Ops AI Agents Risk Following Instructions Planted by Attackers in Logs and PRs

·3 views

Agents that triage incidents or review code read text that attackers can write, including application logs, alert labels, pull request descriptions, wiki runbooks, and third-party tool descriptions. Because the model cannot reliably distinguish data from instructions, a crafted log line or PR claim can steer an agent's conclusions, such as reporting an incident as resolved. The article cites a February 2026 incident in which the Context7 MCP documentation server served attacker-registered instructions to connected coding agents, and an October 2025 joint evaluation in which most of twelve prompt-injection defenses failed against adaptive attackers. The author argues that prompt-only hardening provides little protection, since system prompts cannot reliably override injected content. Developers should therefore treat every externally writable input as a potential attack surface rather than trusted ground truth.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

US LTL Freight Class Density Scale Changed in July 2025, Many Calculators Outdated

The National Motor Freight Traffic Association rewrote the density scale used to determine freight class for most US less-than-truckload shipments, effective July 19, 2025. The revised scale expanded from 11 to 13 density-based classes, and many commodities that once carried a fixed class now classify by density alone. The developer of CheckFreightClass reports that numerous online calculators still rely on the old table, some even producing a class 500 result that the current scale cannot generate. The article explains that density is calculated by dividing weight by volume, including pallets and overhang, and recommends classing each piece individually rather than blending densities. It also advises shippers to verify outputs against published test cases, since boundary values are where calculators most often diverge.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Flutter developers target jank-free 120Hz rendering with DevTools profiling and leak fixes

Modern 120Hz phones leave only about 8.3 milliseconds per frame, so even small delays cause visible stutter. Flutter splits work between the UI thread, which runs Dart logic and layout, and the raster thread, which sends draw calls to the GPU, and either exceeding the budget drops a frame. Developers are advised to profile on physical devices in Profile Mode rather than Debug Mode, using DevTools' frame chart, CPU profiler and timeline. The article highlights costly patterns such as saveLayer triggered by Opacity widgets, excessive rebuilds from top-level state changes, and repaints that RepaintBoundary can isolate. It also warns that uncancelled stream subscriptions and listeners can cause memory leaks that eventually stall the app.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Fixing nginx 'host not found in upstream' error in Docker

An nginx container in Docker can exit immediately with a 'host not found in upstream' error when the backend hostname cannot be resolved at startup. nginx resolves each proxy_pass hostname once when it launches, so it refuses to run if Docker's DNS cannot answer for that name. A test on Docker Engine 29.9.2 reproduced the failure, and the same error is widely reported in community forums. The main cause is that the backend container is not running or is not on the same user-defined network as nginx, since the default bridge network provides no container name resolution. Solutions include attaching both containers to one user-defined network, using the correct service name or alias, or adding a resolver directive to let nginx start without the backend and track IP changes.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Bubble Shooter Game Adds Symbols So Color-Blind Players Can Match Bubbles

A relaxing Flutter bubble shooter called Bubble Pop was built to remain playable for people with color vision deficiency. Each bubble carries a distinct symbol alongside its color, letting players match by shape as well as hue. Symbols are enabled by default and the game supports deuteranopia, protanopia and tritanopia. The design avoids timers, pressure and purchases, and saves progress locally without requiring an account. The article presents the approach as a general principle that any app should follow when color carries meaning.

0 comments Read more at DEV Community