DevCrate Runs Developer Utilities Locally in Browser to Protect Sensitive Data

·2 views

Developer tools like JSON formatters and JWT decoders often handle sensitive data including API tokens, credentials, and customer records that can be inadvertently exposed to remote servers. To address this risk, an open-source toolkit called DevCrate was built to perform all data processing directly in the user's browser, eliminating the need for a backend conversion server. The tool supports a range of utilities including JSON-to-code conversion, cURL translation, Base64 encoding, JWT inspection, and UUID generation — all running via browser APIs and local logic. Client-side processing reduces the risk of payloads being logged, retained, or observed by third-party scripts on a remote server. The project's source code is publicly available on GitHub, allowing developers to audit the processing model rather than rely solely on a privacy promise.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

RPKI Validation Alone Does Not Determine Route Fate, Policy Does

A technical tutorial series called Protocol in Code has published its fifth BGP session, focusing on how origin validation and routing policy are two distinct layers in the BGP decision process. The session explains that RPKI validation only answers whether a route's origin AS matches its ROA records, returning a state of valid, invalid, or not found. What actually happens to the route — rejection, deprioritization, or acceptance — is determined separately by locally configured routing policy. The code demonstrates that rejecting invalid routes is an opt-in behavior, not a protocol default, meaning the same validation result can produce different actions on different routers. The session aims to correct the widespread misconception that an RPKI-invalid route is automatically dropped by the router.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

BGP Origin Validation and Best Path Selection Are Two Distinct Network Decisions

A technical explainer from the Protocol in Code series highlights a common misconception among network engineers: that a route winning BGP's best path selection also means it is authorized. BGP best path selection evaluates preferences such as local preference, AS_PATH length, and MED to pick a winning route, while origin validation separately checks whether the originating AS is actually permitted to announce that prefix. RPKI origin validation addresses this second question by comparing a BGP route against Validated ROA Payloads, which cryptographically assert which AS is allowed to originate a given prefix range. A route can emerge as the best path and still constitute a hijack if no valid ROA authorizes its origin AS. The article walks through a minimal Python implementation to illustrate how the two decisions rely on entirely separate data structures and logic.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why Microsoft Teams Governance Remains a Sprawling Problem for Enterprises

Microsoft Teams was rapidly deployed across enterprises during the COVID-19 pandemic in 2020, with governance measures largely deferred due to urgency. Five years on, most organisations still lack proper governance, resulting in unchecked sprawl of hundreds of unowned teams, stale channels, and lapsed guest user access. The problem is compounded by Teams' architectural complexity — creating a single team automatically generates six or more linked objects across SharePoint, Exchange Online, and Entra ID. By default, any Microsoft 365 user can create a team with no friction, meaning large organisations can accumulate hundreds of unmanaged teams within a year. According to principal engineer Suvankar Chakraborty, the core issue is not technical difficulty but the fact that Teams governance sits at the crossroads of IT, security, compliance, and collaboration culture — an intersection where oversight programmes frequently break down.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Google Launches ADK Open-Source Framework for Building AI Agents

Google has released the Agent Development Kit (ADK), an open-source framework designed to simplify the creation, evaluation, and deployment of AI agents. Unlike traditional generative AI models that respond to prompts, AI agents can autonomously plan, use tools, query external services, and coordinate with other agents to complete complex tasks. ADK gives developers a structured, code-based approach to define agent behavior, manage memory and sessions, and build multi-agent systems. The framework supports use cases ranging from customer service and data analysis to process automation and decision-making. ADK is intended to help teams build modular, scalable AI solutions suited to real-world business and technical workflows.

0 comments Read more at DEV Community