SmartSuite Dropped Its Free Plan, Highlighting Risks of Hosted Work OS Tools

·15 views

In January 2026, SmartSuite removed its free plan, leaving teams that relied on it scrambling without prior warning. The incident illustrates a broader pattern in the work-OS software category, where vendors have quietly repriced plans, restricted features to higher tiers, or folded products after acquisitions. The author argues the real risk of hosted tools is not vendor misconduct but the inherent dependency on a third party's commercial decisions. As an alternative, the author promotes Appdor, a self-hosted work OS built on standard Postgres, where data remains accessible via standard database tools regardless of the vendor's choices. The key question posed to teams is not whether their vendor is trustworthy, but what a sudden change in terms would actually cost them to fix.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Same AI Model, Better Engineering: Backboard CLI Outscores Claude Code on Terminal-Bench

A team running Backboard CLI on Terminal-Bench 2.1 achieved a score of 85.4% using Claude Opus 4.8 via Amazon Bedrock, outperforming Claude Code's published score of 78.9% on the identical underlying model. The result suggests that the system architecture surrounding an AI model — including context management, tool selection, and failure handling — can significantly influence benchmark performance. Beyond accuracy, the Backboard run cost $280.72, roughly 49% less than the then-verified leaderboard leader, which scored 83.8% at a reported $552.67. The team argues this shifts the key question from which model performs best to which system delivers reliable results at sustainable cost. They also emphasize that well-engineered AI infrastructure should remain adaptable across models, reducing the need to rebuild entire stacks whenever a newer model emerges.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AI, Blockchain, and Surveillance Converge in a Growing Digital Rights Crisis

The rapid rise of AI and blockchain technology is intensifying global debates around cybersecurity, data ownership, and privacy rights. A cyberattack on crypto infrastructure firm Haruko exposed operational security vulnerabilities affecting 15 institutional clients, highlighting risks beyond blockchain's core cryptographic protections. Internal discussions among Microsoft employees and an ongoing New York Times lawsuit against OpenAI and Microsoft raise serious ethical and legal questions about whether AI training on scraped data constitutes large-scale intellectual property theft. Meanwhile, the U.S. Department of Homeland Security's predictive policing initiatives have drawn criticism over constitutional concerns related to algorithmic surveillance and civil liberties. Analysts argue these developments are not isolated incidents but reflect deeper structural challenges in how data is generated, owned, and governed in the digital age.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Venus Core Pool Governance Rated High Risk With Nine Attack Vectors Identified

A security audit of Venus Core Pool, a DeFi lending protocol with approximately $1.28 billion in total value locked, has identified nine distinct governance attack vectors and assigned an overall risk rating of 7 out of 10. The review, dated September 18, 2026, focused on the on-chain governance flow covering proposal creation, voting, execution, and contract upgrades. Among the most critical findings are a flash-loan-driven voting power inflation attack scored 9/10 and a timelock bypass via re-entrancy scored 8/10, both considered technically feasible. Auditors noted that the governance subsystem had not been thoroughly examined since the v2.3 upgrade in March 2025, leaving key administrative functions exposed. The report attributes the elevated risk to a combination of a large treasury, powerful admin controls, and a relatively permissive quorum model that could be exploited by a coordinated or well-funded adversary.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer builds read-only AI agent that audits AWS accounts in under two minutes

A developer has created an AI agent capable of auditing an AWS account for security and cost issues, identifying problems such as publicly exposed S3 buckets, open SSH ports, disabled GuardDuty, and wasted spend on idle Elastic IPs. The entire audit takes roughly two minutes to complete. The agent is deliberately restricted to a read-only IAM identity, meaning AWS itself blocks any write, delete, or modify actions before they can execute. The build relies on just one JSON configuration file and a Markdown checklist, requiring no Python frameworks or vector databases. The full source code has been published on GitHub for others to deploy against their own AWS accounts.

0 comments Read more at DEV Community