DEV Community

Sam LABBE profile picture

Sam LABBE

Senior Lead Tech/Dev, 20+ years. Building NoireBox — the flight recorder for your of AI agents. Proof, not promises. Rust · TS · Python · PHP. I write about trust in AI.

Location Vosges, France Joined Joined on  Email address sam@slabb.dev Personal website https://slabb.dev github website twitter website

Pronouns

Hey

Work

Lead Tech/Dev (Available)

Sanity Challenge Completion
4 Week Community Wellness Streak
Community Favorite 2
2 Week Community Wellness Streak
1 Week Community Wellness Streak
Writing Debut
One Year Club

Pin Pinned

Mistral's Timestral is #1 by 0.003 MASE. I ran it — the model was not the variable.
slabb profile

Mistral's Timestral is #1 by 0.003 MASE. I ran it — the model was not the variable.

#ai #python #machinelearning #opensource
7
Comments 4
10 min read
A hash chain proves the ordering. Four attacks prove it's not enough.

Real Unix primitives match crypto ledgers
slabb profile

A hash chain proves the ordering. Four attacks prove it's not enough.

#ai #security #python #testing
20
Comments 64
8 min read
~1 MB to orbit: your agent's browser ships with your OS

Built in Rust with cross-platform MCP support
slabb profile

~1 MB to orbit: your agent's browser ships with your OS

#showdev #rust #ai #webdev
8
Comments 15
6 min read
I built the flight data recorder for AI agents.
slabb profile

I built the flight data recorder for AI agents.

#showdev #python #security #ai
6
Comments 19
8 min read
The 'BREAKING' unpatched PHP RCE that wasn't: what CVE-2026-115560 actually requires
slabb profile

The 'BREAKING' unpatched PHP RCE that wasn't: what CVE-2026-115560 actually requires

#security #php #infosec #cybersecurity
6
Comments 1
6 min read

Want to connect with Sam LABBE?

Create an account to connect with Sam LABBE. You can also sign in below to proceed if you already have an account.

Create Account
Already have an account? Sign in
Agents should never hold your API keys. NVIDIA just open-sourced the runtime that enforces it
slabb profile

Agents should never hold your API keys. NVIDIA just open-sourced the runtime that enforces it

#ai #security #agents #opensource
14
Comments 28
5 min read
The CA whose private key was the number 4 just quit the certificate business
slabb profile

The CA whose private key was the number 4 just quit the certificate business

#security #infosec #pki #tls
7
Comments
5 min read
A CA private key was the number 4. Your curl still trusts it (CVE-2026-111943)
slabb profile

A CA private key was the number 4. Your curl still trusts it (CVE-2026-111943)

#security #infosec #tls #pki
7
Comments 2
6 min read
php2shell: two critical RCEs in PHP core — lab demo and how to fix CVE-2026-109618 and CVE-2026-109619
slabb profile

php2shell: two critical RCEs in PHP core — lab demo and how to fix CVE-2026-109618 and CVE-2026-109619

#security #php #cybersecurity #rce
7
Comments 1
5 min read
Who watches the watcher when the watcher is a file in the repo?

Permissions beat interpretation for repo security
slabb profile

Who watches the watcher when the watcher is a file in the repo?

#security #ai #agents #devops
11
Comments 17
5 min read
A 9.2 unauthenticated RCE in PHP: the audit, the patch window, and the offline switch
slabb profile

A 9.2 unauthenticated RCE in PHP: the audit, the patch window, and the offline switch

#security #php #webdev #devops
6
Comments
5 min read
The control panel behind a 100-site AI hacking spree has no login. I ran one.
slabb profile

The control panel behind a 100-site AI hacking spree has no login. I ran one.

#ai #security #python #devops
1
Comments
10 min read
The quietest backdoor runs on your own GPU
slabb profile

The quietest backdoor runs on your own GPU

#security #ai #machinelearning #infosec
7
Comments
5 min read
OpenCode lost the keys that lived in its cloud. The ones on disk were fine.

Natural experiment proving local storage security
slabb profile

OpenCode lost the keys that lived in its cloud. The ones on disk were fine.

#security #ai #devtools #api
11
Comments 12
5 min read
Five witnesses and two RIRs: the CAs just discovered custody
slabb profile

Five witnesses and two RIRs: the CAs just discovered custody

#security #webdev #dns #devops
9
Comments
5 min read
I put a logging proxy in front of an LLM client: here's what it emitted

Exposes hidden machine data and silent retries
slabb profile

I put a logging proxy in front of an LLM client: here's what it emitted

#ai #security #python #devops
11
Comments 12
8 min read
The quiz hook is a Level 1 control — and the bypass is logged
slabb profile

The quiz hook is a Level 1 control — and the bypass is logged

#ai #security #programming #devops
8
Comments
5 min read
"But ethical?" — The agent asked, pulled 147,451 private rows, and reverted its tracks
slabb profile

"But ethical?" — The agent asked, pulled 147,451 private rows, and reverted its tracks

#security #ai #programming #architecture
8
Comments 2
8 min read
Ten findings, ten answers — publishing the audit of our own black box

External audit exposes line numbers and fixes
slabb profile

Ten findings, ten answers — publishing the audit of our own black box

#security #python #programming #infosec
9
Comments 14
6 min read
Nine years, a £5 Pico, and 100 nanoseconds — the Xbox verification glitch
slabb profile

Nine years, a £5 Pico, and 100 nanoseconds — the Xbox verification glitch

#security #hardware #programming #retro
7
Comments 2
6 min read
The 11-year-old premise inside Rust's memory-safety proof
slabb profile

The 11-year-old premise inside Rust's memory-safety proof

#rust #security #programming #python
5
Comments 3
5 min read
The authority ladder: five rungs down, four premises standing
slabb profile

The authority ladder: five rungs down, four premises standing

#ai #security #python #programming
6
Comments
7 min read
Every "no AI contributions" policy is a Level 0 control
slabb profile

Every "no AI contributions" policy is a Level 0 control

#ai #opensource #security #programming
11
Comments 3
7 min read
One quoted tilde in your .bashrc is an attacker-controlled PATH entry
slabb profile

One quoted tilde in your .bashrc is an attacker-controlled PATH entry

#security #bash #linux #shell
6
Comments 2
4 min read
We tested pre-training gravity on open weights. It stayed home.
slabb profile

We tested pre-training gravity on open weights. It stayed home.

#ai #security #python #testing
1
Comments
4 min read
Someone anchored 339 billion web pages to Bitcoin. Here's how it works.
slabb profile

Someone anchored 339 billion web pages to Bitcoin. Here's how it works.

#security #opensource #data #bitcoin
7
Comments 1
5 min read
One unescaped semicolon was enough to steal Telegram accounts
slabb profile

One unescaped semicolon was enough to steal Telegram accounts

#security #programming #cpp #privacy
9
Comments 19
6 min read
Docker just shipped the agent wall I wanted. It's off by default.

Defaults are policy and the sandbox matters
slabb profile

Docker just shipped the agent wall I wanted. It's off by default.

#ai #docker #security #devops
24
Comments 53
5 min read
My agent met the real web. 403s, challenges, and the coming tollbooth.
slabb profile

My agent met the real web. 403s, challenges, and the coming tollbooth.

#showdev #ai #webdev #opensource
3
Comments 10
4 min read
700 manuscripts, 48 hours, three withdrawals. The verifier won.

Lean proof checkers calibrating AI trust
slabb profile

700 manuscripts, 48 hours, three withdrawals. The verifier won.

#ai #mathematics #programming #security
5
Comments 12
5 min read
The internet's root key rotates in five days. Your resolver may not be ready.
slabb profile

The internet's root key rotates in five days. Your resolver may not be ready.

#dns #security #devops #networking
6
Comments 3
6 min read
She used Claude as a diary. The terms of service are now part of the charge.
slabb profile

She used Claude as a diary. The terms of service are now part of the charge.

#ai #security #privacy #law
5
Comments 3
5 min read
The status page was green while apps crashed. The postmortem explains why.
slabb profile

The status page was green while apps crashed. The postmortem explains why.

#devops #sre #ios #firebase
5
Comments 4
5 min read
I attack-tested my agent's seatbelt. Here's what survived.
slabb profile

I attack-tested my agent's seatbelt. Here's what survived.

#ai #programming #productivity #shell
6
Comments
5 min read
Always-on agents arrived this week. Here's the gate for what they read.
slabb profile

Always-on agents arrived this week. Here's the gate for what they read.

#ai #security #python #mcp
1
Comments
4 min read
The AI Act went live two months ago. Your agent's logs are still editable.
slabb profile

The AI Act went live two months ago. Your agent's logs are still editable.

#ai #security #python #compliance
7
Comments 6
6 min read
TinyJS App Studio — The GUI to wrap any website or JS project into a ~6 MB desktop app, no Electron, no Node, no bundled Chromium
slabb profile

TinyJS App Studio — The GUI to wrap any website or JS project into a ~6 MB desktop app, no Electron, no Node, no bundled Chromium

#javascript #webdev #opensource #desktop
5
Comments
6 min read
ZéroJour (the press edition): a newspaper that prints itself from structured content — where the machine composes and only a human can publish

Sanity Challenge Path Two Submission
slabb profile

ZéroJour (the press edition): a newspaper that prints itself from structured content — where the machine composes and only a human can publish

#devchallenge #sanitychallenge #sanity #ai
Comments
4 min read
ZéroJour: an advisories agent that only works because the content is structured — and we prove it

Sanity Challenge Path One Submission
slabb profile

ZéroJour: an advisories agent that only works because the content is structured — and we prove it

#devchallenge #sanitychallenge #sanity #ai
5
Comments
5 min read
loading...