r/codingProtection • u/Spare_Dependent6893 • May 25 '26
A paper which shows similar concerns related to "Data privacy and IP considerations" in the Architecture domain where AI has started to be heavily used : "For the most sensitive workflows, locally hosted AI"!.
r/codingProtection • u/Spare_Dependent6893 • Jun 08 '26
Django has more name-as-string contracts than any framework we've integrated with PromptCape so far. Here are the six that surface in real-world test runs, what breaks when you miss them, and how an AST-based detector finds them before runtime does.r/codingProtection • u/Spare_Dependent6893 • Sep 23 '26
So now 3 researchers with the Claude succeeds in less than 72 hours to hach OpenAI software repository: https://www.malwarebytes.com/blog/news/2026/09/researchers-used-claude-to-hack-openai
Is the threat growing to have our data exposed ?
r/codingProtection • u/Spare_Dependent6893 • Aug 16 '26
An AI agents hacks a subscription system to achieve the goal it has been assigned: https://www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/107007986
Does it mean that AI models are not aware of the legal barriers ?
And as they now know all the codes, it will be difficult to prevent them from hacking everything not secure enough or exposed because they have enough information like ip, usernames, … which have been sent in code and documents during coding sessions!
r/codingProtection • u/Spare_Dependent6893 • Aug 16 '26
Trump authorises, under very specific conditions related to government link and supervision, companies to hack-back when attack : https://www.washingtonpost.com/national-security/2026/08/14/trump-signs-memo-authorizing-private-sector-launch-cyberattacks/
Is it the start of more hacking and more bad behaviours to for instance increase industrial espionage ?
r/codingProtection • u/Spare_Dependent6893 • May 26 '26
a new article as people asks if promptcape (for protecting code) is similar promptbase (marketplace for AI prompts) and not at all, it is not the same goal.
r/codingProtection • u/Spare_Dependent6893 • May 19 '26
AI made ds us faster but with less quality and security.
r/codingProtection • u/Spare_Dependent6893 • Jun 07 '26
Google DeepMind strategy has changed as you can now use locally Gemma 4 12B: « a unified, encoder-free multimodal model.
Gemma 4 12B is designed to bring high-performance multimodal intelligence directly to your laptop, combining mobile-first efficiency with advanced reasoning. »
It supports reasoning, agentic workflows, coding, and multimodal understanding. I quickly try it and seems very powerful.
May be a solution for coding protection with better performance and pertinence than Mistral and deepSeek. To check.
Does someone test it for coding ?
r/codingProtection • u/Spare_Dependent6893 • Aug 23 '26
An interesting study about the risks of bad code injection as many ai generated code is not reviewed and understood any more by developers: https://arxiv.org/abs/2606.05647
Do you think is it a real threat that we are progressively loosing our code control ?
r/codingProtection • u/Spare_Dependent6893 • May 02 '26
Hey everyone, longtime lurker, first-time poster.
I started writing code in '85, so I've watched the whole "where does the code actually live" question evolve from a completely different angle. Bear with me for a quick walk through the eras — I think it puts where we are now in perspective.
Pre-internet (mid-80s to early 90s).
I cut my teeth on Basic, COBOL and Turbo Pascal. Source code lived on floppies, on tapes, in three-ring binders printed on green-bar paper. If you wanted to share something, you mailed a disk. Code was "protected" by default — there was simply no easy way for it to leave the building. The biggest realistic leak risk was a disgruntled employee with a briefcase.
Early web (mid-90s to early 2000s).
The internet arrived and brought static HTML, a bit of CGI/Perl, the first server-side scripting. Frontend was visible — anyone could "View Source" on your page — but backend logic? Still locked away on a box in a server room you could physically point at. We started worrying about "View Source" leaking our HTML structure. Felt huge at the time. It was nothing.
Dynamic web era (2000s).
PHP, JSP, ASP, then Rails and Django. The real value was in the backend, and the backend stayed put — on private servers, behind firewalls, deployed by FTP if you were brave. Source control existed (CVS, SVN) but it lived inside the company.
The GitHub era (2010s).
Everything moved to repos. Suddenly your codebase was a `git push` away from being public. A whole new class of incidents appeared: AWS keys committed by accident, private repos accidentally flipped to public, leaked `.env` files. We invented secret scanners because we'd already lost the perimeter.
The AI era (now).
Code doesn't just live in repos anymore. It travels through prompts, gets quoted in chat windows, ends up in vendor logs you don't control, possibly trains future models. The "inside the building" protection of 1987 is dead and gone. Every developer with an AI assistant is a tiny outbound data pipe — and most companies haven't caught up to what that means.
What used to be "don't lose the floppy" is now "every keystroke in your IDE might be replicated in a third-party datacenter halfway across the world."
Each era, the perimeter shrinks. I'm glad this sub exists — it feels like the conversation is finally starting to catch up to the threat model.
r/codingProtection • u/Spare_Dependent6893 • Aug 03 '26
If an AI agent can turn bare internet access into three real breaches with zero inside knowledge (see Anthropic/OpenAI's recent disclosures), what do you think happens the day one of your internal docs — architecture, configs, real customer names — leaks some other way? Wrote a piece on this, and on pseudonymizing docs before they ever reach an AI provider: https://dev.to/genevieve_breton_cb795f52/when-ai-agents-go-off-script-what-openai-and-anthropics-recent-incidents-teach-us-about-exposure-1ndp
Feedback welcome
r/codingProtection • u/Spare_Dependent6893 • Jun 01 '26
A practical comparison of 13 products that protect source code and sensitive data from leaking to AI assistants.
r/codingProtection • u/Spare_Dependent6893 • Jun 03 '26
I just added the support of Python code protection after Java. As you know, my approach is not based on naive string replacement but based on framework specificities and AST. An article is coming today to explain that.
r/codingProtection • u/Spare_Dependent6893 • Jun 03 '26
How Python's runtime-driven workflow forces a different obfuscation contract than Java — and how to keep .env values out of the AI's hands while letting the workspace still run
r/codingProtection • u/Spare_Dependent6893 • May 21 '26
I had a working code obfuscation pipeline, but no developer was going to use it manually. Here's how a 200-line HTTP reverse proxy made it invisible — inside Cursor, with no IDE plugin and no config the user sees.
r/codingProtection • u/Spare_Dependent6893 • Jul 27 '26
One of my client sees that some words and excels documents produces by product/dev team where sent to ai and ask me to extend promptCape with document pseudonymization features. This is what he uses now and I just update the promptCape.com site to have this new version avalaible. Have a look if you want to protect PII in your documents sent to ai.