Friday Hacks #305, November 6: Coding with AI and Keeping Secrets from Your AI Agent
Posted on by ZhengHao
Date/Time: Friday, November 6 from 7:00pm to 9:00pm SGT
Venue: Seminar Room 12, COM3-01-21, NUS
Sign-up: Luma
Food 🍕 and Drinks 🧋 will be served!
1) Coding with AI: Changes and Constants
Writing code is now nearly free. Knowing it is right is not. In 2015, dozens of volunteers spent years translating You-Dont-Need-jQuery into fifteen languages; this year, an AI agent synced thirteen of them in one day and surfaced sixteen bugs that thousands of people had copied. This talk covers what has really changed in how software gets built, the practices that hold up, and what still depends on you.
Speaker Profile 🎙️
Shaoyin Song is an Engineering Manager at TikTok in Singapore and previously worked at Alibaba. In 2015, he created You-Dont-Need-jQuery, which has grown to over 20,000 GitHub stars with more than 100 contributors across 16 languages.
2) Keeping Secrets from Your AI Agent: How to Protect Your Credentials
AI agents make coding much faster, but they can also read the API keys and tokens in your .env files, environment variables, and configuration files, and send them to model providers along with your code. This talk covers where your credentials live, how they leak, and how their protection has evolved, then shares simple habits so your agent can do its job without ever holding your real credentials.
Speaker Profile 🎙️
He Li (moonD4rk) is a security researcher in Singapore who works on cloud infrastructure and DevSecOps. He created HackBrowserData, an open-source browser forensics tool with over 14,000 GitHub stars. His research focuses on how browsers, crypto wallets, and now AI agents handle secrets. He spoke at DEF CON Singapore 2026 and will present at Black Hat Europe 2026 Arsenal.
👋 See you there!