Tag: headers

  • Hacker News: Show HN: DeepSeek My User Agent

    Source URL: https://www.jasonthorsness.com/20 Source: Hacker News Title: Show HN: DeepSeek My User Agent Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses “DeepSeek R1,” a newly launched model and service that introduces chain-of-thought capabilities to users. It offers functionalities for live interaction and API access, with competitive pricing compared to existing models…

  • Hacker News: Malicious extensions circumvent Google’s remote code ban

    Source URL: https://palant.info/2025/01/20/malicious-extensions-circumvent-googles-remote-code-ban/ Source: Hacker News Title: Malicious extensions circumvent Google’s remote code ban Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses security vulnerabilities related to malicious browser extensions in the Chrome Web Store, focusing on how they can execute remote code and compromise user privacy. It critiques Google’s policies regarding…

  • Hacker News: A New type of web hacking technique: DoubleClickjacking

    Source URL: https://www.paulosyibelo.com/2024/12/doubleclickjacking-what.html Source: Hacker News Title: A New type of web hacking technique: DoubleClickjacking Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text introduces the concept of “DoubleClickjacking,” a sophisticated web vulnerability that builds upon traditional clickjacking techniques by exploiting event timing between double clicks. This novel approach allows attackers to bypass…

  • Hacker News: Nepenthes is a tarpit to catch AI web crawlers

    Source URL: https://zadzmo.org/code/nepenthes/ Source: Hacker News Title: Nepenthes is a tarpit to catch AI web crawlers Feedly Summary: Comments AI Summary and Description: Yes Summary: The text describes “Nepenthes,” a tarpit software devised to trap web crawlers, particularly those scraping data for large language models (LLMs). It offers unique functionalities and deployment setups, with explicit…

  • Simon Willison’s Weblog: OpenAI WebRTC Audio demo

    Source URL: https://simonwillison.net/2024/Dec/17/openai-webrtc/#atom-everything Source: Simon Willison’s Weblog Title: OpenAI WebRTC Audio demo Feedly Summary: OpenAI WebRTC Audio demo OpenAI announced a bunch of API features today, including a brand new WebRTC API for setting up a two-way audio conversation with their models. They tweeted this opaque code example: async function createRealtimeSession(inStream, outEl, token) { const…

  • Simon Willison’s Weblog: ChatGPT Canvas can make API requests now, but it’s complicated

    Source URL: https://simonwillison.net/2024/Dec/10/chatgpt-canvas/#atom-everything Source: Simon Willison’s Weblog Title: ChatGPT Canvas can make API requests now, but it’s complicated Feedly Summary: Today’s 12 Days of OpenAI release concerned ChatGPT Canvas, a new ChatGPT feature that enables ChatGPT to pop open a side panel with a shared editor in it where you can collaborate with ChatGPT on…

  • Hacker News: Show HN: BunkerWeb – The Open-Source Web Application Firewall (WAF)

    Source URL: https://github.com/bunkerity/bunkerweb Source: Hacker News Title: Show HN: BunkerWeb – The Open-Source Web Application Firewall (WAF) Feedly Summary: Comments AI Summary and Description: Yes **Summary:** BunkerWeb is an innovative open-source Web Application Firewall (WAF) designed to provide “security by default” for web services. Its seamless integration with various environments (like Linux and Docker), customizable…

  • The Register: Solana blockchain’s popular web3.js npm package backdoored to steal keys, funds

    Source URL: https://www.theregister.com/2024/12/05/solana_javascript_sdk_compromised/ Source: The Register Title: Solana blockchain’s popular web3.js npm package backdoored to steal keys, funds Feedly Summary: Damage likely limited to those running bots with private key access Malware-poisoned versions of the widely used JavaScript library @solana/web3.js were distributed via the npm package registry, according to an advisory issued Wednesday by project…

  • Cloud Blog: (QR) Coding My Way Out of Here: C2 in Browser Isolation Environments

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/c2-browser-isolation-environments/ Source: Cloud Blog Title: (QR) Coding My Way Out of Here: C2 in Browser Isolation Environments Feedly Summary: Written by: Thibault Van Geluwe de Berlaere Executive Summary Browser isolation is a security technology where web browsing activity is separated from the user’s local device by running the browser in a secure environment,…

  • Simon Willison’s Weblog: Amazon S3 adds new functionality for conditional writes

    Source URL: https://simonwillison.net/2024/Nov/26/s3-conditional-writes/#atom-everything Source: Simon Willison’s Weblog Title: Amazon S3 adds new functionality for conditional writes Feedly Summary: Amazon S3 adds new functionality for conditional writes Amazon S3 can now perform conditional writes that evaluate if an object is unmodified before updating it. This helps you coordinate simultaneous writes to the same object and prevents…