A developer at Axonscape has flagged a common security flaw in AI-built apps: OpenAI or Anthropic API keys exposed in browser code when clients are created with dangerouslyAllowBrowser or keys are read from VITE_ or NEXT_PUBLIC_ prefixed environment variables, making them readable by any visitor and spendable on the owner's account. The writeup recommends moving all AI calls to a server-side API r…
[
{ "id": "art-001", "src": "dev.to",
"title": "OpenAI or Anthropic API key exposed in the brows…",
"published": "2026-11-05T09:40:53+00:00",
"sentiment": "negative"},// … 9 more
]
A small-business owner running five software projects on a single server used Claude Code to build them, and after roughly 460 commits over five days that grew the hook count from 28 to 46, the build stalled at 4 of 7 pa…
Baidu released ERNIE-5.5-Flash-Base, a sparse Mixture-of-Experts language model with 280B total parameters, 14B activated per token, pre-trained from scratch on 33.5T tokens with a 128K training context and support for a…
TesterArmy, a Y Combinator-backed startup based in Poland, has released an end-to-end agentic testing framework called e2e, accompanied by example repositories covering iframes, Stripe, PayPal, Paddle and RevenueCat paym…
OpenAI announced on November 4, 2026 that ChatGPT can now natively generate and edit animated looping GIFs using its new Images 2.6 foundation model, with the feature available immediately to Plus, Team and Enterprise su…
ChirrOp released @chirropjs/chirrop-mcp, an MCP server that exposes the full ChirrOp monitoring API as tools, resources and prompts to MCP-compatible clients including Claude Code, Claude Desktop and Cursor, installable …
HubSpot operates a remote MCP server at mcp.hubspot.com that lets Claude, ChatGPT, Gemini and other MCP clients read most CRM objects and write records only after an explicit user confirmation step, with every action bou…
A policy-aware LLM-to-SQL approach that rewrites generated queries against user access rules leaked zero unauthorized rows across 900 synthetic test queries, compared with up to about 80 unauthorized rows for plain text-…
Nvidia disclosed in early November 2026 that its Brev cloud GPU development platform saw unauthorized activity from October 4 to October 20, 2026, and that Brev-provisioned SSH keys for customer VM access may have been e…
OpenAI released ChatGPT Images 2.6 on November 4, 2026, adding GIF animation from uploaded photos or text prompts, frame-level editing, 0.5x to 2x playback speed control, and reusable saved reference images of people, pe…
Free JSON API · 75 OpenAI tools · 65 MCP tools for Claude
Plug into Claude, ChatGPT, or any agent framework. JWT-scoped keys for prod, no rate limit for dev. Structured entity / topic metadata on every article.
sponsoredbrought to you by zahid.host4,200+ projects deployed · EU only
welcome back — you have 3 new commits ready to deploy.
Ship your project in 30 seconds with zahid.host
EU-based hosting built for the people who actually read this site: developers, indie hackers, and AI agents shipping side projects. Git-push deploys, automatic HTTPS, fair pricing.