Technical

The full technical treatment of Attack the Glass: the architecture that produces it, the surface it covers, the mechanism, the confirmed record, and the limits of existing defenses.

Attack the Glass: Technical Whitepaper

v2.4.7 · 16 chapters in 5 partsabout five hours

Attack the Glass (ATG) is a type of supply chain injection vulnerability that targets client-side rendering. This whitepaper sets out the architecture that produces it, the surface it covers, the mechanism by which it is exploited, the confirmed historical record, and the limits of existing defenses.

Start reading

Attack the Glass (ATG): Technical Primer

v2.4.7 · 22 sectionsa thirty minute read

A journalist checking a source document, a grid operator reading a control display, and a finance officer approving a transfer all make decisions based on what a screen shows them. None of them can check whether the screen is showing what the system actually sent.

Start reading

AI severity scoring

Five AI models · sixteen threats · eleven questions

Five leading AI models, each from a different company, scored Attack the Glass against fifteen well-known security threats, with every threat described to them the same way. ATG came first of sixteen on how hard a threat is to live with, and the five models disagreed about it more than about anything else on the board. The result, the five charts behind it, and what the numbers do not show.

See the scoring