1Password CEO: breaches are inevitable, blast radius is a choice
iamaliveix · x · 2026-11-10
1Password's CEO argues that nearly every breach postmortem ends the same way: one stolen credential could reach far more than it should. The real question isn't just how attackers got in, but why one leaked credential unlocked so much.
His thesis: every standing credential in your environment — a never-expiring API key, a token in a config file, an agent with persistent access — is pre-authorized damage. The fix is shrinking blast radius: secure exposed credentials and grant every identity, human or agent, only the access it truly needs.
More from Safety
- Bengio-led team releases 182-page mechanistic interpretability survey, tops alphaXiv — burny_tech · 2026-11-10
- 'Anthropic GPU Firmware Lock' Claim Goes Viral — It's From a Satirical Account — TheZachMueller · 2026-11-10
- Guidelight's Control standard calls for semi-synchronous blocking monitors on frontier lab agents — j_asminewang · 2026-11-10
- Anthropic caps GPU kernel optimization in Fable 5.2 training as a safeguard — community asks: pre or post nerf? — WolframRvnwlf · 2026-11-10
- Free MCP server vulnerable.now merges CVE data from 8 sources, no API key — Mistilziela · 2026-11-10
- Debate: can AI agents be kept safe from hidden instructions on websites? — neil_chilson · 2026-11-10