ghostsplice

GhostSplice: cross-channel trust fragmentation attack PoC Proof-of-concept code for GhostSplice , an attack from the ASSET Research Group. The full write-up is "The AI refused to steal the secrets. So we handed it a form.". The idea in plain words AI coding assistants like Cursor, VS Code with...

otto-support

Otto Support AI コーディングアシスタント向けのカスタマーサポート MCP サーバー。単一の Go バイナリ、階層型認証、4 つのロールレベルにわたる 19 のツール。 mcp-go で構築。 クイックスタート オプション A: Docker コンテナ（推奨） すべてを分離されたコンテナ内で実行します。Claude Code がプリインストールされており、MCP サーバーが自動的に起動します。 root@kitploit: Build docker build -t otto-support . Run with your API key docker run -it -e...

AI Coding Assistants Secretly Copying All Code to China

There's a new report about two AI coding assistants, used by 1.5 million developers, that are surreptitiously sending a copy of everything they ingest to China. Maybe avoid using them...

This Week in Spring - April 8th, 2025

Hi, Spring fans! How are ya? I'm doing fine. Excited, even. You see, Spring AI M7 is coming soon! In theory, it drops on Thursday. Don't hold us to that — these things can change :- But soon , and it's turning out to be a whopper of a release! You should try upgrading your application to the new ...