News | Security Architects

October 2, 2026

Eight components or eighty lines: two ways to keep an agent's secrets

A reader asked how our agent sandbox and secrets scheme compare to OneCLI, an open-source platform for running AI agents as a team. Fair question, and the answer is more interesting than “ours is better”, because on one axis theirs is, and checking the comparison turned up a sentence on our own product page that was not true.

What OneCLI is

A team control plane. One sandboxed agent per employee, provisioned from your identity provider, under a team policy, with shared connections, memory, scheduling, and a Slack identity each. It runs on your infrastructure. The runner is outbound-only with no inbound ports, which is the same idea our tunnel client uses to live behind NAT.

September 6, 2026

Mosh through your own relay

Mosh (mobile shell) is the remote terminal for people who close the lid. Your session survives sleep, a change of wifi, a train tunnel, and a laggy link, because instead of one long TCP connection it sends small encrypted UDP datagrams and lets either end roam. If you have used it once you do not go back to a plain ssh session on a laptop.

It also does not work through tunnel products, and never has. Those products forward TCP: ngrok offers no UDP endpoint at all, and Cloudflare Tunnel carries UDP only to a device running its own client. Mosh through them connects, prints nothing, and hangs. Tailscale is the exception, because Tailscale is a network rather than a tunnel, and UDP simply routes.

August 27, 2026

The symptom was database crashes. The cause was a webshell.

A production Zimbra mail server we operate started crashing its database. That is the kind of symptom that leads a tired administrator to restart the database, watch it stay up for a while, and move on.

August 26, 2026

Seven ways a security control can pass while doing nothing

We spent several days rebuilding 1lan, our reverse-tunnel service, so that each machine gets an allocated endpoint instead of one derived from its own IP address. The rebuild went fine. What was interesting was the bugs.

July 28, 2026

Ozone, two decades on: we shipped least privilege in 2004

In 2004, the internet was on fire. Blaster, Sasser, MyDoom, and Witty tore through Windows networks faster than signatures could be written, and the industry’s answer was to write signatures faster.

July 21, 2026

Introducing Cone of Silence: hardened agent pods

Today we’re opening early access to Cone of Silence - agent pods secure enough for the original Chief and Agent.

A pod is your own always-on AI agent: Claude, working for you around the clock on a dedicated, hardened machine, reachable from your phone over Telegram. Message it like a person; it reads, researches, codes, and runs real tools - while everything it touches stays inside a security boundary we built and operate.

The “we built” part is literal.

July 18, 2026

Tens of thousands of exposed AI agents - sandboxing must be the default

The always-on personal AI agent is the most exciting thing happening in computing right now - and the most exposed. Between late January and early February of this year, Bitsight’s internet-scale scanning observed more than 31,000 distinct exposed instances of the most popular personal-agent stack, listening on its default port across technology, healthcare, finance, government, and insurance networks. Independent scanning teams reported even larger numbers, including thousands of instances vulnerable to remote code execution.

July 14, 2026

Authinator3 is now open source

We’ve published the core of Authinator3 as open source under the ISC license: gitlab.com/jowolf/authinator3.

Authinator is a web login gateway for firewalls. Authenticate over HTTPS, click once, and your current IP address is granted passage through the firewall - everyone else sees a wall. It replaces both permanently-open management ports and brittle port-knocking schemes with something anyone can operate from a phone: a login page.

Authinator has guarded our own production gateways in one form or another since 2007.