Security

security@programming.dev

PostsComments

codeinabox@programming.devEnglish · 11 hours ago

Npm Slop & Wonky Software Supply Chains

simonramstedt.com

0

0

Npm Slop & Wonky Software Supply Chains

simonramstedt.com

codeinabox@programming.devEnglish · 11 hours ago

0

codeinabox@programming.devEnglish · 7 days ago

Anthropic secretly installs spyware when you install Claude Desktop

www.thatprivacyguy.com

178

Anthropic secretly installs spyware when you install Claude Desktop

www.thatprivacyguy.com

codeinabox@programming.devEnglish · 7 days ago

codeinabox@programming.devEnglish · 3 days ago

Mythos Mystery in Mozilla Numbers: How 22 Vulns Became 271 or Maybe 3 in April

www.flyingpenguin.com

0

1

Mythos Mystery in Mozilla Numbers: How 22 Vulns Became 271 or Maybe 3 in April

www.flyingpenguin.com

codeinabox@programming.devEnglish · 3 days ago

0

codeinabox@programming.devEnglish · 6 days ago

The Vercel breach started at a tool nobody was watching

siddhantkhare.com

1

7

The Vercel breach started at a tool nobody was watching

siddhantkhare.com

codeinabox@programming.devEnglish · 6 days ago

1

justsouichi@programming.devEnglish · 4 days ago

pompelmi – ClamAV antivirus scanning for Node.js, zero dependencies

0

0

pompelmi – ClamAV antivirus scanning for Node.js, zero dependencies

justsouichi@programming.devEnglish · 4 days ago

0

codeinabox@programming.devEnglish · 9 days ago

We Reproduced Anthropic's Mythos Findings With Public Models

blog.vidocsecurity.com

0

11

We Reproduced Anthropic's Mythos Findings With Public Models

blog.vidocsecurity.com

codeinabox@programming.devEnglish · 9 days ago

0

codeinabox@programming.devEnglish · 10 days ago

The Boy That Cried Mythos: Verification is Collapsing Trust in Anthropic

www.flyingpenguin.com

1

14

The Boy That Cried Mythos: Verification is Collapsing Trust in Anthropic

www.flyingpenguin.com

codeinabox@programming.devEnglish · 10 days ago

1

codeinabox@programming.devEnglish · 11 days ago

Cybersecurity Looks Like Proof of Work Now

www.dbreunig.com

0

2

Cybersecurity Looks Like Proof of Work Now

www.dbreunig.com

codeinabox@programming.devEnglish · 11 days ago

0

codeinabox@programming.devEnglish · 12 days ago

Dependency cooldowns turn you into a free-rider

calpaterson.com

0

6

Dependency cooldowns turn you into a free-rider

calpaterson.com

codeinabox@programming.devEnglish · 12 days ago

0

codeinabox@programming.devEnglish · 12 days ago

AI “Watershed Moment” or expensive pen tester? The AISI Mythos Data

blog.robbowley.net

0

2

AI “Watershed Moment” or expensive pen tester? The AISI Mythos Data

blog.robbowley.net

codeinabox@programming.devEnglish · 12 days ago

0

codeinabox@programming.devEnglish · 13 days ago

Our evaluation of Claude Mythos Preview’s cyber capabilities

www.aisi.gov.uk

1

4

Our evaluation of Claude Mythos Preview’s cyber capabilities

www.aisi.gov.uk

codeinabox@programming.devEnglish · 13 days ago

1

codeinabox@programming.devEnglish · 15 days ago

No one owes you supply-chain security

purplesyringa.moe

0

1

No one owes you supply-chain security

purplesyringa.moe

codeinabox@programming.devEnglish · 15 days ago

0

Innerworld@lemmy.worldEnglish · 16 days ago

Google rolls out end-to-end encryption for Gmail on Android and iOS devices for enterprise users, letting them read and compose emails without additional tools

www.bleepingcomputer.com

0

1

Google rolls out end-to-end encryption for Gmail on Android and iOS devices for enterprise users, letting them read and compose emails without additional tools

www.bleepingcomputer.com

Innerworld@lemmy.worldEnglish · 16 days ago

0

codeinabox@programming.devEnglish · 18 days ago

Package Security Problems for AI Agents

0

1

Package Security Problems for AI Agents

codeinabox@programming.devEnglish · 18 days ago

0

codeinabox@programming.devEnglish · 19 days ago

Assessing Claude Mythos Preview’s cybersecurity capabilities

red.anthropic.com

0

1

Assessing Claude Mythos Preview’s cybersecurity capabilities

red.anthropic.com

codeinabox@programming.devEnglish · 19 days ago

0

codeinabox@programming.devEnglish · 19 days ago

Minimum Release Age is an Underrated Supply Chain Defense

0

1

Minimum Release Age is an Underrated Supply Chain Defense

codeinabox@programming.devEnglish · 19 days ago

0

buskill@lemdro.idEnglish · 19 days ago

Bounty Available (>$2,000) for QubesOS BusKill package

0

1

Bounty Available (>$2,000) for QubesOS BusKill package

buskill@lemdro.idEnglish · 19 days ago

0

codeinabox@programming.devEnglish · 22 days ago

OpenClaw gives users yet another reason to be freaked out about security

arstechnica.com

0

1

OpenClaw gives users yet another reason to be freaked out about security

arstechnica.com

codeinabox@programming.devEnglish · 22 days ago

0

codeinabox@programming.devEnglish · 22 days ago

Stop Committing Your Secrets (You Know Who You Are)

0

1

Stop Committing Your Secrets (You Know Who You Are)

codeinabox@programming.devEnglish · 22 days ago

0

codeinabox@programming.devEnglish · 23 days ago

Don’t let A.I. read your .env files

0

1

Don’t let A.I. read your .env files

codeinabox@programming.devEnglish · 23 days ago

0

Security@programming.dev

security@programming.dev

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: [email protected]

A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.

Rules :

All instance-wide rules apply.
Keep it totally legal.
Remember the human, be civil.
Be helpful, don’t be rude.

Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

6 users / day
272 users / week
296 users / month
296 users / 6 months
1 local subscriber
2.06K subscribers
61 Posts
21 Comments
Modlog

mods:
Vacant@programming.dev

programming.dev

A collection of programming communities

Welcome Programmers!

programming.dev is a collection of programming communities and other topics relevant to software engineers, hackers, roboticists, hardware and software enthusiasts, and more.

The site is primarily english with some communities in other languages. We are connected to many other sites using the activitypub protocol that you can view posts from in the “all” tab while the “local” tab shows posts on our site.

🔗 Site with links to all relevant programming.dev sites

🟩 Not a fan of the default UI? We have alternate frontends we host that you can view the same content from

ℹ️ We have a wiki site that communities can host documents on

⚖️ All users are expected to follow our Code of Conduct and the other various documents on our legal site

🏘️ Want to create a new community? Please follow our Community Guidelines

❤️ The site is run by a team of volunteers. If youre interested in donating to help fund things such as server costs you can do so here

💬 We have a microblog site aimed towards programmers available at https://bytes.programming.dev/

🛠️ We have a forgejo instance for hosting git repositories relating to our site and the fediverse. If you have a project that relates and follows our Code of Conduct feel free to host it there and if you have ideas for things to improve our sites feel free to create issues in the relevant repositories. To go along with the instance we also have a site for sharing small code snippets that might be too small for their own repository.

🌲 We have a discord server and a matrix space for chatting with other members of the community. These are bridged to each other (so you can interact with people using matrix from discord and vice versa.

Fediseer