The UnboundCompute blog
Writing on web security
-
Firebase Security Rules Misconfiguration: When Any Client Reads Everyone’s Data
A Firebase security rules misconfiguration lets any client read or write data that is not theirs. Learn the failure shapes, how to…
-
Prompt Injection in Shared Documents: The Wiki and Ticket Attack
Prompt injection in shared documents lets anyone who edits a wiki page or files a ticket plant orders your assistant reads later.…
-
LLM Search Result Poisoning: When a Planted Page Writes the Answer
LLM search result poisoning turns a planted public page into an assistant’s answer, or into an instruction it obeys. How it works…
-
Voice Prompt Injection: When a Speaker in the Room Gives the Orders
Voice prompt injection slips spoken instructions into an assistant through audio, because a transcript never records who actually said the words.
-
PDF Prompt Injection: Hidden Instructions in Documents Your Assistant Reads
PDF prompt injection hides instructions a reader never sees but a text extractor hands straight to the model. Where they hide and…
-
Prompt Injection in Source Code: When a Comment Commands Your Coding Agent
Prompt injection in source code hides instructions in comments, READMEs and dependencies that your coding agent obeys. How it works and how…
-
Browser Agent Prompt Injection: When a Web Page Drives Your Logged In Agent
Browser agent prompt injection turns a hostile page into actions taken under your live session. See where the text hides and how…
-
Zero Click Prompt Injection: The Attack With No Click To Stop
Zero click prompt injection fires when a message arrives, with no user action at all. See how agents ingest it, where the…
-
Client Side Paywall Bypass: When Only the Browser Guards Paid Content
A client side paywall bypass means only browser code guards paid content. See the four shapes it takes, why scanners miss it,…
-
Supabase RLS Misconfiguration: When Your Anon Key Reads Every Row
A Supabase RLS misconfiguration turns a public anon key into a key to every row. Learn the four failure shapes, how to…