AI 资讯
Presentation: From OTEL to SLMs: Distilling Frontier Model Behaviour from Production Telemetry
Ben O'Mahony discusses building custom AI-powered Language Server Protocols (LSPs) that go beyond standard rule-based checkers. He explains how to instrument AI agents natively with OpenTelemetry to track concrete user actions (accepting, dismissing, or regenerating code fixes) as implicit labels, creating a continuous data flywheel to distill frontier capabilities into cheaper, local SLMs. By Ben O'Mahony
产品设计
Multi-Primary Color Display Emerges as Next-Gen Color Reproduction Technology
开源项目
🔥 sourcebot-dev / sourcebot - Sourcebot is a self-hosted tool that helps humans and agents
GitHub热门项目 | Sourcebot is a self-hosted tool that helps humans and agents understand your codebase. | Stars: 3,590 | 5 stars today | 语言: TypeScript
开源项目
🔥 fingerprintjs / fingerprintjs - The most advanced free and open-source browser fingerprintin
GitHub热门项目 | The most advanced free and open-source browser fingerprinting library | Stars: 27,868 | 33 stars today | 语言: TypeScript
开源项目
🔥 microsoft / monaco-editor - A browser based code editor
GitHub热门项目 | A browser based code editor | Stars: 46,370 | 10 stars today | 语言: JavaScript
开源项目
🔥 sohzm / cheating-daddy - a free and opensource app that lets you gain an unfair advan
GitHub热门项目 | a free and opensource app that lets you gain an unfair advantage | Stars: 5,473 | 57 stars today | 语言: JavaScript
开源项目
🔥 ROCm / TheRock - The HIP Environment and ROCm Kit - A lightweight open source
GitHub热门项目 | The HIP Environment and ROCm Kit - A lightweight open source build system for HIP and ROCm | Stars: 1,145 | 6 stars today | 语言: Python
开源项目
🔥 android / skills
GitHub热门项目 | | Stars: 6,237 | 17 stars today | 语言: Python
开源项目
🔥 docusealco / docuseal - Open source DocuSign alternative. Create, fill, and sign dig
GitHub热门项目 | Open source DocuSign alternative. Create, fill, and sign digital documents ✍️ | Stars: 17,719 | 152 stars today | 语言: Ruby
开源项目
🔥 protocolbuffers / protobuf - Protocol Buffers - Google's data interchange format
GitHub热门项目 | Protocol Buffers - Google's data interchange format | Stars: 71,510 | 11 stars today | 语言: C++
开源项目
🔥 anthropics / cwc-workshops
GitHub热门项目 | | Stars: 1,499 | 37 stars today | 语言: TypeScript
开源项目
🔥 codecrafters-io / build-your-own-x - Master programming by recreating your favorite technologies
GitHub热门项目 | Master programming by recreating your favorite technologies from scratch. | Stars: 526,862 | 1,070 stars today | 语言: Markdown
开发者
US Corporate Insiders Are Selling Stocks at a Near Record Pace
开发者
Minikotlin
AI 资讯
Do you access a server with username and password? It's a combination padlock facing the street
✍️ This post was written with two hands. The story — the first part — is Murilo's, lived and told by the person who was there. The technical manual , at the end, was written with AI. The split is intentional and marked in the text. Nothing hidden about the seam: part is human, part is machine, and the reader sees both. If you've ever managed or logged into a web server and never set up SSH keys, it's because you don't yet know the real risks of a break-in — and that's okay. Until you find out what can happen. Logging into a server over SSH with a username and password is like locking the front door of a house that faces the street, with nobody keeping watch. Anyone can try as many combinations as they want, freely. And setting this up takes almost as much time as typing a username and password — and it makes getting into the server much faster and easier afterwards. Ignorant of best practices, I managed my servers for a long time by typing: ssh user@server-ip password That nearly cost me dearly, the day I found out my server had been broken into. After that incident, I realized just how vulnerable a username and password are on SSH. Today I can't say I sleep soundly — no system is completely break-in proof — but I sleep a lot better (and honestly, I always slept well, until I started managing servers). Waking up on a fine Sunday morning to do some maintenance on the server, and finding out it was broken into through the front door because you left a combination padlock facing the street — that is not the kind of surprise I'd wish on anyone. I have a degree in Law. I worked for 15 years in the legal field at a public institution, until I decided to venture into the world of programming. And where did I end up? Managing systems at the institution I work for, after spending some time building automations in Python. Managing systems wasn't exactly what I had in mind when I wanted to learn to code and understand the world of programming. But that opportunity ended up tea
开发者
Trump is selling high-speed access to his market-moving Truth Social posts
Trump Media, the company behind Truth Social, is selling Wall Street faster access to the "most market-moving" posts on the US President's social media platform. On Thursday, Trump Media announced plans to launch "Truth API," a licensed real time data feed for businesses that provides "the fastest access to Truth Social's most influential accounts." It […]
AI 资讯
Show HN: Justif – Knuth-Plass justification and microtypography for the web
Justif is a drop-in JavaScript library that progressively enhances web pages to TeX-level text justification. Installation is a single <script> line, standard text and accessibility affordances are unchanged, and users with JS disabled get native browser rendering. I made justif because I've long been a fan of justified text. I think it looks clean and elegant, and makes reading more enjoyable. But bad justification is the opposite, with gaping spaces that distract me to the point of making the
AI 资讯
Terminal Velocity: Audits of the Present and Future
Introduction A Continuation of Shadow SCADA Terminal Velocity begins where Shadow SCADA left off — at the edge where digital audits meet the physical world. In the previous article, we explored how hidden infrastructures reveal themselves through aerial recon, magnetic anomalies, and environmental signals. Now we move deeper: into the physics of sensing, the light‑based pathways of diodes and photodiodes, and the high‑spec tools that transform invisible signals into readable intelligence. Modern audits are no longer limited to dashboards and logs. They extend into light, magnetic fields, environmental distortions, and sensor‑level truth — domains that traditional processes never touch. Section 1 – Diodes and Photodiodes: The First Gate of Physical Signals In modern audits, everything starts at the physical layer — where electricity and light move before any software or dashboard exists. Two tiny components sit at that gate: diodes and photodiodes. They look similar, but they do very different jobs. What is a diode? · One‑way valve for electricity: A diode lets electric current pass in one direction only, like a one‑way street. · Why this matters for security: Diodes are used to make sure information can leave a system but cannot come back in through the same path (for example, in SCADA or critical networks). · Simple image: Think of a diode as a door that only opens outward. You can exit, but nobody can enter through that door. What is a photodiode? · Sensor for light: A photodiode doesn’t control current—it detects light and turns that light into an electrical signal. · Where it’s used: In cameras, light sensors, security systems, and tools that “listen” to the environment through light. · Simple image: Think of a photodiode as a tiny eye that sees light and tells the system, “Something is shining here.” The key difference (in one sentence) · Diode = controls flow. · Photodiode = senses light. Diodes are about blocking or allowing. Photodiodes are about seeing and
AI 资讯
Connecting AWS Account with Cypress Automation: A Simple STS Connection Test
When building Cypress automation that interacts with AWS services, the first step is verifying that your test framework can successfully authenticate and communicate with your AWS account. In this article, you'll learn how to connect Cypress to AWS and perform a simple authentication test using AWS Security Token Service (STS) and the GetCallerIdentity API. This approach helps confirm that: AWS credentials are correctly configured. Cypress can invoke AWS SDK operations through Node.js tasks. The automation environment is connected to the expected AWS account. Establishing this connection first provides a solid foundation before automating interactions with services such as AWS Lambda, Amazon S3, Amazon DynamoDB, Amazon SNS, or Amazon SQS. Prerequisites Before getting started, ensure you have: Node.js installed A Cypress project Valid AWS credentials: AWS Access Key ID AWS Secret Access Key AWS Session Token (if using temporary credentials) AWS Region Note:If you're running Cypress in an AWS environment (such as AWS CodeBuild, an EC2 instance with an IAM role, or GitHub Actions using OpenID Connect), you may not need to provide credentials manually. The AWS SDK can automatically retrieve credentials from the execution environment. Step 1: Install the AWS SDK Install the AWS STS client package: npm install @aws-sdk/client-sts For this connectivity test, we only need the AWS Security Token Service (STS) client. The package provides: STSClient – Creates a client for communicating with AWS STS. GetCallerIdentityCommand – Returns details about the authenticated AWS identity associated with the configured credentials. Step 2: Configure AWS Credentials For local development, create or update your cypress.env.json file. { "AWS_ACCESS_KEY_ID" : "" , "AWS_SECRET_ACCESS_KEY" : "" , "AWS_SESSION_TOKEN" : "" , "AWS_REGION" : "" } Populate the file with your AWS credentials. Example: { "AWS_ACCESS_KEY_ID" : "your-access-key" , "AWS_SECRET_ACCESS_KEY" : "your-secret-key" , "AWS_SES
AI 资讯
VulnHunter: Capital One's agentic AI code security tool