Developer Builds Free AI-Powered API That Detects Phishing Sites and Prompt Injection

·1 views

A solo developer from Punjab, India has built PhishVision, a free REST API that detects phishing websites using AI vision rather than relying on URL reputation databases. The tool launches a headless Chromium browser, captures a screenshot of the target page, and extracts all visible and hidden text before sending both to a Vision AI model for analysis. This approach allows it to flag brand-new phishing sites that have not yet appeared in any known threat database. PhishVision also addresses a growing attack vector called prompt injection, where malicious instructions are hidden in webpages using invisible text to manipulate AI agents and chatbots. The API returns a structured JSON verdict including confidence score, impersonated brand, threat type, and detected visual anomalies, and is accessible live at OpticParse.com.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

TrendVidStream Replaced SQLite Job Queues With NATS JetStream for Regional Video Events

TrendVidStream, which runs video discovery crawlers across 8 regions, replaced an inline cron-based processing system with NATS JetStream to handle events like indexing, cache invalidation, and sitemap updates. The original approach fused data fetching and fan-out into a single process, causing partial failures when any step crashed or stalled. A SQLite jobs-table queue was also evaluated but rejected due to polling inefficiency, locking contention, lack of native fan-out, and inability to work across machines without added replication. NATS JetStream was chosen for its push-based delivery, multi-consumer support, independent storage, and cluster capability — all in a single Go binary requiring no container infrastructure. The team configured a stream with subject-based regional filtering, a 72-hour message retention window, and a 2-minute deduplication window to ensure resilience during deployments.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Self-Taught Developer Reviews Cyfrin Updraft as Top Free Blockchain Learning Platform

A developer documenting a self-taught blockchain engineering journey shared a Week 2 progress update, having completed 45% of the Blockchain Basics course on Cyfrin Updraft. The platform stood out for its use of Tenderly virtual testnets, which provide instant private blockchains with unlimited test ETH, eliminating the common frustration of hunting for working faucets. The reviewer compared Cyfrin Updraft favorably against LearnWeb3.io, noting the former excels in depth of instruction while the latter offers better gamification and community features. A key conceptual takeaway from the week was understanding the oracle problem — the limitation that smart contracts cannot access real-world data on their own, which is why decentralized oracle networks like Chainlink exist. The reviewer recommended using both platforms together rather than choosing one over the other.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How a Defence Contractor Deployed AI Code Review in an Air-Gapped Environment

A defence contractor with a classified, air-gapped codebase needed AI-assisted code review without any external connectivity, ruling out all cloud-based solutions. The development team of twelve engineers was producing over 200,000 lines of code annually and struggling to maintain review quality. The solution involved deploying large language models entirely on-premise, running on locally controlled GPU hardware such as NVIDIA A100 servers. Key considerations included model size selection, 4-bit quantisation, inference server configuration, and CI/CD pipeline integration to meet strict compliance requirements. Hardware costs ranged from roughly $30,000–$45,000 for smaller teams, amortising to a figure comparable to standard cloud-based code review licensing.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Understanding C Pointers: What They Are and Why They Matter for Beginners

Pointers are one of the most challenging concepts for beginners learning the C programming language, yet the core idea is straightforward: a pointer is a variable that stores a memory address rather than a direct value. Using the & operator retrieves a variable's address, while the * operator allows access to the value stored at that address, a process called dereferencing. Pointers become essential in several practical scenarios, including passing large data structures to functions efficiently, modifying variables from within a function, and managing dynamic memory allocation at runtime. Common beginner mistakes include using uninitialized pointers, which can cause crashes or memory corruption, and dereferencing NULL pointers. Developing safe habits early, such as always initializing pointers, helps avoid difficult-to-trace bugs in C programs.

0 comments Read more at DEV Community