Do canary tokens still work in the coding-agent era? Fake AWS keys may lure agents
kuza55 · x · 2026-10-27
Security practitioner kuza55 asks whether Thinkst Canary deployments remain low-noise in the age of coding agents: agents are prone to pulling on random things they encounter — e.g., a fake AWS key planted in /.aws/ has a decent chance of being actually used by Claude, firing the canary alert. This suggests agent behavior may undermine the low-noise assumptions behind canary-based detection.
More from coding & agent
- For OSS apps, proofs of concept — not PRs to one repo — may be the core primitive — dbreunig · 2026-10-27
- Hook everything into the Dot: a workaround to stretch ChatGPT subscription limits — teortaxesTex · 2026-10-27
- Jev launches people-search API for agents at $0.0089/lead, claiming 85% cheaper than Clay — alexcovo_eth · 2026-10-27
- Going through every compound engineering skill to decide where humans stay in the loop — kieranklaassen · 2026-10-27
- UCSB CS Prof. Xifeng Wang lands 3 grants worth $180K+ for practical agentic AI research — xwang_lk · 2026-10-27
- Gen games don't need to be realtime — turn-based interactivity works, devs argue — djcows · 2026-10-27