SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

Security report alleges ChatGPT silently routes data between connectors; bounty requires ID verification

0
·2 views

A security follow-up posted on OpenAI's community forum describes a tool call that was reportedly routed silently to a different connector. The post suggests data may have been passed between connectors without the user's knowledge. A related bounty program reportedly requires participants to submit an ID card. The story gained modest attention on Hacker News, with 18 points and 3 comments at the time of posting. The article text available is limited, so the full technical details and OpenAI's response are not confirmed here.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Is GitHub Actions with ArgoCD or Flux Still the Right Continuous Delivery Stack in 2026?

For years, pairing GitHub Actions with ArgoCD or Flux has been the default choice for continuous delivery, linking build-and-test automation with GitOps-based Kubernetes deployments. The article notes that the rise of microservices and multi-cloud architectures exposes limits in this combination, such as pipeline bottlenecks and weak cross-platform support without extra configuration. It also points to specialized alternatives like Spinnaker, Tekton, and Harness, which offer advanced orchestration, canary analysis, and policy-based deployments. The piece argues that teams should weigh total cost of ownership, tool sprawl, observability, and regulatory needs before choosing their toolset. It presents a decision framework to help teams select the most suitable continuous delivery solution for 2026.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Hex editor gains mirror view for referencing another offset in the same binary

A developer has added a mirror view to a hex editor they are building, letting users select any offset in a binary file to refer to while working. The feature lets a user keep a second location visible alongside the one they are editing. The developer describes it as a capability they had wanted for a long time. The post was published on DEV Community and presents the addition as a personal project update.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Idempotency Keys Are Not HTTP Caching: Lessons From Wiring Payment Replay

A developer explains why idempotency keys for paid API calls should not be treated as simple HTTP caching. The article describes the payment-identifier extension in @x402/extensions 2.30.0, which maps the same ID and same request to a replayed response, a conflicting request to a 409, and an in-flight request to a 503 with Retry-After. The author found that keying on the router template was flawed, since every route shares that string, and that the key must include the concrete path and a hash of the request body, plus the query string for cached GETs. The piece also recommends returning machine-readable retry guidance in the response body, avoiding replay of sensitive headers like CORS and CSP, and explicitly marking replayed responses. Finally, it advises bounding the cache by TTL, body size, and total entries, noting that the in-flight marker is lost on restart and a persisted replay lock is needed.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Crypto store cut to one wallet address and unique payment amounts across six chains

A small digital goods seller initially accepted only BEP20 USDT on BSC, and despite a working payment setup, made zero sales over two weeks. Buyers who had funds on other chains left at the payment screen because they could not pay with the assets they held. The seller rebuilt the checkout around a single wallet address that accepts two stablecoins across six chains. Orders are identified by unique micro-amounts rather than per-chain order numbers, with a watcher scanning all enabled chains for matching transfers. The article also covers pitfalls such as differing token decimals between chains and the need for server-side log filtering to keep RPC usage manageable.

0 comments Read more at DEV Community