Blog / Category
Security
4 posts in this category.
-
Protecting your LLM API keys in WordPress 7.0: a defense-in-depth checklist
Read post →A small thread went around X today. Brian Coords kicked it off: Can someone explain the FUD around WordPress storing AI API keys to me? How is this different than storing Stripe or other API keys? Genuine question. Patrick Gallagher agreed: This current panic is really really daft. Stripe, PayPal, email marketing, Hubspot, shipping, analytics… all of […]
-
Snippet plugins are the wrong home for AI-generated code
Read post →Snippet plugins are useful. I have used them for years. If you know exactly what code you are adding, understand the hook it runs on, and want a quick way to avoid creating a tiny plugin, a snippet manager is a perfectly reasonable tool. AI-generated code changes the risk profile. The problem is not that […]
-
Permission buckets: the install dialog that doesn’t lie
Read post →An app’s manifest can list a dozen technically-precise permission strings. The site owner installing it doesn’t read those. Here’s how DSGo Apps groups them into seven plain-English buckets, and the design choices behind the grouping.
-
Why We Run Apps in a Sandbox
Read post →If you’re going to let an AI write code that lives on your WordPress site, you should know exactly what that code can and can’t do. “Trust me, the model’s pretty good these days” is not an answer. DesignSetGo Apps was designed around a simple principle: a misbehaving app should crash itself, not your site. Here’s how […]