden instructions embedded in the content.
Your agent follows them.
You never see it happen.
That's prompt injection.
And it's not theoretical. It's happening in production systems right now.
The guide covers 10 specific threat categories every agent builder needs to understand before they ship anything to real users:
- Prompt injection from external content
- Excessive permissions that expand blast radius
- Memory poisoning that corrupts long-running agent behavior
- Supply chain attacks through compromised tools
- Insecure MCP servers that expose your entire operation
The section most people will skip is the one about human oversight.
Anthropic is direct about it: the more capable your agent gets, the more important it becomes to keep humans in the loop on consequential decisions.
Not because the agent will go rogue. Because the agent will confidently do the wrong thing and you won't know until it's too late.
The practical recommendations:
- Minimal permissions. Agents should only have access to what they need for the specific task. Nothing more.
- Sandboxed execution. Actions with real-world consequences need human confirmation before they fire.
- Input and output validation. Everything coming in and going out of your agent needs to be checked.
- Monitoring and logging. If you can't see what your agent is doing you can't know when it's been compromised.
- Treat agent outputs as untrusted. Even your own agent's reasoning can be influenced by external content it processed earlier in the session.
The 36 pages are worth reading before you ship your next agent to anyone who matters.
Bookmark this before your next agent deploy.
Follow @cyrilXBT for every Anthropic security release that changes how builders should think about production agents.

English

@noisyb0y1 $10k/month claim verify karna padega — but the underlying point is real
Distribution + AI tools + one solid idea > years of learning + zero shipping
Jo log “still learning” mein hain, woh actually “never launching” mein hain
English

Zixuan, a Chinese computer science teacher, built a complete RPG game in one weekend and is already making $10,000 a month from it
three different maps, weapon system, armor, potions, bosses, dozens of different enemy types - everything you normally see in a $60 game on Steam
and it all started from one idea and Claude Code
he didn't build a team, didn't look for investors and didn't spend years learning game development
just sat down on a weekend and started building
and the craziest part is that the tools he used are completely free and available to anyone right now
people who already figured out how this works are launching their own products and making $10,000 to $20,000 a month
in the video above I showed how this looks from the inside
full guide on how to build your own in the article below
Sprytix@Sprytixl
English

Perplexity charges $240 per year for AI search.
ChatGPT charges $240 per year.
Someone built /last30days and made it free forever.
28,700 GitHub stars. MIT licensed. Self-hosted. Your keys. Your agent.
But the pricing is not even the interesting part.
Perplexity searches the web. ChatGPT searches the web. Google searches the web.
/last30days searches:
- Reddit threads by upvotes
- X posts by likes
- YouTube by what was actually said in the transcript
- TikTok by real community engagement
- Polymarket by real money backing real predictions
- HN by what technical people actually think
- GitHub by what's actually being shipped
Then scores everything against each other by what real humans engaged with.
Not what editors curated. Not what algorithms pushed.
What real people actually cared about enough to upvote, like, share, or bet money on.
One command. Every platform at once. One grounded brief. Free forever.
github.com/mvanhorn/last3…

English



















