Lobster Roll

Stories by Siri_D

Show HN: MCP Security Checklist – security controls for MCP server deployments (checklist.helixar.ai)
Show HN: Unpinched – open-source PinchTab and CDP bridge detector (github.com)
We published a free CLI tool after writing about PinchTab — a browser hijacking technique that abuses Chrome DevTools Protocol to give attackers (or compromised AI agents) silent access to live browser sessions. No malware signature. No process injection. Most EDRs don&#x27;t see it at all.<p>Unp...
Show HN: Sentinel – Open-source MCP security scanner (config, probe, container) (github.com)
sentinel is an open-source CLI + GitHub Action that scans MCP server configurations, live endpoints, and Docker containers for security misconfigurations. It runs 26 detection rules across 3 modules CFG (static config analysis), PRB (live probe), CTR (container inspection) — and outputs in terminal,...