Offboard tool aims to close access gaps left when team members depart

·2 views

After a developer left a team, their GitHub, Apple, and Vercel accounts remained active, showing how departures can be incomplete even when the calendar says otherwise. The author built Offboard to discover leftover access, have a human approve each exact change, remove it, and independently verify the result. In a controlled test, a separate GitHub account was investigated within a shared Mattermost room, with a Codex agent using limited tools that cannot approve or remove access. The agent's read-only scan identified the account's organization membership, and the dashboard displayed the same findings and decisions. Approval is handled through a private, single-use email link that expires after 15 minutes and requires explicit confirmation from the person affected.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Hosting gratuito para bots de Discord: guía práctica para 2026

Un bot de Discord solo responde mientras su proceso está en marcha, por lo que deja de funcionar al apagar el equipo o cerrar la terminal. Un hosting gratuito soluciona ese problema, aunque casi siempre impone límites de tiempo, memoria, CPU o almacenamiento. La guía toma como ejemplo el plan gratuito de ACLClouds, con 4 días renovables, 315 MB de RAM y 0,25 vCPU por bot, y advierte que un plazo caducado detiene el bot aunque el código sea correcto. Recomienda comprobar estas cifras en la página del proveedor antes de depender de ellas, y ofrece una lista de verificación aplicable a cualquier servicio. También incluye un ejemplo práctico con discord.js y Python para un bot sencillo que responde «pong» al comando !ping.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Hiring Tip: Test Engineers With a Token-Budget Ledger, Not Just a Demo

The article argues that a working demo says little about an AI engineer's skill, since the real test is how a service behaves once its budget runs out. It proposes a take-home task: build a small question-answering service over a fixed corpus that calls a hosted model, deploys to a public URL, and keeps a machine-readable ledger of every token spent. Candidates receive a fixed token allotment and must explain what the system does when that allotment is exhausted. The author provides a roughly forty-line Python sample that caps output tokens based on remaining budget and charges for prompts and completions, along with tests that check refusal at the limit. The piece also notes that free model access and hosting from MonkeyCode make the exercise practical to run at scale, while advising reviewers to verify current terms before use.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How AI interview copilots stay hidden on screen, and what they cannot do

A founder of one such tool explains that these assistants work by marking a desktop window as excluded from screen capture, so it appears on the user's monitor but not in recordings or shared screens. The approach only works for native desktop apps, not browser tabs or second-device setups, and it hides the window rather than the user, who can still be seen by a camera or flagged by proctoring software. The article compares how tools capture audio, whether they avoid stealing keyboard focus, and how much they stop streaming text after an answer. It also notes that most competitors run in-app analytics and cloud transcription, and that their hiding features are often limited to top-tier or specific plans. Pricing models vary widely, with eight of nine tools billing monthly, weekly, quarterly or through expiring credits, while the author's own product is a one-time purchase.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Lenacapavir at $40 a Year Could Reshape HIV Prevention, Paired With a VR Molecular Viewer

US authorization of a generic lenacapavir priced at $40 per year for low- and middle-income countries could significantly expand HIV prevention worldwide. Lenacapavir is the first approved capsid inhibitor, a drug class that targets the viral protein shell rather than the enzymes targeted by conventional treatments. The drug binds between capsid subunits, stabilizing the structure and blocking viral uncoating, a mechanism that is hard to grasp from static 2D diagrams. NexoPeek, developed by Seven Sportz for Meta Quest, aims to make such molecular structures explorable in immersive virtual reality. The article describes the app's search tool, which pulls protein structure data from several public databases at once, and reports the author's test of viewing the HIV-1 capsid and the lenacapavir binding pocket.

0 comments Read more at DEV Community