US Government Ran Surveillance Campaign Targeting Anti-ICE and Leftwing Protesters

·1 views

The US government conducted a mass surveillance operation directed at left-wing activists and protesters opposing Immigration and Customs Enforcement (ICE). The campaign was reported by The Guardian on August 13, 2026, based on findings about federal monitoring activities. The spying targeted individuals involved in anti-ICE demonstrations across the country. The revelations have raised significant concerns about civil liberties and the scope of government surveillance of political dissent.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

How to Add Model Fallback in a Node.js App Using OpenAI-Compatible APIs

Developers building on OpenAI-compatible APIs can improve app resilience by implementing a model fallback system in Node.js using the official OpenAI JavaScript SDK. The approach tries a primary model first and automatically switches to a secondary model only when the initial request fails due to rate limits, server errors, or temporary unavailability. A simple loop iterates through a list of models, catching errors and logging warnings before moving to the next option. Experts caution against silently retrying authentication errors, as a 401 response typically signals an invalid or missing API key that must be fixed directly. JinzeAI, which offers an OpenAI-compatible endpoint for users outside mainland China, is currently in public beta and provides limited free test credit without requiring payment.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer shares technical fixes for importing custom .qbo files into QuickBooks

A developer building a browser-based tool to convert bank CSV files into QuickBooks-compatible .qbo format has documented several undocumented import requirements discovered through experimentation. The .qbo format is based on OFX 1.0.2, an SGML standard requiring a specific 9-line header, CRLF line endings, and only aggregate tags to be closed — not leaf tags. QuickBooks validates files against an internal bank registry and requires the INTU.BID field to be present, even if the surrounding block is omitted, otherwise rejecting the file with a vague error. The software deduplicates transactions using the FITID field, meaning randomly generated FITIDs can cause duplicate entries when date ranges overlap on re-import. The tool is free for single-file use, runs entirely in the browser without uploading data, and has so far only been tested on QuickBooks Desktop for Mac 2024.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer solves VS 2026 debugger detection using window title parsing

A developer building a Coding Activity Tracker needed to detect when Visual Studio was debugging an external process, but found that the standard Debugger.IsAttached method only works for the current process. Multiple alternative approaches — including WMI queries, process-tree walking, handle inspection, and CPU sampling — were tested and rejected due to unreliability or performance issues. The eventual solution relied on a simple observation: Visual Studio always displays the active project name in its window title during a debugging session. The tracker now reads that window title, extracts the project name, and checks whether a matching process is running to confirm debugging activity. The fix highlights how a straightforward platform behavior can outperform complex programmatic detection strategies.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Zero-Trust SSH Blueprint Uses FIDO2 Keys and Certificate Authority to Kill Static Keys

A technical blueprint published on DEV Community outlines a zero-trust SSH access model designed to replace traditional static public key management across server fleets. The approach combines FIDO2 hardware tokens, such as YubiKeys, with ed25519-sk key pairs that bind private key material to a physical device and require a PIN and touch to authenticate. A centralized, offline SSH Certificate Authority signs user access requests and issues short-lived certificates valid for only eight hours, eliminating the need to manually manage authorized_keys files on individual servers. This architecture reduces administrative overhead and shrinks the blast radius of compromised developer workstations by ensuring no long-lived credentials persist on target machines. Revoking or granting user access requires no changes on the servers themselves, as trust is managed entirely through the central CA.

0 comments Read more at DEV Community