Dotori SSH Terminal separates host discovery from connection and host key verification

·4 views

Dotori SSH Terminal treats finding an SSH service and verifying its identity as two distinct steps. On the current Wi-Fi network it can test a chosen port across the subnet and list hosts that accept TCP connections, though an open port alone does not confirm SSH is running. Users can also connect directly by entering a hostname or IP and port, bypassing discovery entirely. On first connection the app shows the server's host key fingerprint for the user to compare with the administrator's value, and it warns prominently if a saved fingerprint later changes. Passwords stay within the app's protected storage and are never placed in deep links, and no commands or data pass through a developer proxy or ads SDK.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

x402 sellers returning 202 after payment: what 14,991 paid calls show

A seller can settle an x402 payment and still answer 202 Accepted, and a plain res.ok check counts that as finished work. The vet402 team, which pays x402 sellers from its own wallets, reports 510 of 14,991 settled payments returned no usable content, mostly due to missing HTTP status, 5xx errors, or 202 responses. Under the reference Express middleware, any status below 400 triggers settlement, so a 202 or empty 200 gets charged while a 500 does not. The post describes how refunds differ between the exact and auth-capture schemes and offers a pre-payment lookup via a public REST endpoint and a hosted MCP server. It also recommends checking the response status and body after each paid call and marking tasks done only when content is actually delivered.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Script reads AWS Cost Explorer CSV to pinpoint cost line items and daily changes

A DEV Community guide explains that AWS Cost Explorer's CSV export shows which usage-type line items changed and when, more useful than its service-level charts. The author provides a short Node.js script, requiring Node 18 or newer and no npm packages, that reads a downloaded CSV without needing AWS credentials. The script ranks the top ten usage types by total cost and flags items whose daily amount roughly doubled across the period. The article also suggests comparing two exports and mentions an optional browser-based tool, from Billtrim, that matches line items to known cost causes.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Evaluating Outdoor Computer Vision Goes Beyond Detection Accuracy

The article argues that a convincing detection demo does not settle whether an outdoor monitoring system is ready to deploy. Changing light, distance, reflections, occlusion and weather all shape performance, so evaluating those conditions matters as much as choosing a model. It notes that detections are observations rather than proof of safety, and that a missing detection should not be read as proof of absence. The author recommends separating test data by capture session, keeping a holdout set for real operating conditions, and reporting misses and false alarms by condition. The piece also stresses defining fallback behavior for failed cameras and clarifying which claims are measured versus design goals.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AI Agents Should Not Inherit Full Environment Secrets, Experts Warn

The article argues that AI agent runtimes can expose sensitive credentials simply because the process can technically access them, not because the agent needs them. It gives a hypothetical support agent whose container injects several secrets through environment variables, even though it only requires one read-only token. A prompt injection hidden in a customer attachment could instruct the agent to dump its environment and send the data externally, turning broad runtime access into misused authority. The author recommends keeping secrets outside the agent's working context, exposing narrow operations instead, and using brokers that issue short-lived, policy-checked access. The article also frames secret scoping as a governance question that teams should be able to answer clearly.

0 comments Read more at DEV Community