SShortSingh.
Back to feed

JANISSARY 7.3.0 Reports F1 0.921 on OWASP Benchmark, Reproducible via One Command

0
·3 views

Version 7.3.0 of the JANISSARY security scanner has been released, with a code freeze so that it is functionally complete and protected against regressions. On the OWASP Benchmark's DAST-applicable corpus it reports an F1 score of 0.921 with precision of 1.000, and the run artifacts are committed so the result can be reproduced with a single command. The score rises from a 0.902 single-pass baseline after a re-scan of missed findings at a longer timeout, a recovery step the maintainers say was pre-registered before the run. The project also flags limitations: path traversal recall is weak at 0.049 to 0.308, so it should not be used for that class in 7.x, and an auth-gated target or single-page application can hide or distort findings. Further changes are slated for the 8.x line, while 7.x will receive only hotfixes.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

AgentWebUI: One Web Interface for Driving Multiple CLI Coding Agents

A group of developers at Hackers Hostel built AgentWebUI, a browser-based interface that lets users control CLI coding agents such as Claude Code, Codex, Gemini CLI and OpenCode from a single shared front end. The project grew out of frustration with each agent having its own commands, approval prompts and output format, and with teams repeatedly rebuilding similar chat dashboards. It became feasible as agents began adopting a shared protocol called ACP, which allows one interface to communicate with many agents. The original feature-heavy version, now called AgentWebUI Pro, was followed by a lightweight rewrite with a single dependency and no build step, created for Hacktoberfest week 3. The stated goal is simple installation and immediate use: open the browser and talk to your agent.

0
ProgrammingDEV Community ·

iDeck Runs Steam's Windows Client on iPhone Through a Wine-Based Runtime

iDeck is an experimental, AI-assisted project that runs Valve's Windows Steam client, including Big Picture mode, on an iPhone using Madeira's Wine, FEX and Metal runtime. Compatible PC games execute locally on the device rather than being streamed from a PC. On an iPhone 15 Pro Max, sign-in, Steam Guard, library browsing and game startup have been observed, though iPad support has not been validated. The developer acknowledges the project remains research, with startup hangs, limited game compatibility and unfinished controller and long-session testing. The public release is source-only, and the project is independent of DroidDeck and not an upstream-endorsed port.

0
ProgrammingDEV Community ·

Comparing Chatbot APIs for Healthtech Triage: Quality, Latency, and Portability

The article argues that evaluating chatbot APIs for healthtech support should be a controlled test of triage quality, latency, and provider portability rather than a public leaderboard. It recommends keeping the provider behind a small, provider-neutral interface so that switching vendors does not require rewriting queue logic or handoff code. Triage is framed as routing and escalation decisions, with the model not allowed to invent clinical answers. Evaluation should use a reviewed set of synthetic tickets, scoring routing accuracy, unsafe escalation, and human-review flags separately, alongside time to first token and time to a usable decision. The author also cautions against comparing streamed output from one provider against fully buffered output from another, since that measures the interface rather than the model.

0
ProgrammingDEV Community ·

YouTube-Zeitlimit auf dem iPhone: Was die Erinnerungen bewirken und was wirklich stoppt

YouTube bietet keine Funktion, die ein Nutzerkonto nach einem täglichen Zeitlimit sperrt, sondern nur Erinnerungen, die sich wegtippen lassen. Dazu zählen Pausenerinnerungen, eine Schlafenszeit-Erinnerung und ein Limit für den Shorts-Feed. Wer zu einer festen Zeit tatsächlich gestoppt werden möchte, muss laut Artikel die Bildschirmzeit des iPhones nutzen, die die App sperrt, sowie einen Code, den eine andere Person kennt. Der Autor, Entwickler der App minulo, nennt zudem Einschränkungen der YouTube-Erinnerungen, etwa dass der Timer bei App-Wechsel oder Abmeldung neu startet. Die Angaben beruhen laut Artikel auf YouTube- und Apple-Hilfeseiten, Stand Oktober 2026.