1
中汽协会：支持强化汽车产品创新设计与研发测试验证管理，推动产业可持续健康发展
IT之家 10 月 11 日消息，工业和信息化部等四部门 10 日公开发布关于进一步加强汽车产品创新设计和研发测试验证有关管理工作的通知（征求意见稿）。汽车产品创新设计技术指南 围绕虚拟操纵件、门把手、新型人机交互系统、大角度座椅等方面提出具体测试验证要求 。 征求意见稿聚焦整治不合理创新设计、健全…
2
GitHub Actions OIDC: Eliminating Long-Lived Credentials from Your CI/CD Pipeline
告别长期云密钥，用OIDC给 CI/CD 换临时凭证，安全性和可运维性同时拉满。
Every GitHub Actions workflow that deploys to AWS or Azure needs cloud credentials. The traditional answer — generate an IAM access key or Azure clien…
3
Show HN: Obidos is going Open Source
企业级身份认证工具Obidos开源，支持2FA二维码和LDAP集成，即拿即用。
Article URL: https://github.com/spenego/Obidos Comments URL: https://news.ycombinator.com/item?id=49156631 Points: 2 # Comments: 1
4
The credential that let OpenAI's agents into Hugging Face exists in most enterprises right now
OpenAI的agent闯入Hugging Face的核心凭证，正广泛存在于多数企业系统中——一次周末引发的1.7万条安全事件警告。
When Hugging Face got hit last week, co-founder Clement Delangue suspected a frontier lab, given the agent's sophistication. He was right. Delang…
5
Introducing new token formats and secret scanning
Vercel 自动撤销泄露的 API 凭证，并更新 Token 格式增加前缀标识，提升账户安全。
When Vercel API credentials are accidentally committed to public GitHub repositories, gists and npm packages, Vercel now automatically revokes them to…