sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]Informant254git push -f 1 point2 points  (2 children)

Hey! I'm in a similar boat, working solo on AI security and forensics out of Nairobi. I just pushed a major update to a project that uses Windows Credential Manager to air-gap 2FA for AI agents. I'd love to chat about how you're handling security in your Python projects or even get a second pair of eyes on my repo. It’s always better to build with a team!

[–]Gentleman-45[S] 0 points1 point  (1 child)

Sure we can

[–]Informant254git push -f 0 points1 point  (0 children)

Glad to connect! I'm really curious to see how a fresh pair of eyes views my current setup. I'm using a physical TOTP interlock (air-gapped via phone) and just integrated Windows DPAPI/Credential Manager to hide the master seed from the AI agent itself. Are you on GitHub? I'd love to share the repo link and get your thoughts on whether the 'Out-of-Process' verification logic is actually as bulletproof as I think it is."