The Boring AppSec Podcast

Ep 35: Exploring Security After Determinism with Jens Ernstberger


Listen Later

In this episode, we sit down with Jens to explore why AI agents fundamentally break traditional security assumptions, from API keys and browser sessions to composability and access control.

Drawing parallels to DeFi exploits and smart contract failures, he explains why agent identity, short-lived delegated authorization, and zero trust aren’t optional add-ons, but the foundation for safely running autonomous systems.

We also dive into context compression as both a performance and security challenge, the real difference between MCP and skills, and a future where humans may stop reviewing code altogether. As agents become the primary actors on the internet, even writing itself begins to change in an AI-scraped world.

If agents are non-deterministic by design, the real question becomes: where do we reintroduce determinism?


Tune in for a deep dive!


Connect with Jens Ernstberger:

Website: https://ernstberger.xyz/

LinkedIn: https://www.linkedin.com/in/jens-ernstberger-phd-96b0ba14a/
Connect with Anshuman:

LinkedIn: ⁠⁠⁠⁠⁠⁠anshumanbhartiya⁠⁠

X: ⁠⁠⁠⁠⁠⁠https://x.com/anshuman_bh⁠⁠

Website: ⁠⁠⁠⁠⁠⁠https://anshumanbhartiya.com/⁠⁠

⁠⁠⁠⁠Instagram: ⁠⁠anshuman.bhartiya⁠

⁠⁠⁠Connect with Sandesh:

LinkedIn: ⁠⁠⁠⁠⁠⁠anandsandesh⁠⁠

X: ⁠⁠⁠⁠⁠⁠https://x.com/JubbaOnJeans

...more
View all episodesView all episodes
Download on the App Store

The Boring AppSec PodcastBy The Boring AppSec Podcast