First screen, captured .
Looks similar
Google API keys weren't secrets, but then Gemini changed the rules(trufflesecurity.com)
1206 points by hiisthisthingon | 288 comments
Truffle Security blog post explaining that public Google API keys, long deemed non-secret, can now access Gemini and private data, based on scans of exposed keys.
Related stories
I hacked my washing machine(nexy.blog)
334 points by JadedBlueEyes | 144 comments
Blog post describing how the author and a friend reverse engineered a Wi-Fi smart washing machine's API and encryption to build a notification script.
Anthropic’s paper smells like bullshit(djnn.sh)
1070 points by vxvxvx | 300 comments
Blog post criticizing Anthropic's report on disrupting an AI-orchestrated cyber espionage campaign; the captured page shows a Cloudflare block screen.
FBI raids home of prominent computer scientist who has gone incommunicado(arstechnica.com)
825 points by JaimeThompson | 332 comments
Ars Technica article reporting that the FBI raided the home of an Indiana University computer scientist whose profile was quietly removed and who has gone silent.
Open source security at Astral(astral.sh)
344 points by vinhnx | 95 comments
Astral blog post by William Woodruff describing the techniques Astral uses to secure its open source tools and their build, test, and release processes against supply chain attacks.
What AI-Native Looks Like(fagnerbrack.com)
14 points by fagnerbrack | 7 comments
A blog post by Fagner Brack on Medium describing what an AI-native approach to software development with stable infrastructure looks like.
What a Hacker Stole from Me(mynoise.net)
355 points by wonger_ | 106 comments
A myNoise blog post by founder Stéphane describing a hacker's attack on the myNoise website, first via code-injection attempts and then a different strategy.