1
OpenAI 扩展零数据留存安全机制，自动化分析跨交互风险
OpenAI升级零数据留存，API客户数据更安全，为IPO筑牢信任基石，企业级AI合规必看。
IT之家 8 月 20 日消息，OpenAI 公司今天（8 月 20 日）发布博文，宣布面向符合资格的前沿模型 API 客户，扩展“零数据留存”（Zero Data Retention）服务， 自动化系统可识别跨交互风险模式。 IT之家援引博文介绍，OpenAI 公司强调请求处理完成后，不保留提示词…
2
Stealing Reasoning Traces from Proprietary LLM APIs
揭秘如何从专有大模型API中窃取隐藏推理过程，安全研究者必读。
Stealing Reasoning Traces from Proprietary LLM APIs A vanity domain name ( stolen-thoughts.com ) for a neat paper : Anthropic, OpenAI, and Google retu…
3
Shield Your API: Advanced Rate Limiting in Laravel 🛡️
基于Redis的Laravel高级限流方案，轻松应对噪邻问题与DDoS，保护API稳定高可用！
The "Noisy Neighbor" and DDOS Threats When you deploy a public-facing API or a B2B enterprise SaaS platform, your servers are immediately exposed to t…
4
Caliber: Cross-Architecture Extraction-Cost Control for Score-Returning APIs
跨架构API提取成本控制利器，精准防护分数返回接口，有效降低数据泄露风险，安全高效。
arXiv:2608.01023v1 Announce Type: cross Abstract: We present Caliber, an output-perturbation defense against model extraction that formulates noise se…
5
Secure Your APIs: OAuth2 and JWT for Beginners
JetBrains博客的API安全入门教程，通过OAuth2和JWT帮助开发者从零构建安全认证，附带GitHub示例代码。
This tutorial was written by an external contributor. APIs are frequent targets for bad actors since they expose data and functionality. Securing them…
6
MonoCloud for Startups
为初创公司免费提供一年的统一身份管理，覆盖客户、API与代理，安全又便捷
One identity layer for your customers, APIs, and agents Discussion | Link
7
AlienLM: Alienization of Language for API-Boundary Privacy in Black-Box LLMs
用语言「陌生化」技术为大模型API边界隐私保驾护航，黑盒场景下实现隐私保护新思路
arXiv:2601.22710v2 Announce Type: replace-cross Abstract: Modern LLMs are increasingly accessed via black-box APIs, requiring users to transmit sensit…
8
Ask HN: Why aren't hardware passkeys used for access token creation?
用Yubikey生成GitHub短期令牌？探讨硬件安全密钥在API访问中的创新应用。
So I was thinking, with all these sophisticated attacks on package managers, that I should use a yubikey more. One problem I wanted to solve for mysel…
9
全栈自主：龙芯中科联合牡丹电子发布 3A6000 信创笔记本电脑 Peony-L，内置国产 WAPI 安全芯片政企专供
全栈自主的政企专供笔记本电脑，搭载龙芯3A6000与国产WAPI安全芯片，专为安全无线局域网场景打造，实现三元对等加密认证。
IT之家 6 月 13 日消息，在 6 月 11 日安全无线局域网创新应用大会与京津冀网络安全协同发展论坛期间，龙芯中科技术股份有限公司联合北京牡丹电子集团有限责任公司，共同推出了首款信创 WAPI 便携式计算机“Peony-L”。 据官方介绍，该产品旨在为政务、国企、金融、能源等重点行业提供全栈国…
10
Miasma worm, Part 2: how a GitHub token survived a full machine rebuild and hijacked my repos from an Azure IP
开发者必看：GitHub token在机器重建后仍存活，黑客利用Azure IP劫持仓库，揭示2FA的隐蔽盲区。
How the lockout ended, the entry vector GitHub confirmed, the stealth commits I missed at first, and the cleanup playbook for anyone hit by the same w…
11
Sophrosyne: Agentic Exploration of Relational Data Systems Needs Moderation
揭密Text2SQL智能体如何探索关系数据系统，关键在于API调用需规范管控。
arXiv:2605.30862v1 Announce Type: cross Abstract: Text2SQL agents powered by LLMs translate natural language intent into SQL by exploring the data sys…
12
Cctest.ai: Claude Detection Platform
精准检测每个API调用，黑盒防规避技术保障账户安全，专业Claude检测平台。
Article URL: https://cctest.ai/en Comments URL: https://news.ycombinator.com/item?id=48192061 Points: 1 # Comments: 0