Tanya Janca | Shehackspurple (@shehackspurple) header
Tanya Janca | Shehackspurple (@shehackspurple) profile picture

Secure Coding Trainer, Best-selling author of Alice and Bob Learn Secure Coding & Alice and Bob Learn Application Security. #AppSec she/her 🌻

Canada - West Coast 🍁
Joined June 2017
**Not everything needs to be a damn AI agent.** There. I said it. And I will keep saying it. Warning: hot takes ahead. Recently, I was teaching a secure AI class, and one of my students was telling me about an AI agent they were building. 1/16
8
6
2
54
5,426
#HugOps for the people handling the Microsoft 365 incident. ♥️
13
1,201
Which movie or show has the most realistic hacking scene? WHY???? Yo, do not say ‘one keyboard two idiots’ please! #AppSecThursday #talkAppSectome
5
1
1
661
**Not every damn thing needs to be an AI agent!** There. I said it. 😂 Again. I've been having conversations with people who are building AI agents and worrying about how to secure them. And sometimes I find myself wondering... 1/6
12
2
13
817
I talk about this (and a whole lot more about least privilege and agent permissions) in the latest episode of DevSec Station: 🎧 *What Permissions Should You Give an AI Agent?* Watch on YouTube or stream/download it on your favourite podcast platform. 5/6
1
155
**Telling your AI agent not to do something is NOT the same as preventing it from doing that thing.** Imagine giving an AI coding agent access to your entire filesystem. Then you tell it: "Only modify files inside this project directory." Very clear instructions, right? 1/5
10
2
27
1,547
Question: **How are you restricting your AI coding agents?** Are you using sandboxing, limited tool permissions, approval gates, or something else? This is one of the lessons in the latest DevSec Station episode, *What Permissions Should You Give an AI Agent?* 4/5
2
1
203
Guess who's in the nation's capital this week? 😉🤗💜 #TanyaExplores
2
11
1,027
Do me little favour for my new podcast? 🚂💜 If you like hearing me nerd out about how to build safer software, I’d love it if you subscribed to DevSec Station on YouTube, followed it in your favourite podcast app, or did both? 😊 🙏 Thank YOU! 🎥 youtube.com/@DevSecStation
2
3
8
708
🚨 NEW EPISODE OF DEVSEC STATION! 🚨 **What Permissions Should You Give an AI Agent?** Last episode, I told you about my little 'Hello Queen' application. 1/6
2
2
10
1,021
And one of my favourite questions: Does this even need to be an AI agent in the first place? 🎧 Watch on YouTube or listen on your favourite podcast platform! You can also download the episode wherever you normally get your podcasts. 🔗 twp.ai/E5GoAO 5/6
1
231