A Thoughtworks engineer explores the nuanced risk assessment required when using AI to generate code, moving beyond a simple 'good or bad' debate.
The ls-mcp tool update adds a security feature to detect and assess the risk of credentials stored in environment variables within MCP server configurations.
A senior engineer at Lyft outlines the risks of using third-party libraries in production apps and proposes a framework for consistent risk assessment.
A threat modeling case study using bicycle theft to illustrate security principles applicable to IT systems.
A developer's critical questions for evaluating cloud providers, focusing on problem-solving, security implementation, and customer-driven development.
