How to Get Instant Telegram Alerts on Every Successful SSH Login to Your Server

·1 views

A simple setup using Linux's Pluggable Authentication Modules (PAM) can send real-time Telegram notifications whenever someone successfully logs into a server via SSH. The system hooks into PAM's pam_exec module, which triggers a shell script only after a successful login, then calls the Telegram Bot API via curl to deliver the alert. The script is designed to always exit with a success code and runs the network request in a detached subshell, ensuring the notification process never delays or blocks the actual login. Rate limiting per IP and username is built in to prevent notification spam from tools like VS Code Remote, which can open multiple SSH channels for a single session. The approach requires no third-party agents or complex configuration — just a Telegram bot token, a chat ID, and a few lines added to the PAM SSH config file.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Why remote desktop tools are the wrong fix for in-room screen sharing

Remote desktop tools like AnyDesk and TeamViewer are routinely used in meeting rooms when an HDMI connection fails, but they were designed to control machines from a distance — not to share content with people standing nearby. Their core features, such as NAT traversal, relay servers, and one-to-one control sessions, solve problems that simply do not exist when everyone is in the same room. The mirroring model also falls short in group settings, where multiple people need to view a shared display rather than take turns controlling a single machine. Alternatives better suited to local screen sharing include Apple's built-in Sidecar for Mac and iPad users, and the open-source tool Deskreen, which streams a screen or window to any browser on the local network without requiring an account. Choosing the right tool comes down to recognising that in-room display needs and remote access needs are fundamentally different problems with different solutions.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

KXApp Lets Developers Build iOS Apps on Windows Without Installing Xcode

iOS development has traditionally required a Mac running Xcode, a setup that demands significant storage and restricts developers using Windows machines. A developer explored several alternatives — including VS Code with remote Mac compilation, CI platforms like Codemagic, and the now-discontinued AppCode — but found each had meaningful limitations for day-to-day coding. KXApp, a newer IDE, bundles its own iOS compilation and signing toolchain, removing the dependency on Xcode entirely and allowing real-device deployment in fewer steps. Built on a VS Code editor layer, it supports Swift, Objective-C, and Flutter projects, and handles incremental syncing to connected iPhones after code changes. Xcode is still considered superior for complex configurations, Storyboard editing, and deep performance analysis with Instruments, but KXApp is positioned as a lighter alternative for common development workflows.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Ninth Circuit Rules Amazon's CFAA Claims Weak Against AI Browser Acting for Users

Amazon filed a lawsuit in November 2025 against AI company Perplexity over its Comet browser, citing federal and California computer fraud statutes. A district court initially granted a preliminary injunction in March 2026, but the Ninth Circuit vacated it in August 2026. The appeals court found that because Perplexity's browser was operated by Amazon's own signed-in customers using software they had chosen, it did not constitute unauthorised access under computer-misuse law. The ruling is the first federal appellate decision on whether AI agents acting on behalf of users may access online platforms, though the panel stressed it was ruling on the specific record rather than setting broad doctrine. Contract, trademark, and state-law claims were not addressed, and the court noted that different facts — such as agents operating at large scale without authentication — could yield a different outcome.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Apply Threat Modeling Principles to LLM Tool-Calling Systems

As large language models gain the ability to call external tools, security researchers are urging developers to treat the context window as an untrusted input and apply least-privilege design principles. Each tool exposed to a model should be evaluated for what data it reads, what it modifies, and who has authorized its use. Credentials should be scoped per invocation rather than per deployment to prevent an agent from accumulating the permissions of all users it serves. Irreversible actions, such as deleting production data, should require out-of-band confirmation that the model itself cannot generate. Full tool-call payloads, not model-generated summaries, should be logged to ensure reliable audit trails during investigations.

0 comments Read more at DEV Community