DEV Community

CopperSunDev profile picture

CopperSunDev

Engineering notes on AI code safety, static analysis, and what scanners can and can't catch.

Location Redwood City Joined Joined on  Personal website https://coppersun.dev/ github website
Is AI Transcription Safe? Security & Privacy Guide
coppersundev profile

Is AI Transcription Safe? Security & Privacy Guide

#aitranscription #audiotranscription #transcriptiontroubleshooting
Comments
8 min read

Want to connect with CopperSunDev?

Create an account to connect with CopperSunDev. You can also sign in below to proceed if you already have an account.

Create Account
Already have an account? Sign in
Site Migration SEO Checklist: Save Your Traffic
coppersundev profile

Site Migration SEO Checklist: Save Your Traffic

#seo
Comments
7 min read
SQL Injection in AI-Generated Code, by the Numbers
coppersundev profile

SQL Injection in AI-Generated Code, by the Numbers

#security #benchmarking
Comments
5 min read
Will Your AI Write Tests That Catch Real Bugs?
coppersundev profile

Will Your AI Write Tests That Catch Real Bugs?

#ai #engineering
Comments
5 min read
What BrassCoders Catches in OWASP PyGoat
coppersundev profile

What BrassCoders Catches in OWASP PyGoat

#security #benchmarking
Comments
6 min read
Will Your AI Write A Regex That Hangs Your Server?
coppersundev profile

Will Your AI Write A Regex That Hangs Your Server?

#security #engineering
Comments
7 min read
IDOR and Access Control in AI APIs, by the Numbers
coppersundev profile

IDOR and Access Control in AI APIs, by the Numbers

#security #benchmarking
Comments
7 min read
The CVE Record on Insecure Deserialization in AI Python Code
coppersundev profile

The CVE Record on Insecure Deserialization in AI Python Code

#security #engineering
Comments
7 min read
AI Code License Risk From Training-Data Memorization
coppersundev profile

AI Code License Risk From Training-Data Memorization

#privacy #engineering
Comments
7 min read
Why AI Transcription Is Affordable Now
coppersundev profile

Why AI Transcription Is Affordable Now

#aitranscription #transcriptionaccuracy #transcribeaudiototext
Comments
6 min read
How AI Adds Punctuation to Transcripts
coppersundev profile

How AI Adds Punctuation to Transcripts

#transcriptformats #transcriptionaccuracy #aitranscription
Comments
6 min read
How Speech Quality Is Measured for Transcription
coppersundev profile

How Speech Quality Is Measured for Transcription

#audioqualitytips #transcriptionaccuracy #aitranscription
Comments
7 min read
Run BrassCoders Automatically in a Claude Code Hook
coppersundev profile

Run BrassCoders Automatically in a Claude Code Hook

#ai #workflow #opensource
Comments
5 min read
LLM Code Reviewer Reliability, by the Numbers
coppersundev profile

LLM Code Reviewer Reliability, by the Numbers

#ai #benchmarking #engineering
Comments
6 min read
Scan, Patch, Re-Scan: Verifying AI Bug Fixes
coppersundev profile

Scan, Patch, Re-Scan: Verifying AI Bug Fixes

#ai #opensource #engineering
Comments
5 min read
AI Package Hallucination Rate: 96 Names Checked On PyPI
coppersundev profile

AI Package Hallucination Rate: 96 Names Checked On PyPI

#security #benchmarking #hallucination #supplychain
Comments
7 min read
AI Code Defect Rates: The Q3 2026 Data Report
coppersundev profile

AI Code Defect Rates: The Q3 2026 Data Report

#benchmarking #security #ai
Comments
6 min read
How to Run BrassCoders on Every Commit (and Why It Isn't Automatic)
coppersundev profile

How to Run BrassCoders on Every Commit (and Why It Isn't Automatic)

#opensource #cicd #ai
Comments
4 min read
Command Injection in AI-Generated Express.js: A Real Scan
coppersundev profile

Command Injection in AI-Generated Express.js: A Real Scan

#security #ai #engineering
Comments
5 min read
AI Coding Tool Security Risk for Engineering Leaders
coppersundev profile

AI Coding Tool Security Risk for Engineering Leaders

#security #ai #engineering
Comments
7 min read
Tuning .brassignore: Suppressing a False Positive in Three Steps
coppersundev profile

Tuning .brassignore: Suppressing a False Positive in Three Steps

#opensource #ai #engineering
Comments
5 min read
From HIGH to Clean: Removing a Hardcoded HMAC Key in AI-Generated Python
coppersundev profile

From HIGH to Clean: Removing a Hardcoded HMAC Key in AI-Generated Python

#security #ai #opensource
Comments
5 min read
From SQL Injection to Clean: Fixing a B608 Finding in AI-Generated Flask Code
coppersundev profile

From SQL Injection to Clean: Fixing a B608 Finding in AI-Generated Flask Code

#security #ai #opensource
Comments
6 min read
What Static Analysis Cannot See: A Complete Map of the Limit
coppersundev profile

What Static Analysis Cannot See: A Complete Map of the Limit

#opensource #ai #security
Comments
10 min read
How to Run Your First BrassCoders Scan on AI-Generated Python
coppersundev profile

How to Run Your First BrassCoders Scan on AI-Generated Python

#opensource #engineering
Comments
2 min read
What's the Cost of a SQL Injection in AI-Generated Code?
coppersundev profile

What's the Cost of a SQL Injection in AI-Generated Code?

#security #engineering
Comments
2 min read
Can BrassCoders Catch Race Conditions in Async Python?
coppersundev profile

Can BrassCoders Catch Race Conditions in Async Python?

#engineering #ai
Comments
2 min read
Does BrassCoders Scan Node.js and TypeScript Code?
coppersundev profile

Does BrassCoders Scan Node.js and TypeScript Code?

#opensource #engineering
Comments
2 min read
AI Coding Assistant Vendor Risk: What Your Security Team Should Ask
coppersundev profile

AI Coding Assistant Vendor Risk: What Your Security Team Should Ask

#security #compliance #engineering
Comments
6 min read
The Trust Boundary Problem in AI-Generated Code
coppersundev profile

The Trust Boundary Problem in AI-Generated Code

#security #ai #engineering
Comments
5 min read
Business Logic Bugs Static Analysis Will Never Catch
coppersundev profile

Business Logic Bugs Static Analysis Will Never Catch

#security #ai #engineering
Comments
5 min read
What to Ask a Static Analysis Vendor When Your Team Uses AI Code
coppersundev profile

What to Ask a Static Analysis Vendor When Your Team Uses AI Code

#security #ai #engineering
Comments
4 min read
The Security Manager's Brief on AI-Generated Code Risk
coppersundev profile

The Security Manager's Brief on AI-Generated Code Risk

#security #ai #engineering
Comments
3 min read
Quantifying AI Code Risk: A Framework for Engineering Leaders
coppersundev profile

Quantifying AI Code Risk: A Framework for Engineering Leaders

#ai #security #engineering
Comments
4 min read
Building the Business Case for AI Code Scanning
coppersundev profile

Building the Business Case for AI Code Scanning

#ai #security #engineering
Comments
3 min read
What Python Versions Does BrassCoders Support?
coppersundev profile

What Python Versions Does BrassCoders Support?

#opensource #engineering
Comments
2 min read
What's the Difference Between .brassignore and .gitignore?
coppersundev profile

What's the Difference Between .brassignore and .gitignore?

#opensource #engineering
Comments
2 min read
What Does a BrassCoders Scan Output Look Like?
coppersundev profile

What Does a BrassCoders Scan Output Look Like?

#opensource #ai
Comments
2 min read
How Long Does a BrassCoders Scan Take?
coppersundev profile

How Long Does a BrassCoders Scan Take?

#opensource #engineering
Comments
2 min read
How Do I Read .brass/ai_instructions.yaml?
coppersundev profile

How Do I Read .brass/ai_instructions.yaml?

#opensource #ai
Comments
2 min read
Does BrassCoders Work With pyproject.toml?
coppersundev profile

Does BrassCoders Work With pyproject.toml?

#opensource #engineering
Comments
2 min read
Does BrassCoders Work With Django REST Framework?
coppersundev profile

Does BrassCoders Work With Django REST Framework?

#opensource #security
Comments
2 min read
Can I Run BrassCoders Offline? Yes — Here's How
coppersundev profile

Can I Run BrassCoders Offline? Yes — Here's How

#opensource #engineering
Comments
2 min read
What AI Coding Agents Leave Behind in Production
coppersundev profile

What AI Coding Agents Leave Behind in Production

#security #ai #engineering
Comments
4 min read
Your README Is an Attack Surface for AI Agents
coppersundev profile

Your README Is an Attack Surface for AI Agents

#security #ai #engineering
Comments
4 min read
Pydantic v2 Validation Bugs AI Assistants Write
coppersundev profile

Pydantic v2 Validation Bugs AI Assistants Write

#security #ai #engineering
Comments
4 min read
OWASP Agentic Top 10 for Python Developers
coppersundev profile

OWASP Agentic Top 10 for Python Developers

#security #ai #engineering
Comments
5 min read
MCP Tool Poisoning: What Static Scanners Miss
coppersundev profile

MCP Tool Poisoning: What Static Scanners Miss

#security #ai #engineering
Comments
4 min read
Coverage Theater: AI Tests That Don't Test Anything
coppersundev profile

Coverage Theater: AI Tests That Don't Test Anything

#engineering #ai #opensource
Comments
4 min read
AI Type Hints That Fool mypy and Break at Runtime
coppersundev profile

AI Type Hints That Fool mypy and Break at Runtime

#engineering #ai #opensource
Comments
4 min read
AI-Generated requirements.txt and Vulnerable Packages
coppersundev profile

AI-Generated requirements.txt and Vulnerable Packages

#security #ai #engineering
Comments
4 min read
AI-Generated Migrations: The Data Loss Pattern
coppersundev profile

AI-Generated Migrations: The Data Loss Pattern

#engineering #ai #opensource
Comments
4 min read
Why AI Code Breaks in Production: The Happy-Path Bias
coppersundev profile

Why AI Code Breaks in Production: The Happy-Path Bias

#engineering #ai #opensource
Comments
4 min read
Ruff Won't Catch Security Bugs Unless You Ask It To
coppersundev profile

Ruff Won't Catch Security Bugs Unless You Ask It To

#comparison #security #opensource
Comments
5 min read
AI Code Security Scanners: Who Fills Which Role
coppersundev profile

AI Code Security Scanners: Who Fills Which Role

#comparison #security #ai
Comments
10 min read
What AI Recommends to Catch AI's Own Bugs
coppersundev profile

What AI Recommends to Catch AI's Own Bugs

#ai #engineering #benchmarking
Comments
3 min read
The Authorization Bug No Scanner Understands
coppersundev profile

The Authorization Bug No Scanner Understands

#security #ai
Comments
4 min read
Every AI Code Review Blind Spot Is the Same One
coppersundev profile

Every AI Code Review Blind Spot Is the Same One

#ai #security #engineering
Comments
4 min read
Brass-SEO's Case Study on Our Boundary Content
coppersundev profile

Brass-SEO's Case Study on Our Boundary Content

#engineering
Comments
1 min read
The Slow Code No Scanner Can Flag
coppersundev profile

The Slow Code No Scanner Can Flag

#engineering #ai #benchmarking
Comments
3 min read
loading...