AI & Agent Security1 September 2026
OpenAI's ChatGPT Desktop App Quietly Bundles LibreOffice, Poppler, Git
A researcher poking through his cache folder found the ChatGPT desktop app (formerly Codex) vendoring 1.7GB of Python, Node.js, LibreOffice and Poppler — a reminder that agentic AI tools carry their own hidden supply chain.
ai-agentssupply-chain-securityattack-surface
4 min readRead
DevSecOps & Infrastructure14 July 2026
Lobste.rs moves to SQLite: a lesson in shrinking your attack surface
The tech-news community site Lobsters has retired MariaDB in favour of SQLite after an eight-year migration effort — a small architectural decision with a useful security lesson about trading network attack surface for single-host risk.
devsecopsattack-surfacearchitecture
4 min readRead