Developer builds multi-agent AI penetration testing engine with strict safety controls

A developer has released OIHK, an autonomous multi-agent AI penetration testing engine designed to go beyond simple LLM-in-a-loop approaches common in existing tools. The system uses a root planner that delegates tasks to specialist agents, requiring verified tool execution and a separate validation record before any result is classified as a finding. Safety is enforced at the infrastructure level, with active tools blocked by policy, network egress restricted to a compiled allowlist within a sandboxed namespace, and a hardened read-only environment with dropped system privileges. OIHK is provider-agnostic and works with any OpenAI-compatible endpoint, including locally hosted models. The project also includes a built-in evaluation suite that tests the engine against 16 deliberately vulnerable scenarios, scoring results programmatically rather than relying on a model to self-assess.

Browser-Based PDF Toolkit Processes Files Locally Using WebAssembly

DeskRamp is a Chrome extension that performs PDF operations such as merging, splitting, compressing, and converting entirely within the browser, without uploading files to a server. The tool is built on WebAssembly-compiled PDF libraries, which are now fast enough to run client-side and handle most tasks almost instantly. Developers had to navigate key technical hurdles, including adding an explicit 'wasm-unsafe-eval' exception to Chrome's Manifest V3 Content Security Policy and lazy-loading multiple specialized libraries to keep install size manageable. The biggest runtime constraint proved to be browser tab memory rather than processing speed, requiring chunk-based processing and careful manual release of memory references for large documents. The privacy benefit is the core motivation: sensitive files like contracts and financial documents never leave the user's device.

npm Version Drift and Outdated Node.js Silently Broke LINE Bot Feature for Three Days

A developer discovered that a URL-summarization feature in their LINE chatbot had been silently failing for three days due to an unlocked npm package version in the Docker image. The single-file-cli package quietly upgraded to a version requiring Node.js 22.4 or later, while the container was still running Node 18. All three fallback methods for fetching webpage content failed, but the bot only surfaced a generic error to users with no indication of the root cause. The debugging process revealed that a successful npm build does not guarantee runtime functionality, since npm treats engine version mismatches as warnings rather than build failures. The developer resolved the issue through multiple Dockerfile rebuild cycles, each followed by live runtime testing rather than relying solely on build logs.

Opinion: The AI Consciousness Debate May Be Asking the Wrong Questions

An opinion piece published in The Economist on August 20, 2026 argues that humanity is approaching the debate around AI consciousness incorrectly. The article, featured in the publication's 'By Invitation' section, suggests the framing of the discussion needs to be reconsidered. The piece generated discussion on Hacker News, drawing early reader engagement. The core argument challenges conventional assumptions about how humans evaluate or define machine consciousness. Specific details of the argument were not available from the provided source text.

'India will never bow its head': Rajnath Singh

How a cp932 Encoding Bug Crashed Builds on Japanese Windows but Not on Mac

A character encoding mismatch between UTF-8 and cp932 caused a build pipeline to crash on Japanese-locale Windows machines while working perfectly on macOS. The issue arose because Python defaults to the platform's locale encoding when capturing subprocess output, meaning emoji-containing strings that pass freely under UTF-8 trigger a UnicodeEncodeError under cp932. In this case, a build script shelled out to a version-checking tool whose success message included emoji, which cp932 cannot encode, causing the subprocess to crash. The build script then misreported the failure as a version-consistency error, obscuring the root cause and wasting debugging time. To prevent recurrence, a dedicated test file was created to statically check scripts for cp932-unsafe characters on macOS before code reaches Windows.

Haryanvi Singer Ankit Balyan Shot Dead Outside Gym in Shamli

Haryanvi singer Ankit Balyan was killed in a targeted shooting outside a gym in Uttar Pradesh's Shamli district. Four attackers arrived on two motorcycles and opened fire on Balyan as he was leaving the facility. Authorities are reviewing CCTV footage and exploring a possible connection to Haryana in the case. The murder sparked public protests, with demonstrators blocking a key road in the area. No arrests have been made so far, and the investigation remains ongoing.

Gig Hiring Rises 15% for Festive Season, Tier II Cities Gain Ground

Gig economy hiring has surged by 15% in anticipation of the upcoming festive season. Delivery associates are among the most in-demand roles during this period. Warehouses and fulfilment centres are also ramping up their workforce to handle the expected spike in orders. Notably, tier II cities are emerging as significant contributors to this job growth, signalling a broader geographic spread of gig employment opportunities.

How to Build Your First GitLab CI/CD Pipeline Using Python and FastAPI

A tutorial series on DEV Community introduces developers to GitLab CI/CD as an alternative to GitHub Actions for automating software workflows. GitLab is highlighted as an all-in-one platform combining Git repositories, CI/CD pipelines, container registry, security scanning, and observability tools. The series begins with a beginner-friendly pipeline setup using a FastAPI Python project hosted on GitLab.com. The first installment focuses on building a simple automated test pipeline from scratch, with plans to progressively advance toward a professional-grade setup. The guide targets developers already familiar with GitHub who want to explore GitLab's broader DevOps capabilities.

Vijay Mallya alleges denial of justice in India

Nepal Floods Devastate Villages Along Bhote Kosi and Trishuli Rivers

Severe flooding has caused widespread destruction across villages and towns in Nepal. The disaster struck areas along two major rivers, the Bhote Kosi and the Trishuli. Surging floodwaters swept away homes, roads, bridges, and power plants in their path. Aerial footage has revealed the extensive scale of the damage left behind by the floods.

India coach backs free-hit rule in Tests to curb no-ball problem

India bowling coach Sairaj Bahutule has suggested that introducing free-hits in Test cricket could effectively reduce the frequency of no-balls. He made the remarks after the fourth day's play on Wednesday. Bahutule argued that teams would be far less likely to bowl no-balls if the punishment included a free-hit delivery. He clarified he does not consider himself a guardian of the rules, but believes the added consequence would act as a strong deterrent. The proposal echoes a growing debate around modernising Test cricket's playing conditions.

Nepal floods: India opens helplines as over 130 nationals remain missing

Why Vector Databases Matter More Than the AI Model in RAG Systems

A health-tech client's RAG system gave a dangerously incorrect medication dosage answer to a doctor because it relied on keyword search instead of a vector database for context retrieval. Keyword search tools like BM25 or Elasticsearch match exact strings, making them unable to recognize semantically similar phrases that use different words. Vector databases solve this by converting text into numerical embeddings, grouping semantically similar content close together in high-dimensional space so retrieval is based on meaning rather than word matching. Because the retrieval layer determines what context the language model receives, poor retrieval directly causes confident but factually wrong answers regardless of model quality. The article argues that vector databases are a foundational component of reliable RAG pipelines, not an optional add-on.

Mayank Chakraborty and student Pratitee win Asian Junior Chess titles in Mumbai

Seventeen-year-old Mayank Chakraborty, India's 94th Grandmaster and the first from Northeast India, claimed the classical title at the Asian Junior Chess Championships held in Mumbai. His 13-year-old student Pratitee Bordoloi won the girls' classical title at the same tournament, completing a rare teacher-student double triumph. The two had worked together for three months ahead of the event, with Mayank mentoring Pratitee while simultaneously managing his own competitive career. Both entered the championship as top seeds, adding significant pressure to their performances. Pratitee also secured a Women's Grandmaster norm during the tournament, marking a major milestone in her early career.

Legal AI Governance Hinges on Citations, Disclaimers, and Human Review Gates

As legal AI tools grow more capable, experts warn that the critical measure of their reliability is not drafting quality but whether they provide verifiable citation trails, clear non-advice disclaimers, and mandatory lawyer review before high-risk output is used. Every key claim generated by a legal AI system should link to an openable source, with statutes and cases carrying version dates and clickable references. A sound architecture follows a retrieve-then-draft model, where the system searches first and generates second, flagging gaps with 'not found' rather than fabricating citations. Organizations deploying such tools should define who can approve output, what review checklist must be completed, and what audit logs exist in case something goes wrong. Tools that cannot clearly describe their human review node should remain in sandbox mode and never be used for client delivery, litigation strategy, or filing-adjacent work.

How to Build Auditable SMS Delivery for SaaS Compliance in Node.js

A technical guide published on DEV Community outlines best practices for building a reliable SMS alerts system for US and EU SaaS platforms, with a focus on compliance and auditability. The author argues that low per-message cost is irrelevant if a delivered notification cannot be provably traced, making durable message state and delivery webhooks essential. The proposed architecture uses an append-only ledger that separates business notices from delivery attempts, stores hashed or encrypted destination numbers, and tracks a strict set of message states from accepted to delivered or failed. Provider-neutral interfaces allow services like Twilio, Vonage, and Plivo to plug in via adapters, while regional rules for the US and EU are treated as first-class routing inputs rather than afterthoughts. The guide also emphasizes idempotent retries, out-of-order webhook handling, and separate SLOs for persistence and provider handoff to ensure the audit record itself becomes the reliability guarantee.

Japanese Artist Yayoi Kusama Dies at 97

Renowned Japanese artist Yayoi Kusama has died at the age of 97. She was one of the most celebrated contemporary artists in the world, widely known for her distinctive polka-dot motifs and immersive infinity mirror installations. Kusama had been a dominant figure in the international art world for decades, with her works fetching record prices at auction. Her death marks the end of a remarkable career that spanned over seven decades and influenced generations of artists globally.

Maharashtra Cyber launches awareness campaign targeting digital arrest scams

Maharashtra Cyber unveiled a short film and anthem in Mumbai to educate the public about online fraud. Chief Minister Devendra Fadnavis, who attended the event, emphasized that public awareness is a critical tool in combating cyber crime. Several celebrities were felicitated at the event for their role in supporting the initiative. The campaign specifically focuses on the 'digital arrest' scam, in which fraudsters extort money from unsuspecting victims. Authorities have urged citizens who fall victim to online fraud to immediately call the 1930 cyber helpline.

Bengal health dept probes 60 child deaths in 3 weeks at Malda Medical College

West Bengal's health department has sought detailed reports from Malda Medical College Hospital following the deaths of 60 children in the first three weeks of August. The alarming figures included 10 deaths recorded in a single day, prompting official scrutiny. Authorities are reviewing the hospital along with other health facilities in the region. Officials noted that many of the children had been referred from elsewhere and were already in critical condition upon arrival. A formal investigation into the deaths is currently underway.