✓ Mercedes source code exposed via GitHub token leak (2024/02/01)

2024/02/02 Thu

GM 🫡

We send you IT news and open source trends that happened while you were sleeping.

If you would like to receive the newsletter every morning, click the button below.

+ Subscribe

1. IT News📰

1) Mercedes source code exposed via GitHub token leak

Mercedes-Benz's GitHub token was leaked, giving the company unlimited access to the company's source code. This exposed intellectual property, passwords, and cloud access keys. Attackers were able to use this token to steal Mercedes' source code or cause a data leak. GitHub tokens were leaked in September, discovered in January, and recovered in late January. Mercedes-Benz is a large premium vehicle brand, selling millions of passenger cars every year.

2) Chinese brain chip helps paralysed man regain mobility 

Chinese scientists say they have developed an implant that wirelessly connects the brain to a computer. The device is less invasive than Elon Musk's Neuralink chip and has shown remarkable progress in its first patients. The device is called NEO, and it allowed quadriplegic patients participating in clinical trials to move prosthetic limbs with their brains. The device is said to not cause damage to neurons.

3) Taylor Swift debacle spurs tech world and US lawmakers into action

As fake sexual images of Taylor Swift spread across social media, Microsoft modified its generative AI tool and the U.S. Congress proposed new regulations. These images exposed the problem of non-consensual deepfake pornography. The White House also showed interest in this issue. X is working to stop the spread of Swift images, and the US Senate has introduced legislation that would punish those who create such images.

2. Top 5 Hot Open Source Projects 🔥

I collected some hot open source projects yesterday. :)

1) IPTV

IPTV Live Streaming Source is a project that automatically integrates video streams with the highest quality and speed collected from various websites. 📺 We provide accelerated links and direct access links from within China. 🚀

You can enjoy live streaming from central broadcasting stations, satellite broadcasting stations, and other local broadcasting stations. 🌏

2) Nx

Nx is a build system with built-in tooling and advanced CI capabilities. It helps you maintain and extend your monorepo both locally and in your CI. 🚀

3) codellama

Code Llama is a family of large language models for code based on Llama 2. It offers the highest level of performance among open models, padding capabilities, support for large input contexts, and the ability to perform zero-shot instructions for programming tasks. It offers several flavors to cover a variety of applications: the basic model (Code Llama), the Python specialized model (Code Llama - Python), and the instruction execution model (Code Llama - Instruct) with 7B, 13B, and 34B parameters respectively. . All models were trained on sequences of 16k tokens and show improved results for inputs of up to 100k tokens. Code Llama and Code Llama - Instruct variants in 7B and 13B support filling based on surrounding content.

4) fabric

fabric is a platform that modularizes various AI functions and helps them apply to various parts of our lives. These modular AI functions are called patterns.

fabric makes it easy to manage AI prompts, discover new things, and keep track of different versions of your favorite things. If you want to make your life more convenient and fun with AI, be sure to try fabric. 🧵

5) plura-production

WebProdigies는 Nextjs14, Bun, Stripe Connect, Prisma, MySQL, Tailwind 등의 기술을 사용하여 웹사이트 빌더, 프로젝트 관리, 대시보드를 결합한 SaaS 플랫폼입니다. 웹 디자인/개발 프리랜서 커뮤니티에 가입하면 웹사이트로 돈을 벌 수 있는 방법을 배울 수 있습니다. 무료로 접속할 수 있는 자리는 한정되어 있으니 서두르세요. 🚀

3. Developer topics ✒️

Just 3 things a day! We selected topics from developers. 👀

1) What is X-Forwarded-For and when can you trust it?

When sending a web request, it goes through multiple servers or proxies. Is there a way to know where the request came from? This is the X-Forwarded-For header. This header contains and delivers the client's IP address, and through this header, the source of the web request can be accurately identified.

This blog explains in detail the structure, usage, and reliability of the X-Forwarded-For header. If you are interested in web development, please read this! 👍

2) Reverse Engineering DOS Software as if It Were 1990

This blog teaches you how to run the popular DOS and Windows debugger called SoftICE in an emulated MS-DOS environment. SoftICE has been the most widely used tool for debugging DOS and Windows software since 1987.

This blog will be useful for reverse engineering purposes as well as for those who want to recreate the experience of using tools from the time. 🙌

3) RavenDB 6.0.2

RavenDB is a distributed document database that often promotes its support for ACID transactions. It is suitable for OLTP workloads and provides a variety of ETL paths to export data to other systems. The transaction API operates around session handles, where users create a session, perform operations such as reads and writes, and then call session.saveChanges() to commit the write operations as an atomic unit.

In this blog, we focused on analyzing RavenDB's transactional key-value operations. 🧐

📣 Feedback 

If you'd like, please provide feedback using the link below.

Threads | Instagram | e-mail