Gemini Side-Panel Bug Spawned Hidden YouTube Iframes, Playing Ghost Audio

·7 views

A software engineer discovered a Chrome bug late one night while using Google's Gemini side-panel to navigate YouTube video timestamps. Clicking AI-generated timestamps failed to update the main video player; instead, the extension silently spun up hidden background iframes. Rapid-clicking the timestamps caused multiple invisible video instances to play simultaneously, creating overlapping audio even after a page refresh. The root cause was an architectural disconnect: Chrome's extension sandbox prevented the side-panel from communicating state changes to the YouTube DOM, so timestamps were treated as isolated href links rather than player commands. The incident highlights a fundamental software principle — that even sophisticated AI cannot compensate for broken inter-component communication at the browser level.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Attestly Automates EU AI Act Annex IV Documentation from Agent Traces

A new tool called Attestly aims to simplify compliance with the EU AI Act by generating Annex IV technical documentation directly from AI agents' operational traces. The platform ingests data from sources such as OpenTelemetry, LangSmith, AgentOps, and MCP logs, mapping them into structured evidence trails. Each section of the generated documentation is labeled as AI-generated, user-provided, or missing, and must be reviewed and approved by a human before export. Attestly is designed primarily for startups and teams deploying AI agents within the European Union. A free tier is available for users to get started.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Builds Live Playground to Compare Four Authorization Engines Side by Side

A developer created an interactive browser-based tool to test four authorization engines — Cedar, Casbin, OpenFGA (ReBAC), and OPA/Rego — against identical access-control rules and every possible request combination. The experiment revealed that ReBAC struggled with time-based conditions, since its core check function has no concept of time, causing it to allow edits at 3am while the other three engines correctly denied them. This limitation is acknowledged by OpenFGA itself, which later introduced Conditions specifically to address time-sensitive scenarios. The project also exposed a subtle testing blind spot: the test suite sampled only four times of day, missing business-hours boundary cases entirely, meaning a misconfigured time window went undetected despite all tests passing. The tool runs fully in the browser using WebAssembly bindings, with no backend, and is publicly available as an open-source repository.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Builds Low-Cost Epistemic Gate to Counter LLM Data Poisoning in Fine-Tuning

An independent developer has created an 'epistemic gate' system designed to prevent data poisoning attacks during large language model fine-tuning. The project was tested across five different model architectures and orchestrated entirely on a 2006 Toshiba laptop at zero cost. The work spans 16 documented experiments, with fully reproducible code and notebooks published on Kaggle. Supporting materials include a technical whitepaper and a corrective manual with formal mathematical loss specifications. The developer is inviting indie researchers, developers, and startups interested in safe local fine-tuning to review and run the notebooks.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Three Thai Open-Weight LLMs Compared: Typhoon, OpenThai, and Pathumma

Three locally developed Thai large language models — Typhoon, OpenThai, and Pathumma — offer free, downloadable alternatives to foreign AI subscriptions for Thai-language tasks. Typhoon, built by SCB 10X, provides the broadest portfolio, covering speech recognition, document reading, translation, and even Isan dialect support. OpenThai, maintained by the Thai AI Entrepreneur Association and iApp Technology, is licensed under Apache 2.0 and includes a specialized 30-billion-parameter legal variant capable of citing Thai law by name and section. Pathumma, developed by researchers at VISTEC, focuses on cultural and contextual Thai understanding rather than grammatical accuracy alone. All three models trail frontier foreign models in multi-step reasoning but outperform them on Thai-specific tasks and can be run locally, though hardware requirements vary by model size.

0 comments Read more at DEV Community