Iranian Banks Lose SSL Certificates as OFAC Sanctions Take Effect

·1 views

Several Iranian banks are having their SSL certificates revoked following enforcement of OFAC (Office of Foreign Assets Control) sanctions. SSL certificates are essential for securing web traffic and verifying the legitimacy of websites, meaning affected banks may struggle to maintain secure online services. The revocations appear to be carried out by certificate authorities complying with US Treasury sanctions requirements. As a result, some Iranian banks are also reportedly making changes to their web domains. The development highlights the growing impact of financial sanctions on the digital infrastructure of targeted institutions.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

One-Page Charter and Linter Script Proposed to Prevent AI Agent Pilot Failures

A software development post argues that most AI agent pilots fail not due to model quality but because of unclear ownership and poor handoff structure. The author proposes a single-page charter assigning three distinct roles — scout, scribe, and signer — each with defined responsibilities and a strict one-way handoff sequence. A hard-coded stop rule and a named revert command are required fields, ensuring the pilot has a clear exit path before it begins. A lightweight Python linter, designed to run in CI, validates the charter by rejecting missing fields, malformed dates, and placeholder text such as 'tbd' or 'todo'. The entire system is intended to fit on one wiki page and one script, reducing ambiguity and drift during time-boxed agent experiments.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why Causal Diagnosis, Not Metric Breaches, Should Trigger AI Agents in Production

Anthropic's AI-Native SDLC Playbook outlines a six-stage software development lifecycle where autonomous agents handle production monitoring, with Stage 6 closing the feedback loop by triggering a Claude session when a metric breaches a statistical control band. The approach uses deterministic detection — no language model decides when to fire — applying Western Electric rules across sigma thresholds to escalate from logging, to read-only diagnosis, to limited action such as opening a pull request. However, a key limitation is that single-metric band watches can miss distributed degradation across dependent services, where no individual threshold is decisively breached. Tools like Causely address this gap by computing causal diagnoses from existing instrumentation, identifying root causes and their downstream effects across the cluster before the agent begins its work. Starting an agent from a named causal issue rather than a raw metric breach means it spends less time reconstructing what broke and more time acting on pre-established evidence.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Engineers Urged to Add Review Boundaries Around AI Code Generators

A software architect argues that using free AI models and servers changes your budget but not your security threat model, making a defined review boundary around code generators essential. The proposed architecture treats every AI workspace as ephemeral and disposable, assuming it can be reclaimed mid-run and that model versions may change without notice from providers. Generated code is never written directly to a working repository; instead, it flows through a five-stage pipeline ending in a human reviewer decision before anything reaches the main branch. A shell script and Python tool are proposed to capture each run's output as a structured 'packet' containing a diff, model fingerprint, and file classification, giving reviewers clear context. The author emphasizes that prompt-level restrictions are insufficient and that egress denial and sandbox-layer controls must be enforced at the infrastructure level.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Freeze Your Error Taxonomy Before AI Agents Generate Code, Case Study Shows

A software engineering case study demonstrates how AI coding agents produce inconsistent HTTP error mappings when given no predefined error taxonomy to work from. Without a frozen contract, an agent assigned the same failure mode may return different HTTP status codes and incorrect retry semantics across separate generations. The proposed fix involves committing a machine-readable JSON file that defines each error code's HTTP status, retry behavior, message key, and log level before any code generation begins. A SHA-256 hash of that contract file is stored in the repository and verified in CI, preventing silent modifications during automated regeneration passes. This approach keeps the generated mapper as a pure function of an immutable contract, removing the agent's ability to invent or drift on policy decisions.

0 comments Read more at DEV Community