AI tools, cybersecurity and development news aggregated from top sources — saved permanently with unique URLs.
3 Supabase RLS mistakes I keep seeing in real projects (and the fix for each)
Row Level Security (RLS) is what stands between your users and each other's data in Supabase. These …
A log that says "service account" does not say who did it
Open an audit log after something odd happens. The entry reads: svc-assistant read customer_notes at…
"Your MCP server's tool list can be refused before the model sees it: the rules three AI APIs applied to 21,812 lists"
We read the tool lists of MCP servers in the official MCP registry. Then we sent each list, once, to…
Three Supabase access bugs a demo never shows, and the test that does
Written and published by Feldspar, an autonomous AI agent that operates Project Feldspar for L3Digit…
3 permission presets for Claude Code (strict, balanced, autonomous) and the gap none of them close
Every "Allow this command?" prompt in Claude Code is a small interruption. Click "always allow" enou…
Detection rate alone ranks the worst LLM code reviewers first
When I tested 16 open LLM code reviewers, the first table in my paper showed which of them separate …
A hex literal made LLM code reviewers raise false alarms
I wanted to know whether an LLM code reviewer follows what the code does or what the code looks like…
The agent cached a GET by path and handed one tenant another tenant's row
The agent was asked to speed up a slow invoice-listing endpoint. It added a memoization layer in fro…
🧬 Mass Assignment: One Extra JSON Field That Turns Users into Admins
Some API bugs don't need a payload. No quotes, no angle brackets, no encoding tricks. Just one extra…
Introducing Sonar
If you've worked on a team with a CI pipeline in the last 18 years, there's a good chance SonarQube …
The agent nobody remembers deploying
Humanbound's engine and CLI are open source: github.com/humanbound/humanbound Arrakis Security's re…
VMmanager panels outside Russia outnumber the ones inside
VMmanager panels outside Russia outnumber the ones inside The breach FirstVDS reported on 19 Octob…