Apache Cassandra's real exposure risk lies in JMX and internode ports, not CQL

·1 views

A security analysis of Apache Cassandra deployments found that port 9042, the native CQL query interface, is rarely exposed to the internet, as administrators typically bind it to loopback. A ZoomEye scan conducted on September 26, 2026 identified over 5,000 Cassandra instances by app fingerprint, but returned near-zero results for publicly accessible port 9042. The greater risk comes from internode ports (7000/7001) and JMX management interfaces, which can leak cluster topology details or allow administrative operations if left reachable. By default, Cassandra's permissive authenticator accepts CQL connections without credentials from any host that can reach port 9042, making authentication configuration critical. Security best practices recommend auditing all listening sockets, verifying authenticator settings across every node, and restricting JMX access to dedicated management hosts only.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Modern scroll-driven animations: separating entry/exit with robust CSS fallbacks

A modern approach to scroll-driven web animations recommends splitting entry and exit effects into two separate animations rather than combining them in a single keyframe block. This separation allows independent control of easing, timing, and transforms, reducing layout bugs across different screen sizes and dynamic content. The technique leverages native CSS properties like animation-timeline: view() and animation-range, anchoring animations to semantic scroll ranges instead of fragile manual percentage calculations. Because browser support for scroll-driven animations is not universal, developers are advised to implement feature detection and fall back gracefully to the Intersection Observer API where needed. The overall approach prioritizes resilience, accessibility, and declarative CSS intent over geometry-dependent workarounds.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Wrium is a lightweight reactive JavaScript library that needs no build tools

A developer has released Wrium, a small open-source JavaScript library designed to bring reactivity to web interfaces without requiring a bundler or compiler. Users simply add a script tag to an HTML file and use Vue-inspired directives such as v-if, v-for, and v-model to bind data to the page. When data changes, Wrium automatically updates the relevant parts of the UI, eliminating the need to manually query and modify DOM elements. The library weighs approximately 10.9 KB minified, has zero dependencies, and ships with TypeScript declarations under the MIT license. Wrium is positioned not as a replacement for large frameworks but as a lightweight alternative for projects where full-scale tooling is unnecessary.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

NVIDIA Launches OpenShell to Sandbox AI Agents and Enforce Access Policies

NVIDIA has released an open-source project called OpenShell, designed to provide a secure, isolated runtime environment for autonomous AI agents. The tool addresses risks such as credential leaks, prompt injection, and unintended system commands by running each agent inside its own sandbox with kernel-level controls. A built-in policy system lets developers define exactly which files, network hosts, and system calls an agent may access, with a gateway enforcing those rules at runtime. OpenShell supports Linux, macOS on Apple Silicon, and Windows via WSL 2, and requires Docker, Podman, or host virtualization to operate. SDKs are available for Python, TypeScript, Go, and Rust, allowing developers to integrate OpenShell into their own applications.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Builds Flask Coupon Calculator to Solve Real Cashier Math Challenges

A developer and cashier created a lightweight Flask web app called Coupon Calculator to simplify discount calculations at checkout. The project was motivated by the creator's personal struggle with dyscalculia, which makes mental math difficult during busy retail shifts. The app allows users to enter an original price and apply either a percentage or fixed discount, then instantly view the savings and final price. It includes input validation, protection against negative values, and currency-safe rounding to two decimal places. The tool was built as a practical, everyday solution and is available as a live web app.

0 comments Read more at DEV Community