SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

GitHub Fails to Remove Malicious Copycat Software Three Weeks After Report

0
·2 views

A software developer has reported that GitHub has not taken down malicious imitation software despite a complaint filed three weeks ago. The fake software appears to impersonate legitimate programs, potentially putting users at risk of harm. The developer publicly disclosed the inaction on their blog on September 24, 2026, highlighting GitHub's slow response to abuse reports. The case raises concerns about how effectively GitHub enforces its policies against malicious or deceptive repositories.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Cisco Secure Email Gateway Flaw CVE-2026-76443 Rated Critical, Patch Available

A critical injection vulnerability, CVE-2026-76443, has been identified in Cisco Secure Email Gateway and Cisco Secure Email and Web Manager versions 15.5 and earlier, as part of a five-CVE hardening release published in September 2026. India's CERT-In rated the release CRITICAL, warning that the flaw allows unsanitized attacker-supplied input to reach sensitive processing contexts, including command, SQL, code execution, and cross-site scripting sinks. Successful exploitation could lead to unauthorized command or code execution, data access or modification, and broader compromise of mail flow, configuration, and stored credentials. ZoomEye identified approximately 1,781 internet-facing instances matching the Cisco Secure Email Gateway product fingerprint, indicating a potentially wide exposure. Administrators are advised to apply Cisco's official fix, restrict management interface access to trusted hosts, and treat the upgrade as a single operation covering all five addressed vulnerabilities.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Smaller Typed-Decision Model Outperforms 35B LLM on 12,000 Federal IT RFQ Classifications

A benchmarking study tested three AI models — Jev, Qwen3.5-35B-A3B, and Laya 421M — on 12,000 real U.S. federal IT procurement solicitations to assess how safely each could automate classification tasks for a federal IT reseller. Jev, a typed-decision API, achieved the highest primary-class accuracy at 91.9%, narrowly beating the much larger 35B LLM Qwen at 89.6%, while the 421M open-weight Laya model trailed at 78.0%. The decisive factor was not raw accuracy but calibration — Jev's low calibration error of 0.049 allowed it to reliably flag uncertain predictions, enabling 86.5% of cases to be auto-accepted at a 96.7% precision rate. Qwen failed to reach the confidence thresholds needed for bounded automation, and Laya's high calibration error of 0.322 made safe automation targets unreachable. The findings suggest that for operational automation, a model's ability to signal its own uncertainty can matter more than its headline accuracy score.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

RelayPlane, LiteLLM, OpenRouter: Key Differences in AI Gateway Tools Explained

A developer who built RelayPlane has published a comparison of three AI proxy and routing tools: RelayPlane, LiteLLM, and OpenRouter. RelayPlane is a lightweight, locally installed npm package designed for single-machine use, offering a hard daily spend cap, per-request cost logging via SQLite, and a kill switch with no database server required. LiteLLM is a self-hosted, open-source gateway suited for teams, supporting over 100 providers, virtual keys, and per-tenant budget controls. OpenRouter is a fully hosted service requiring no infrastructure, providing access to over 500 models through a single API key, though cost enforcement happens on their cloud rather than locally. The author acknowledges personal bias toward RelayPlane and directs readers to official documentation for each tool to verify the claims independently.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Macula Mesh+Realm Offers Decentralized, Cryptographic Alternative to Traditional VPNs

Macula Mesh+Realm is a sovereign network substrate designed to provide secure, identity-based connectivity across untrusted or contested networks. Unlike conventional VPNs that rely on centralized gateways, Macula uses a distributed mesh architecture where IPv6 addresses are cryptographically derived from each node's identity, eliminating centralized IP management. The system uses QUIC as its core transport protocol, enabling persistent connections even when underlying IP addresses change — a key advantage in unstable or high-churn environments. A hierarchical certificate authority model allows precise revocation of compromised nodes without disrupting the broader network. By removing single points of failure and distributing traffic across peers, Macula aims to resist electronic warfare, DDoS attacks, and network mapping by adversaries.

0 comments Read more at DEV Community