Jun 28, 2026 Your dependencies can read your environment variables. JavaScript lets them. Ambient authority means any code in your Node.js process can touch the filesystem, network, and environment. capability-based-securityjavascriptambient-authoritysandboxing
Jun 27, 2026 Network Proximity Is Not Identity: How Services Authenticate Without Ambient Authority Most service-to-service trust comes from network location, not cryptographic proof. capability-based-securityauthenticationzero-trustservices
Jun 26, 2026 Your dependencies can read any file on disk. cap-std makes them ask permission. Rust's standard library grants ambient filesystem authority to every dependency. capability-based-securityrustcap-stdsandboxing
Jun 25, 2026 Your Service Is an Unwitting Accomplice: How Confused Deputy Attacks Work A confused deputy attack tricks a privileged service into using its authority against itself. capability-based-securityconfused-deputysecurityattacks
Jun 24, 2026 Your permission checks are lying to you Capability-based security replaces scattered role checks with unforgeable tokens of authority. capability-based-securitytypescriptpermissionssecurity
Jun 23, 2026 What If Every Function Had to Receive Permission Instead of Assuming It? Most code runs with ambient authority: every function can touch everything. capability-based-securitypermissionssecurityzero-trust
