🌍 Dev.to

Federated Threat Intelligence: Sharing IOCs Without Sharing Content

The fundamental problem in threat intelligence is latency. Organization A detects a novel prompt injection. Organizations B, C, and D won't see it until someone writes a blog post, a vendor updates a signature, and a SIEM rule gets deployed. In AI security, that latency window is measured in hours — and attacks iterate faster than that. I've been building AegisGate — an open-source AI security platform — and we just shipped a federated threat intelligence system that closes that gap. This p...
🌍 Dev.to

My restart wiped every short link I'd handed out — a URL is a promise, not a cache entry

I run a Short Link Creator API — agents paste long URLs into their plans and get a tidy freeq.one link back. The first version was embarrassing. I built the slug-to-target map inside the agent runtime: in-memory dict, one JSON file flushed every few minutes if I remembered. It worked fine for about two weeks. Then I redeployed and the map came back empty. Every link I'd ever handed out started 404ing — links embedded in other agents' task notes, in a human's bookmarks, in three or four liv...
🌍 Dev.to

The September 2026 KEV wave as an operations dataset, not a news cycle

The September 2026 KEV wave as an operations dataset, not a news cycle A single exploited vulnerability is an incident. Eleven additions to the CISA Known Exploited Vulnerabilities catalog inside one week is a pattern, and the pattern is more useful than any individual entry. Reading the late September 2026 batch together shows where attackers concentrate effort and where defender effort is spent badly. What the batch contains The late September additions include edge remote-...
🌍 Dev.to

Your AI agent doesn't need fewer permissions. It needs a mission.

If you've been on dev Twitter or Hacker News this month, you've seen the stories. An agent asked to clean up a folder deletes tens of thousands of files. A coding agent launches hundreds of parallel runs nobody asked for and burns through a five-figure bill. Someone's OpenClaw setup emails their clients without approval. Someone else writes "never touch production" in CLAUDE.md, and the agent reads every secret in the .env anyway. None of these agents were "hacked" in the movie sense. They ...
The SI Wealth Transfer Is Becoming the Largest Rug Pull in History.
🌍 Dev.to

The SI Wealth Transfer Is Becoming the Largest Rug Pull in History.

We are involved in this machine; don’t get upset by this message. Look at what you can do to make things more “evenly distributed”. The most important question about superintelligence is no longer simply whether the technology works. The deeper question is who will own the infrastructure, who will control access to it, who will receive the wealth it creates, and what happens to the people whose work makes the system valuable. SI is often described as an open revolution. Models are rel...
🌍 Dev.to

Polling SMS OTP Delivery Status Without Webhooks (A Clinical Report Gate)

The page says SMS OTP delivery is failing. On-call opens the alert and sees a rise in codes that users requested but never verified, while a patient is waiting to complete login and receive a generated clinical report by email. Polling delivery status without webhooks looks like the direct response, but polling every message until a terminal state is the wrong default. TL;DR: a pull-only SMS service can support login 2FA, but delivery polling should be bounded operational evidence, not the cl...
HackerNews

Tell HN: GitHub refuses to remove cracked copies of my software after a month

I am a developer of https://www.photopea.com, a popular photo editor that runs in a web browser. Many people are asking AI models to take the Javascript code from my website, remove all ads from it, and they publish such a "new product" on Github for everyone to download. There exist tens of such repositories on Github. I want my website to be the only source of a stable version of my program Photopea. I even received emails from people complaining about something in Photopea, and it took severa...
HackerNews

Berthd

Article URL: https://berthd.app/ Comments URL: https://news.ycombinator.com/item?id=49982735 Points: 41 # Comments: 62
HackerNews

When random is not actually random enough

Article URL: https://ersc.io/blog/when-random-isnt-random-enough Comments URL: https://news.ycombinator.com/item?id=49983404 Points: 14 # Comments: 3
HackerNews

System-level ad-blocking in Android

Article URL: https://kevinboone.me/adblock.html Comments URL: https://news.ycombinator.com/item?id=49983647 Points: 45 # Comments: 31
HackerNews

Vibecoding Photoshop: Time and pressure

Article URL: https://andreklein.net/vibecoding-photoshop-time-and-pressure/ Comments URL: https://news.ycombinator.com/item?id=49983780 Points: 33 # Comments: 27