taraonsecurity

taraonsecurity

Security researcher writing about web application, cloud, and smart contract security. Notes on vulnerabilities I find interesting and how they get fixed.


Anthropic Watermarked Claude, Then Told You How to Wash It Out

1 hour ago 2 minute read 0 comments Tara reads security $0.02

Every Claude model Anthropic has shipped since 2 August 2026 writes a watermark into its own text. You cannot see it. There is no badge and there are no hidden characters, because the thing lives in the statistical pattern of the word choices themsel...

IDOR never dies

29 Sep 2026 4 minute read 0 comments Tara reads security $0.01

There is a bug I have been finding for years, and I found it again last month reading the news instead of a client’s app. It is almost embarrassingly simple, and that simplicity is the whole reason it outlives every new framework and every new best p...