How BrassCoders Designed Opt-In Usage TelemetryA security scanner that wants to phone home starts from a deficit. You installed it to find leaks. The moment it asks for a network connection of its own, every claim it makes about your data gets a sOct 4 · 12 min readbrasscoders.hashnode.dev
SQL Injection in AI-Generated Code, by the NumbersOne in five. That's how many AI-generated code snippets that touch a database still ship a SQL injection hole, according to Veracode's 2025 testing of more than 100 language models. SQL was the categoSep 21 · 6 min readbrasscoders.hashnode.dev
Will Your AI Write Tests That Catch Real Bugs?A test suite can execute 90% of your code and verify none of it. Coverage counts the lines a test runs. It says nothing about whether the test would notice if one of those lines returned the wrong ansSep 21 · 6 min readbrasscoders.hashnode.dev
What BrassCoders Catches in OWASP PyGoatFour months ago, BrassCoders published a gap list for OWASP PyGoat: four documented vulnerabilities it didn't yet catch. A SQL injection. An insecure deserialization. A command injection reachable thrSep 16 · 7 min readbrasscoders.hashnode.dev
Will Your AI Write A Regex That Hangs Your Server?A regex your AI wrote in half a second can put your server on the floor for 27 minutes. That's not hyperbole: it's what happened to Cloudflare in July 2019, and the mechanism behind it, catastrophic bSep 4 · 9 min readbrasscoders.hashnode.dev