radku

Canary token is great to tell you've been hacked.

There are ways to try to prevent this from happening in a first place. I wrote kow (keys-on-the-wire) to fix this. Apps only see placeholder tokens. The proxy injects real key from the vault into outbound requests for allowed hosts.

Author here. Apache-2.0. [1] https://keysonthewire.com [2] https://github.com/inflightsec/keys-on-the-wire

Why such a dislike towards DHH? More people using Linux surely is a good thing.

Can't agree more. I'm working on OSS security tool that can protect you from Shai-hulud, no half measures.

The idea is to have a local proxy that injects real secrets into requests in-flight, so a compromised library has nothing to steal because it never had access to any of your secrets: https://github.com/inflightsec/agent-vault-proxy

I almost got a heart attack seeing a bill for 48B USD!

I've built a voice app for controlling Claude code / Codex sessions and having a lot of fun with it.

I can start a remote tmux session from my laptop, close the lid, grab my airpods and continue on the same sessions while in a gym or a bicycle.

Planning to open source it soon.

I have pretty much almost this exact setup with 2x3090s and with slightly faster DDR4 512GB and 64 core Epyc! [0] I've been enjoying it a lot. Can't wait to give this model a try.

Apart of running local models I use this rig as my main remote development platform. All Claude Code sessions are running there in tmux now. And my fingers can't be happier not having to deal with constantly hot laptop. Not to mention that Claude Code is such a battery hog.

[0] https://medium.com/@rathko/i-built-an-epyc-64-core-512gb-ram...

Congrats on the launch!

Will this solution work with services protected by cloudflare turnstile or captchas? Does this involve human in a loop?

No privacy policy whatsoever?

I'm working on OSS security tool that can protect you form credential stealers (think Shai-hulud and similar) or prompt-injected agent leaking your secrets.

agent-vault-proxy is a local proxy that injects real secrets into requests in-flight, so a compromised or prompt-injected agent has nothing to steal, feedback welcome: https://github.com/inflightsec/agent-vault-proxy

Nice work shipping this.

Disclosure: author of a related tool here. I have create agent-vault-proxy for a very similar reason. It also can help keep credentials out of the agent process. The agent gets a placeholder, the proxy swaps in the real secret in transit.

I read them as complementary: action firewall in front, credential broker behind. https://github.com/inflightsec/agent-vault-proxy

AI is actually pretty good at finding vulnerabilities in the codebase.

Critical vulnerability in that source code could enable further access to other production systems or databases.

Edit: typo

Hope ask.com knowledge can be preserved in open source LLMs for future generations.

This could significantly impact security of large parts of web ecosystem.

Perhaps Node.js can switch to a VDP, no-bounty program. From Hacker One: "VDP is designed solely for receiving, validating, and addressing security reports without a paid bounty element"

Agreed. Personally I think about it as massaging a text with LLM is like applying filters to your pictures.

The text probably have been based entirely on the internal notes and investigations and is very informative. Would it be better if the OP wrote it entirely by themselves? Not necessarily.

Hammerspoon helped me have a F12 shortcut for Ghostty (the only feature I missed from guake on mac)! I love it

It's curious how many comments any topic involving Russia influence gets on HN. Lots of Russian trolls out and about.

I keep my fingers crossed for Arch and Valve cooperation: https://lists.archlinux.org/archives/list/arch-dev-public@li...

Would using VPN prevent prying eyes from detecting the IP address? This issue seems to be related only to Tor users who do not use VPN?

Legendary Iain M. Banks is a true classic now.

For some hard sci-fi I do highly recommend Neal Asher, which reminds me of Banks universe.

And a classic "We are Bob" by Dennis Taylor, which is a very easy way to introduce anyone to sci-fi.

It's a troll who ignores the mass graves, the rapes, the killing of civilians. How sick do you have to be to look for "winks" here.

You are right. Clearly Russians are enemies here.