Hardening an Edge AI Platform: What a Real Security Release Looks Like (NeoMind v0.9.21)

说明与用途

NeoMind v0.9.21 展示了全面的安全硬化：管理员仅注册、秘密加密、路径验证、包校验、会话吊销、特权安全升级、验证备份和可观测性。

问题

Edge AI platforms expose a wide attack surface: open registration, plaintext secrets, path traversal, unverified packages, weak credential lifecycle, privilege escalation during upgrades, and inadequate data safety.

结果

NeoMind v0.9.21 demonstrates a comprehensive security hardening process, addressing registration, secrets, path traversal, supply chain, credential lifecycle, upgrade privilege, data safety, and observability, resulting in a more secure edge AI platform.

工作流

• Audit registration endpoints for open access
• Implement admin‑only registration with persisted setting
• Seal all secrets at rest using shared encryption key
• Add path‑join validation: reject dot‑segments, absolute paths, canonicalize and check containment
• Verify marketplace package checksums and enforce strict mode
• Revoke sessions on password change or user deletion
• Mask instance keys in API responses
• Stage upgrades in data/upgrade/ and trigger root apply via systemd path unit
• Add verified backup routine with manifest and retention
• Implement rollback guard by version‑stamping databases
• Expose Prometheus metrics for observability

证据

POST /api/auth/register was a public, unconditionally‑open account‑creation endpoint

来源

LLM provider API keys were stored as plaintext JSON in settings.redb

来源

The API runs as the sandboxed neomind user (ProtectSystem=full + NoNewPrivileges=true)

来源