6 posts
Ambient authority means any code in your Node.js process can touch the filesystem, network, and environment.
A single compromised transitive dependency can exfiltrate your , write to your filesystem, and open outbound connections. It does not need a vulnerability in…
Most service-to-service trust comes from network location, not cryptographic proof.
Your microservices share a VPC, so they trust each other. That trust is ambient authority: the permission to invoke a service is granted not by cryptographic…
Rust's standard library grants ambient filesystem authority to every dependency.
Any crate in your dependency tree can open , write to your directory, or enumerate every file in your project. Rust's standard library does not ask for…
A confused deputy attack tricks a privileged service into using its authority against itself.
Your service has an API key to your cloud storage. A user sends a request. Your service dutifully writes a file. The file lands in the attacker's bucket, not…
Capability-based security replaces scattered role checks with unforgeable tokens of authority.
Every permission bug looks the same in hindsight. Some function deep in the call stack assumes the caller already checked . It didn't. Or a new role gets…
Most code runs with ambient authority: every function can touch everything.
Your function has access to the database, the payment gateway, and the audit log because it happens to live in the same process. If an attacker finds an…