NPM flooded with malicious packages downloaded more than 86k times
#HackerNews #NPM #malicious #packages #security #vulnerabilities #cyber #threats #software #development
It seems to be quite convenient that google flags immich.app site as dangerous, since immich is an environment in which you can host your own photographs in a safe manner without Google.
#Immich #app #self #hosting #technology #OpenSource #programming #Linux #photographs #Google #Malicious
Michael Downey 🧢
boosted
→ We Are Still Unable to Secure LLMs from #Malicious Inputs
https://www.schneier.com/blog/archives/2025/08/we-are-still-unable-to-secure-llms-from-malicious-inputs.html
“This kind of thing should make everybody stop and really think before deploying any AI agents. We simply don’t know to defend against these attacks. We have zero agentic AI systems that are secure against these attacks.”
“It’s an existential problem that, near as I can tell, most people developing these technologies are just pretending isn’t there.”
→ We Are Still Unable to Secure LLMs from #Malicious Inputs
https://www.schneier.com/blog/archives/2025/08/we-are-still-unable-to-secure-llms-from-malicious-inputs.html
“This kind of thing should make everybody stop and really think before deploying any AI agents. We simply don’t know to defend against these attacks. We have zero agentic AI systems that are secure against these attacks.”
“It’s an existential problem that, near as I can tell, most people developing these technologies are just pretending isn’t there.”
Tyng-Ruey Chuang
boosted
https://blog.gslin.org/archives/2025/08/16/12575/stardict-%e9%a0%90%e8%a8%ad%e6%9c%83%e5%b0%87%e5%89%aa%e8%b2%bc%e7%b0%bf%e7%9a%84%e5%85%a7%e5%ae%b9%e9%80%8f%e9%81%8e-http-%e4%b8%8d%e6%98%af-https-%e5%82%b3%e5%88%b0%e4%b8%ad%e5%9c%8b%e7%9a%84/
StarDict 預設會將剪貼簿的內容透過 HTTP (不是 HTTPS) 傳到中國的伺服器上
#china #chinese #clipboard #http #https #malicious #privacy #security #stardict
https://blog.gslin.org/archives/2025/08/16/12575/stardict-%e9%a0%90%e8%a8%ad%e6%9c%83%e5%b0%87%e5%89%aa%e8%b2%bc%e7%b0%bf%e7%9a%84%e5%85%a7%e5%ae%b9%e9%80%8f%e9%81%8e-http-%e4%b8%8d%e6%98%af-https-%e5%82%b3%e5%88%b0%e4%b8%ad%e5%9c%8b%e7%9a%84/
StarDict 預設會將剪貼簿的內容透過 HTTP (不是 HTTPS) 傳到中國的伺服器上
#china #chinese #clipboard #http #https #malicious #privacy #security #stardict