@StackLokHQ

Makers of open source and free-to-use tools for AI-curious developers. Find our most recent project here: https://nitter.cf/t.co/OpQTkZ1cge

 Remote and asynchronous
stacklok.com
Joined April 2023
  • Tweets404
  • Following74
  • Followers550
"AI's effects on programming jobs; doom and utopia are not our only options." hubs.la/Q03dmSPW0
1
455
Will / should this also include code? hubs.la/Q03dmQ5D0

China will enforce clear flagging of all AI generated content starting from September

AI text, audio, video, images, and even virtual scenes will all need to be labeled.

tomshardware.com
2
1
1
488
MCP: The Ultimate API Consumer (Not the API Killer) hubs.la/Q03dmRkg0

MCP: The Ultimate API Consumer (Not the API Killer) | Layered System

APIs are the connective tissue of our digital world. Now there's a new protocol reshaping the landscape: Model Context Protocol (MCP). Let's debunk the misconception that MCP will kill APIs.

layered.dev
1
2
303
Three types of AI missteps during agentic coding and how to safeguard against them; thoughts from @birgitta410. hubs.la/Q03dmPyR0

Exploring Generative AI

Notes from my Thoughtworks colleagues on AI-assisted software delivery

martinfowler.com
1
216
Emergent misalignment is strongest in GPT-4o and Qwen2.5-Coder-32B-Instruct, but all fine-tuned models exhibit inconsistent behavior hubs.la/Q03cz4zK0

Emergent Misalignment: Narrow finetuning can produce broadly...

We present a surprising result regarding LLMs and alignment. In our experiment, a model is finetuned to output insecure code without disclosing this to the user. The resulting model acts...

arxiv.org
1
246
The model is the product; were investors wrong to bet on the application layer? hubs.la/Q03cZX5V0
2
173
"This technique enables hackers to silently compromise AI-generated code by injecting hidden malicious instructions into seemingly innocent config files used by Cursor and Copilot" 😟hubs.la/Q03cZTDF0

New Vulnerability in GitHub Copilot and Cursor: How Hackers Can Weaponize Code Agents

pillar.security
1
195
15 AI Agent Papers You Should Read From February. Or, at least get the TL;DR from your favorite model hubs.la/Q03cz6jh0

From the LangChain community on Reddit

Explore this post and more from the LangChain community

reddit.com
1
188
Not easy, but effective. Hallucinations were almost entirely resolved using CURE + reverse RAG + more LLM magic hubs.la/Q03cz5nt0

Mayo Clinic tackles LLM hallucinations | VentureBeat

To tackle data-retrieval-based hallucinations in non-diagnostic use cases, Mayo Clinic has applied CURE reverse RAG paired with vector databases.

venturebeat.com
137
Working malware is easily generated from DeepSeek's R1 model with a gentle nudge and a few human edits hubs.la/Q03cyMJy0

DeepSeek spits out malware code with a little persuasion

: It might need polishing, but a useful find for any budding cybercrooks out there

theregister.com
129
A look at four ways that AI is reshaping hacking and malware development, and how we can stay vigilant in response. @stacklokhq thenewstack.io/evil-models-a…

Evil Models and Exploits: When AI Becomes the Attacker

A look at four ways that AI is reshaping hacking and malware development, and how we can stay vigilant in response.

thenewstack.io
1
1
661
While others are doing secret Santa, #GenAI builders are locally encrypting secrets w/ @StackLokHQ's new #opensource Code Gate 🎅🎁👇
This quoted post is unavailable.
Try viewing anyway · View on X
1
3
814
.@StackLokHQ Donates Minder Security Project to @OpenSSF #CyberSecurity #OpenSource thenewstack.io/stacklok-dona…

Stacklok Donates Minder Security Project to OpenSSF

StackLok Donates Minder Project to OpenSSF, Boosting Open Source Security Efforts.

thenewstack.io
1
6
694
.@StackLokHQ Donates Minder Security Project to @openssf | By @sjvn #OpenSource @cmcluck thenewstack.io/stacklok-dona…

Stacklok Donates Minder Security Project to OpenSSF

StackLok Donates Minder Project to OpenSSF, Boosting Open Source Security Efforts.

thenewstack.io
5
7
1,650
Stacklok retweeted
OpenSSF@openssf
28 Oct 2024
🎉 Welcome to the OpenSSF family, Minder! 📣 @StackLokHQ is contributing Minder to OpenSSF as a sandbox project! Minder streamlines #OSSSecurity, auto-remediates issues, and flags key risks for devs & security teams. 🔍 Learn more about Minder: openssf.org/guest-blog/2024/…
5
1
17
1,434
“90% of the code that's being delivered into a production environment is written by random people on the internet. And those random people are increasingly using generative AI models”—@cmcluck, on Stacklok donating its Minder #security supply chain platform to @openssf #ATO2024
3
6
930
Join Stacker @jaosorior for an Intro to #Minder today at 10am ET / 3pm BST / 5pm EEST to get a high-level overview and demo of the project. YouTube livestream is at: youtube.com/watch?v=YvP9YGQ4… #SupplyChainSecurity #ShiftLeft #DevSecOps

Minder Monday: Introduction to Minder

An Introduction to Minder🗓️ October 14, 2024🕰️ 7am PT | 10am ET...

youtube.com
1
1
4
316
Now available in #Minder: Profile Selectors give you the flexibility to customize how & when policies are applied to your projects. Easily customize how Minder profiles are applied to your projects, and apply the right rules to the right resources. stacklok.com/blog/flexible-p…
1
2
328
📣TODAY! Join @puerco at #SOSSCommunity Day Europe as he dives into how to build a trusted end-to-end VEX stream, from code to scanner diving deep into a VEX document and explores other highlights of the OpenVEX ecosystem. Thu. Sep 19 at 10:40am CEST sched.co/1gb7z
1
145
⏰ Reminder that the CFP for SigstoreCon closes tomorrow, September 18! events.linuxfoundation.org/s…

Call For Proposals (CFP) | SigstoreCon Supply Chain Day

SigstoreCon is a one-day conference dedicated to Sigstore and software supply chain security. SigstoreCon will be a vendor-neutral conference dedicated to collaboration and learning about not only…

events.linuxfoundation.org
4
7
711
Load more