<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:memo="https://memo.d.foundation/ns/feed/1">
  <channel>
    <title>security - Dwarves Memo</title>
    <atom:link href="https://memo.d.foundation/topics/ai-agents/tags/security/rss.xml" rel="self" type="application/rss+xml" />
    <link>https://memo.d.foundation/topics/ai-agents/tags/security</link>
    <description>The newest notes tagged security on Dwarves Memo.</description>
    <lastBuildDate>Thu, 03 Sep 2026 00:00:00 GMT</lastBuildDate>
    <language>en-US</language>
    <sy:updatePeriod>hourly</sy:updatePeriod>
    <sy:updateFrequency>1</sy:updateFrequency>
    <item>
      <title>Claude Code 2.1.259 turned our Read() deny rules into a Bash tripwire</title>
      <link>https://memo.d.foundation/claude-code-read-deny-bash-prompts</link>
      <pubDate>Thu, 03 Sep 2026 00:00:00 GMT</pubDate>
      <dc:creator><![CDATA[tieubao]]></dc:creator>
      <description><![CDATA[Bypass-mode sessions started stalling on 'a Read() deny rule is configured' prompts. What the harness now infers from a Bash command, why a CLAUDE.md rule couldn't stop it, and why we moved the secret-file guard from the deny list into a hook.]]></description>
      <guid isPermaLink="true">https://memo.d.foundation/claude-code-read-deny-bash-prompts</guid>
    </item>
    <item>
      <title>MCP authorization over SSE</title>
      <link>https://memo.d.foundation/rfc-mcp-security</link>
      <pubDate>Thu, 08 May 2025 00:00:00 GMT</pubDate>
      <dc:creator><![CDATA[monotykamary]]></dc:creator>
      <description><![CDATA[A Request for Comments (RFC) detailing a comprehensive specification for implementing OAuth 2.1 authorization within the Model Context Protocol (MCP) when using Server-Sent Events (SSE) as the transport mechanism, ensuring vendor-neutral security for AI-to-tool communication.]]></description>
      <guid isPermaLink="true">https://memo.d.foundation/rfc-mcp-security</guid>
    </item>
    <item>
      <title>Secure and transparent uptime monitoring with Upptime and GitHub secrets</title>
      <link>https://memo.d.foundation/service-monitoring-with-upptime</link>
      <pubDate>Mon, 31 Mar 2025 00:00:00 GMT</pubDate>
      <dc:creator><![CDATA[lmquang]]></dc:creator>
      <description><![CDATA[Discover how Dwarves Foundation uses Upptime and GitHub Actions for transparent public uptime monitoring while securely keeping tabs on internal services.]]></description>
      <guid isPermaLink="true">https://memo.d.foundation/service-monitoring-with-upptime</guid>
    </item>
    <item>
      <title>Authorization for remote MCP servers over SSE</title>
      <link>https://memo.d.foundation/ai/securing-your-remote-mcp-servers</link>
      <pubDate>Thu, 27 Mar 2025 00:00:00 GMT</pubDate>
      <dc:creator><![CDATA[monotykamary]]></dc:creator>
      <description><![CDATA[This guide explores implementing robust authorization for Model Context Protocol (MCP) over Server-Sent Events (SSE) transport, providing a standardized framework for secure AI-to-tool communication while maintaining vendor independence.]]></description>
      <guid isPermaLink="true">https://memo.d.foundation/ai/securing-your-remote-mcp-servers</guid>
    </item>
    <item>
      <title>Tool-level security for remote MCP servers, part 1: designing role-based access control</title>
      <link>https://memo.d.foundation/ai/tool-level-security-for-remote-mcp-servers</link>
      <pubDate>Thu, 27 Mar 2025 00:00:00 GMT</pubDate>
      <dc:creator><![CDATA[monotykamary]]></dc:creator>
      <description><![CDATA[Why remote MCP servers need tool-level access control, the security architecture, and the data model and tool registry behind role-based access.]]></description>
      <guid isPermaLink="true">https://memo.d.foundation/ai/tool-level-security-for-remote-mcp-servers</guid>
    </item>
    <item>
      <title>Tool-level security for remote MCP servers, part 2: enforcement, identity and practice</title>
      <link>https://memo.d.foundation/ai/mcp-tool-security-enforcement-identity</link>
      <pubDate>Thu, 27 Mar 2025 00:00:00 GMT</pubDate>
      <dc:creator><![CDATA[monotykamary]]></dc:creator>
      <description><![CDATA[How an MCP server enforces permissions and filters data, connects to existing identity systems, and rolls out access control in practice.]]></description>
      <guid isPermaLink="true">https://memo.d.foundation/ai/mcp-tool-security-enforcement-identity</guid>
    </item>
    <item>
      <title>Database hardening for a trading platform</title>
      <link>https://memo.d.foundation/database-hardening-for-trading-platform</link>
      <pubDate>Thu, 02 Jan 2025 00:00:00 GMT</pubDate>
      <dc:creator><![CDATA[zlatanpham]]></dc:creator>
      <description><![CDATA[Discover how a trading platform mitigated database access risks, enhanced security, and ensured data integrity through role-based access control, network isolation, MFA, and robust logging. Learn about the strategies and tools, like Teleport, that transformed operational efficiency and reinforced client trust.]]></description>
      <guid isPermaLink="true">https://memo.d.foundation/database-hardening-for-trading-platform</guid>
    </item>
    <item>
      <title>Prevent prompt injection</title>
      <link>https://memo.d.foundation/llm/prevent-prompt-injection</link>
      <pubDate>Mon, 23 Sep 2024 00:00:00 GMT</pubDate>
      <dc:creator><![CDATA[nnhuyhoang]]></dc:creator>
      <description><![CDATA[Nowadays, Large Language Models (LLMs) have become integral to various applications. However, with great power comes great responsibility, and the rise of LLMs has introduced new security challenges. One such challenge is prompt injection attacks, a sophisticated technique that can manipulate AI systems to perform unintended actions. In this article, we'll dive deep into the world of prompt injection, understand its implications, and explore strategies to prevent these attacks.]]></description>
      <guid isPermaLink="true">https://memo.d.foundation/llm/prevent-prompt-injection</guid>
    </item>
    <item>
      <title>A holistic guide to security</title>
      <link>https://memo.d.foundation/topics/security/a-holistic-guide-to-security</link>
      <pubDate>Fri, 06 Sep 2024 00:00:00 GMT</pubDate>
      <dc:creator><![CDATA[zlatanpham]]></dc:creator>
      <description><![CDATA[A high-level overview of how to implement a holistic approach to securing your application platform.]]></description>
      <guid isPermaLink="true">https://memo.d.foundation/topics/security/a-holistic-guide-to-security</guid>
    </item>
    <item>
      <title>How I came up with our security standard</title>
      <link>https://memo.d.foundation/topics/security/how-i-came-up-with-our-security-standard</link>
      <pubDate>Fri, 19 Apr 2024 00:00:00 GMT</pubDate>
      <dc:creator><![CDATA[zlatanpham]]></dc:creator>
      <description><![CDATA[In this memo, I want to share with you my thought process behind our security guideline for Dwarves. This is a critical aspect for a software company that aims to establish trusted partnerships with clients. They rely on us because we take the security of their ideas and data seriously.]]></description>
      <guid isPermaLink="true">https://memo.d.foundation/topics/security/how-i-came-up-with-our-security-standard</guid>
    </item>
    <item>
      <title>The key security mechanisms for tackling cyber threats</title>
      <link>https://memo.d.foundation/topics/security/the-key-of-security-mechanisms-in-tackling-cyber-threats</link>
      <pubDate>Mon, 26 Dec 2022 00:00:00 GMT</pubDate>
      <dc:creator><![CDATA[neko-anon]]></dc:creator>
      <description><![CDATA[Learn essential cybersecurity tips from expert Hieu PC on building secure products, protecting data, and staying updated on security standards to prevent hacking and safeguard your code effectively.]]></description>
      <guid isPermaLink="true">https://memo.d.foundation/topics/security/the-key-of-security-mechanisms-in-tackling-cyber-threats</guid>
    </item>
    <item>
      <title>Blockchain fundamentals</title>
      <link>https://memo.d.foundation/blockchain/blockchain-simplified</link>
      <pubDate>Sat, 19 Dec 2020 00:00:00 GMT</pubDate>
      <dc:creator><![CDATA[tieubao]]></dc:creator>
      <description><![CDATA[Blockchain breaks down the complex technology behind Bitcoin and other cryptocurrencies into simple terms anyone can understand. Learn how distributed ledgers work, why they're secure, and what makes them revolutionary for digital trust.]]></description>
      <guid isPermaLink="true">https://memo.d.foundation/blockchain/blockchain-simplified</guid>
    </item>
  </channel>
</rss>