Auditing an LLM Gateway for Auth Bypass, API-Key Exposure, and Tenant Leaks
pr0h0•
llm-gatewayappsecauth-bypassapi-securitymulti-tenancy
From a senior to future senior Hackers
Latest Posts
View all posts →
Auditing Cloud-Hosted AI Agents for Runaway Egress and Quota Abuse
pr0h0•
ai-agentscloud-securityauditingegress-controlsquota-enforcement
Using Eval Gates to Decide When a Cheap Open-Weight Model Is Good Enough for an Agent Task
pr0h0•
ai-agentsllm-evaluationinference-costsopen-weight-modelsevals
Latest Videos
View all videos →
Using Eval Gates to Decide When a Cheap Open-Weight Model Is Good Enough for an Agent Task
A practical guide to building eval gates that let you swap in cheap open-weight models like DeepSeek, Kimi, and GLM for agent tasks only when task-level accuracy, tool-call reliability, and cost-per-success metrics clear a defined threshold, set against the AI token economy's first deflationary shock and widening Western-versus-Chinese inference pricing gaps.
ai-agentsllm-evaluationinference-costs
Auditing an LLM Gateway for Auth Bypass, API-Key Exposure, and Tenant Leaks
A hands-on audit walkthrough of a widely used LLM gateway's high-risk flaws—auth bypass, API-key exposure, and cross-tenant data leaks—set against fresh reports of AI-driven ransomware and AI agents breaching production systems.
llm-gatewayappsecauth-bypass
Why Single-Provider AI Clients Break Under Load and How to Route Around Them
After back-to-back AI outages — DeepSeek refunding users for its second disruption in three days and Yandex restoring most services following a major failure — this post breaks down why single-provider AI clients buckle under load and walks through concrete multi-provider routing, queueing, idempotency, and graceful-degradation patterns.
ai-apisreliabilitymulti-provider-routing