After 'Black October', dev deploys hourly Grok bot to auto-file PRs on security issues
marclou · x · 2026-11-08
Developer marclou details his post-'Black October' hardening routine: removing nearly all browser extensions, trimming repo dependencies to a strict minimum, and running a Grok bot that scans the internet hourly and files a PR with Telegram alerts when a security issue is detected. Earlier he spent 48 hours rotating passwords, enabling 2FA everywhere, and spawning agents to audit his startups' codebases (OpenAI and Anthropic models refused to help brute-force his own code), ordered YubiKeys, applied to OpenAI's Daybreak program, and had his family do the same. He believes 'Black October was the tip of the iceberg.'
More from coding & agent
- springrod critiques Snowflake's context layer: SQL-only, single account, no recursion — springrod · 2026-11-08
- Cross-Validate With Subagents on Different Models via Vercel AI Gateway — steren · 2026-11-08
- Blog series explains how AI agents know when a task is actually done — PerfectAd4814 · 2026-11-08
- Twombly launches: a shared canvas for collaborative design with AI agents — floguo · 2026-11-08
- Building an art historian agent: which scraping API survives long-term, Tavily or Apify? — raedyohed · 2026-11-08
- GraphRAG vs RAPTOR vs HippoRAG: how to pick a RAG architecture for AI agents — MaryamMiradi · 2026-11-08