Decades-Old Finger Protocol Exploited to Deliver Malware in 2026

·1 views

The Finger protocol, originally developed in 1977 for sharing user information across networks, is being actively exploited by attackers to deliver malware nearly five decades after its creation. Security researchers at Artemis Security documented a real-world attack in which the protocol was used to distribute a Python-based remote access trojan (RAT). Despite being largely obsolete and rarely used in modern environments, Finger remains enabled on some systems, making it an unexpected attack vector. The incident highlights how legacy protocols, often overlooked by security teams, can pose significant risks if left unmonitored or unblocked.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer builds go-zerocsv to cut Go CSV parsing memory from 540MB to 5KB

A Go developer discovered that the standard library's encoding/csv package generates over 10 million heap allocations when parsing a 5-million-row CSV file, consuming roughly 540 MB of RAM. The root cause is the Read() method's design, which allocates a new string slice and individual heap strings for every row and field parsed. To address this, the developer built go-zerocsv, an open-source parser that uses a reusable 4 KB buffer and in-place typed scanning, reducing allocations to near zero on the hot path. Benchmarks on an AMD Ryzen 5 8400F running Go 1.26 show go-zerocsv parsing the same 5-million-row file in 302 ms with only 5 KB of memory, compared to 492 ms and 540 MB for the standard library. The library also improves CSV writing by accepting typed values directly, eliminating the temporary string conversions previously required by the stdlib writer.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Builds Three-Agent AI Pipeline Using Hermes Bot Mode Plugin

A developer has demonstrated a multi-agent workflow using Hermes Bot Mode, a newly released desktop plugin that adds an orchestration layer on top of existing Hermes AI profiles. The experiment involved three specialized AI agents — a Stock Market Researcher, a Risk Analyst, and a Thesis Editor — assigned to analyze and compare NVIDIA and AMD. Rather than manually passing outputs between agents, the bots autonomously handed off work to one another in a Research–Challenge–Synthesis pipeline. Hermes Bot Mode differs from the platform's existing profiles feature by providing a visual team interface and enabling agent-to-agent task routing. The developer reported the autonomous handoff system largely worked, highlighting it as a meaningful shift in how multi-agent AI workflows can be structured.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

OpenAI Cuts GPT-5.6 Sol Pricing by 50%, Boosting Access for Developers

OpenAI has reduced the pricing of its GPT-5.6 Sol model by 50%, marking a significant drop in costs for developers and businesses using the platform. The price cut is expected to lower financial barriers that previously prevented smaller teams, startups, and freelancers from adopting advanced AI models. Developers who had to rely on less capable models due to budget constraints may now find it more feasible to integrate GPT-5.6 Sol into their applications. The model is reported to offer improved natural language understanding and better handling of nuanced, context-dependent conversations compared to earlier versions. Alongside the opportunity for wider adoption, the reduced cost also raises ethical considerations around potential misuse of more accessible, powerful AI tools.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Snowflake Cortex Analyst vs Databricks Genie: Both Depend on Manual Curation

Snowflake Cortex Analyst and Databricks Genie both allow business users to query data warehouses using natural language, but each requires manually curated context before delivering reliable results. Cortex Analyst relies on a hand-authored semantic model file, while Genie depends on a curated Space with example queries, meaning accuracy in both tools tracks directly to the quality of that human-maintained context. When a user's question falls outside the curated scope, both tools can return confident but potentially inaccurate answers without signalling that a boundary was crossed. Neither product crosses platform boundaries or verifies join paths before executing queries — limitations the article describes as architectural rather than fixable feature gaps. The core finding is that organisations evaluating these tools are effectively assessing their own capacity to author and sustain context files, a task that often lacks a clear owner or visible reward.

0 comments Read more at DEV Community