Why it matters
A security hardening pass by Fable over a game one engineer had built for 30 years came back clean: cloud hardening done, credentials handled, good vibes all around. Then Snyk ran over the same code and surfaced 241 vulnerabilities the agent never thought to look for. That gap is the center of Steve Yegge's talk, whose
My takeaway: Agentic Security: Permissions, Provenance, and the Agent Supply Chain — Steve Yegge, Gas Town is a threat-intelligence signal. The practical read is to connect the incident back to AI-adjacent software, developer tooling, and automation paths that need ordinary security controls.