Kiell Tampubolon

Security Engineer & Technical Writer | AI Security, MCP, Developer Security & Automation

Singapore Joined on Apr 21, 2026 https://www.kielltampubolon.id/

Pinned

Kiell Tampubolon

Sep 23

My AI agent said we were under attack. The logs said otherwise.

#discuss #ai #security #agents

5 min read

Kiell Tampubolon

Sep 22

The LiteLLM Supply Chain Backdoor: What 3 Hours Means for Your AI Agent Gateway

#security #ai #python #llm

5 min read

Kiell Tampubolon

Sep 18

A fake MCP server spent three months earning trust. The tells were there

#security #mcp #ai #cybersecurity

3 min read

Kiell Tampubolon

Sep 14

My Scanner Passed Until I Built a Harness That Lied to It on Purpose

#security #python #testing #opensource

3 min read

Kiell Tampubolon

Sep 11

A happy-path MCP demo proves almost nothing about tenant isolation

#security #mcp #ai #python

3 min read

Kiell Tampubolon

Nov 3

A 1-Day Cooldown Would Have Blocked 70% of 2026's Hijacked npm Releases. Against Typosquats, 7 Days Still Misses 45%

#security #npm #python #devops

8 min read

Want to connect with Kiell Tampubolon?

Create an account to connect with Kiell Tampubolon. You can also sign in below to proceed if you already have an account.

Create Account

Already have an account? Sign in

Kiell Tampubolon

Oct 31

From Arduino sketches to digital twins: where Sketch2Sim goes next, and how to get involved

#showdev #opensource #ai #iot

5 min read

Kiell Tampubolon

Oct 31

What Gemma 4 vision gets right about circuit sketches, and the validator that fixes the rest

#ai #gemini #arduino #typescript

6 min read

Kiell Tampubolon

Oct 31

Two Claude Code sessions, one folder, no merge conflicts: how I split a hackathon build between AI agents

#ai #productivity #hackathon #programming

6 min read

Kiell Tampubolon

Oct 31

From a paper sketch to a running circuit: building Sketch2Sim with Gemma 4 in one hack day

#hackathon #ai #arduino #opensource

8 min read

Kiell Tampubolon

Oct 30

Let's Encrypt Pindah ke 64 Hari. Saya Cek 520 Situs .id: 3 dari 4 Situs go.id Masih Pakai Sertifikat Berumur Panjang

#security #tls #devops #indonesia

5 min read

Kiell Tampubolon

Oct 29

Let's Encrypt Is Going to 64 Days. I Checked 520 .id Sites. 3 in 4 go.id Sites Still Run Long-Lived Certificates

#security #tls #devops #indonesia

9 min read

Kiell Tampubolon

Oct 27

Python 3.15 Is Out. I Checked the Top 500 PyPI Packages: 97% Install From a Wheel, 12 Still Run Build Scripts

#python #security #devops #programming

8 min read

Kiell Tampubolon

Oct 27

Saya Memindai 30 Image Docker Populer. 10 Masih Percaya Root CA yang Sudah Dicabut Chrome

#security #docker #devops #indonesia

5 min read

Kiell Tampubolon

Oct 26

The eMudhra Fallout, Part 2: I Scanned 30 Docker Images. 10 Still Trust the Root Chrome Is Dropping

#security #docker #devops #tls

8 min read

Kiell Tampubolon

Oct 25

Kunci CA eMudhra Ternyata Cuma Satu Byte. Container Kamu Masih Percaya?

#security #tls #devops #indonesia

6 min read

Kiell Tampubolon

Oct 24

UUIDv7 Is a Great Database Key and a Bad Clock: 4 Tests Before You Migrate

#database #postgres #python #webdev

5 min read

Kiell Tampubolon

Oct 24

uv check: Finally, Type Checking for Single-File Python Scripts

#python #tooling #tutorial #devops

5 min read

Kiell Tampubolon

Oct 24

PHP2Shell: The Patch Is Out. Is It Running in Your Containers?

#php #docker #security #devops

5 min read

Kiell Tampubolon

Oct 24

The eMudhra CA Keys Were One Byte Long. Does Your Container Still Trust Them?

#security #devops #docker #linux

6 min read

Kiell Tampubolon

Oct 15

From DNS Security Trainer to ICANN87 Fellow: What a Cybersecurity Engineer Looks for in Bali

#security #cybersecurity #dns #career

5 min read

Kiell Tampubolon

Oct 13

Cara Bypass Rate Limit API Secara Etis Pakai Local Proxy

#api #python #tutorial #indonesia

3 min read

Kiell Tampubolon

Oct 13

Best Open-Source Structured Data Extraction Models for Financial Reports

#ai #machinelearning #opensource #llm

10 min read

Kiell Tampubolon

Oct 7

Membangun Local API Proxy dengan Token Bucket untuk Menangani Rate Limit

#api #python #tutorial #indonesia

4 min read

Kiell Tampubolon

Oct 5

Wiring a Third-Party Decision Model Into Claude Code, and What I Wouldn't Let It Do by Default

#ai #claude #security #productivity

6 min read

Kiell Tampubolon

Oct 5

NetScaler Zero-Day: 3 Checks After Sunday's Patch

#discuss #security #cybersecurity #devops

6 min read

Kiell Tampubolon

Oct 5

Membangun Personal AI Agent yang Benar-Benar Milikmu

#ai #agents #opensource #indonesia

4 min read

Kiell Tampubolon

Oct 4

My agents kept forgetting each other, so I wrote a protocol about it

#ai #agents #python #opensource

7 min read

Kiell Tampubolon

Oct 4

FortiMail Zero-Day: 3 Checks Before You Trust the Patch

#security #cybersecurity #devops #linux

7 min read

Kiell Tampubolon

Oct 4

Math.random Signed the Cookies: 12 Requests to HFS Admin

#discuss #security #node #javascript

8 min read

Kiell Tampubolon

Oct 4

AI Agent Chained 2 Zero-Days to Root in Seconds: 4 Checks

#discuss #security #ai #agents

6 min read

Kiell Tampubolon

Oct 4

Threat Modeling the Model Context Protocol: Securing Agentic Tools with mcpscan

#security #ai #mcp #python

5 min read

Kiell Tampubolon

Oct 4

9.8 Windows DNS RCE: 3 Triage Checks Before It Repeats SigRed

#discuss #security #cybersecurity #dns

6 min read

Kiell Tampubolon

Oct 4

Mullvad Public DNS Shuts Down Nov 2: 5 Checks I Ran First

#discuss #privacy #dns #linux

9 min read

Kiell Tampubolon

Oct 4

Shopify Left React Native: 4 Questions Before You Follow

#reactnative #mobile #programming #architecture

7 min read

Kiell Tampubolon

Oct 4

I Traced CrewAI's Sandbox CVE: 9 Names Missed the Runtime

#security #python #ai #agents

8 min read

Kiell Tampubolon

Oct 4

Artifactory Is Under Active Attack: 3 Checks in 30 Minutes

#discuss #security #devops #cybersecurity

8 min read

Kiell Tampubolon

Oct 4

MCP Servers Had a Rough 48 Hours: 4 Unauthenticated CVEs

#discuss #security #mcp #python

9 min read

Kiell Tampubolon

Oct 4

I Traced the Jev Repo Wave: 5 Checks Before You Star It

#discuss #opensource #github #ai

8 min read

Kiell Tampubolon

Oct 4

Codex Sandbox Escape: 3 Checks Before You Open Another Repo

#security #ai #agents #node

8 min read

Kiell Tampubolon

Oct 4

I Traced 29 CVEs in One MCP Server to 4 Root Causes

#discuss #security #mcp #python

10 min read

Kiell Tampubolon

Oct 4

NetScaler RCE: 3 Checks Before Your Next Patch Window

#security #devops #cybersecurity #networking

6 min read

Kiell Tampubolon

Oct 4

I Traced Unbound's DNSSEC Heap Overflow: 4 Checks to Run

#discuss #security #devops #dns

7 min read

Kiell Tampubolon

Oct 4

I Traced AgentCore's Package Injection Bug Through 2 Fixes

#discuss #security #python #aws

6 min read

Kiell Tampubolon

Oct 4

I Traced vm2's 9.5 Sandbox Escape to a Missing Regex Boundary

#security #node #javascript #opensource

6 min read

Kiell Tampubolon

Oct 4

I spent 4 hours getting a Copilot Studio agent to read Entra audit logs. Here is what actually broke.

#security #microsoft #automation #ai

8 min read

Kiell Tampubolon

Oct 4

Read-Only Postgres MCP Servers Fail With 1 SQL Keyword

#discuss #security #mcp #postgres

7 min read

Kiell Tampubolon

Oct 4

I Traced MaxKB's 10.0 CVE Through the Advisory and the Code

#security #python #ai #agents

8 min read

Kiell Tampubolon

Oct 4

I Read Claude's Biology Discovery as a Pipeline: 5 Lessons

#discuss #ai #agents #python

7 min read

Kiell Tampubolon

Oct 4

I Audited the MCP SDK OAuth Fix: 3 Checks Upgrading Misses

#discuss #security #mcp #python

6 min read

Kiell Tampubolon

Oct 4

MCP Costs 72% of Your Context: The Fix Pi Shipped

#ai #mcp #agents #llm

7 min read

Kiell Tampubolon

Oct 3

5 Skills I Still Learn by Hand While Agents Write Code

#discuss #webdev #beginners #learning

6 min read

Kiell Tampubolon

Sep 25

1,5 Juta Token API Bocor di Moltbook. Token Hygiene Bukan Fitur, Itu Standar Minimal

#security #ai #api #indonesia

5 min read

Kiell Tampubolon

Sep 25

The fake browser extension playbook is back. This time it ships as agent skills

#security #ai #agents #cybersecurity

5 min read

Kiell Tampubolon

Sep 23

No CVE needed: how a GitHub issue hijacked an AI agent

#security #ai #mcp #github

6 min read

Kiell Tampubolon

Sep 21

The payment webhook failure I had to inject on purpose

#python #testing #webdev #fintech

4 min read

Kiell Tampubolon

Sep 16

How to Audit an MCP Server Manifest for Prompt Injection in Tool Descriptions

#security #ai #mcp #tutorial

5 min read

Kiell Tampubolon

Sep 15

How to Build an AI SOC With Tools You Already Own (Copilot Studio, Power Automate, Graph API)

#security #ai #automation #microsoft

5 min read

Kiell Tampubolon

Sep 15

What Is MCP Security? Common Attacks and How to Scan Your MCP Servers

#security #mcp #ai #cybersecurity

5 min read

Kiell Tampubolon

Sep 14

5 Kesalahan Keamanan MCP yang Jamak Dilakukan Bisnis Kecil (dan Cara Memperbaikinya Hari Ini)

#security #mcp #ai #indonesia

3 min read

Kiell Tampubolon

Sep 14

200,000 exposed MCP servers later, the boring checks still win

#security #mcp #ai #devops

3 min read

Kiell Tampubolon

Sep 14

Your error tracker is an input channel now

#security #mcp #ai #devops

3 min read

Kiell Tampubolon

Sep 14

The NSA published 17 pages on MCP security. Here it is as a checklist you can run today

#security #mcp #ai #devops

3 min read

Kiell Tampubolon

Sep 13

Bayaran Sudah Masuk tapi Status Masih Belum Dibayar: Kenapa Webhook Pembayaran Gagal Diam-diam

#webdev #automation #payments #indonesia

4 min read

Kiell Tampubolon

Sep 12

Benchmarking My MCP Security Scanner: 14 of 14 Findings, Zero False Positives

#security #python #testing #mcp

2 min read