Solo Swiss developer unveils EDNA, a device-local system to verify human users without biometrics

·2 views

An independent developer based in Bern, Switzerland, has built OpenOS EDNA, a system aimed at distinguishing humans from bots online. The tool analyzes subtle behavioral patterns such as mouse timing, scroll rhythm, and touchpad pressure directly on the user's device. Only a verification result leaves the device, so no camera scans, ID uploads, or cloud-stored biometric data are needed. The system also offers a passwordless login tied to a cryptographic identity chain, and the developer has published a public verification test suite for independent checking. The creator describes the project as an independent effort with no investors or corporate backing.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Kisumu Market Day brings creators and makers together at Baraza Media Lab

A developer who usually writes about code and Bitcoin Lightning wallet work from Kisumu, Kenya, stepped away from the keyboard to attend Kisumu Market Day. The two-day event at Baraza Media Lab gathers the city's creators, makers and storytellers, and it opened with a photo exhibition about Lake Victoria. The author went because the people building things locally are the ones their tools are meant to serve, and in-person conversations reveal needs more clearly than an issue tracker. The second day is set for Saturday, 14 November, from 8:30am to 7pm at Lake Basin Mall. The author noted the post is not sponsored.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Fake CRA Calls and Texts Target Canadians With Arrest Threats and Refund Lures

Scammers posing as Canada Revenue Agency officers are phoning and texting Canadians with threats of arrest or fake refund offers. Callers claim a warrant has been issued over unpaid taxes and demand immediate payment, often through gift cards, cryptocurrency, or e-transfers. Texts promising unclaimed refunds direct recipients to counterfeit government login pages designed to harvest personal and banking details. The Canada Revenue Agency does not demand payment this way or threaten police action. Authorities advise hanging up, checking accounts directly through canada.ca, and reporting the attempt to the Canadian Anti-Fraud Centre.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

HPE Warns of Critical ArubaOS AOS-10 Authentication Bypass, CVE-2026-79874

Hewlett Packard Enterprise has published an advisory for CVE-2026-79874, an authentication bypass in an AOS-10 API of its ArubaOS networking software that it rates 9.3 Critical. An unauthenticated attacker on the adjacent network could circumvent authentication controls, potentially gaining administrative access, changing system configuration, or exposing sensitive data. Affected ranges include 10.8.0.0 to 10.8.1.1, 10.7.0.0 to 10.7.2.6, and 10.4.0.0 to 10.4.1.13, while AOS-8 is not listed for this CVE. HPE advises upgrading to 10.8.1.2 or later, 10.7.2.7 or later, or 10.4.1.14 or later as applicable. Public details on the exact endpoint and exploit method remain limited, and no evidence of exploitation has been reported.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Study finds up to half of a repo's tokens are wasted on lockfiles and test data

A developer built ctxray, a CLI that estimates how many tokens a coding agent would ingest from a repository and flags files that add cost without useful context. Scanning six popular open-source projects in November 2026, the tool found that 38 to 55 percent of tokens in several large repos came from files like lockfiles, test fixtures and generated assets, while the small express repo came back essentially clean. The author notes these totals are an upper bound, since agents read files selectively rather than the whole tree at once. The tool can generate an ignore file built from its findings, using .gitignore syntax compatible with several AI coding tools, along with a starter AGENTS.md. Its token counts use a rule-based approximation calibrated against a real tokenizer, with a reported median error of about 6 percent per file. The scanner and initialization features are free, and the author plans a paid tier for reports and CI integration.

0 comments Read more at DEV Community