mastodontech.de ist einer von vielen unabhängigen Mastodon-Servern, mit dem du dich im Fediverse beteiligen kannst.
Offen für alle (über 16) und bereitgestellt von Markus'Blog

Serverstatistik:

1,5 Tsd.
aktive Profile

#apis

6 Beiträge5 Beteiligte0 Beiträge heute

File encryption with a browser.

I've been exploring the #WebCryptoAPI and I'm impressed!

When combined with the #FileSystemAPI, it offers a seemingly secure way to #encrypt and #store files directly on your device. Think #localstorage, but with #encryption!

I know #webapps can have #security vulnerabilities since the code is served over the web, so I've #OpenSourced my demo! You can check it out, and it should even work if #selfhosted on #GitHubPages.

Live Demo: dim.positive-intentions.com/?p

Demo Code: github.com/positive-intentions

Hook Code: github.com/positive-intentions

IMPORTANT NOTES (PLEASE READ!):
* This is NOT a product. It's for #testing and #demonstration purposes only.
* It has NOT been reviewed or audited. Do NOT use for sensitive data.
* The "password encryption" currently uses a hardcoded password. This is for demonstration, not security.
* This is NOT meant to replace robust solutions like #VeraCrypt. It's just a #proofofconcept to show what's possible with #browser #APIs.

dim.positive-intentions.com@storybook/core - Storybook
Heute war wieder eine Gruppe vom örtlichen Kindergarten zu Besuch beim Imker. Der Weg von der Blüte zum Honigglas wurde zusammen mit den Kindern erarbeitet, Honig gefrühstückt und eine Königin im Volk gesucht. Ein schöner Vormittag 😉
#imker #imkerei #beelover #bienen #zadant #honig #frühtracht #sommertracht #schöneshobby #regional #wissenwohereskommt
#streuobstwiese
#maintalerstreuobdtwiesenhonig #apis #abeja #apetm703
#kitaahornweg #imkerbesuch #kleineforscher

Last April, @dontcallmeDOM stressed the need for the web community to address #AI's growing impact on the Web. Previous @w3c report highlighted challenges like synthetic content, bias, #security, #sustainability, and data consent.
▶️ w3.org/reports/ai-web-impact/

Progress has been made with ML-based #APIs such as #WebNN and Prompt API. New concerns include AI agents, which pose risks to trust, #privacy, #safety, and the web economy.

🎬 Watch "AI Impact on the Web: updates": youtu.be/dniPpsCRQgI

"Recent advances in operating system (OS) agents enable vision-language models to interact directly with the graphical user interface of an OS. These multimodal OS agents autonomously perform computer-based tasks in response to a single prompt via application programming interfaces (APIs). Such APIs typically support low-level operations, including mouse clicks, keyboard inputs, and screenshot captures. We introduce a novel attack vector: malicious image patches (MIPs) that have been adversarially perturbed so that, when captured in a screenshot, they cause an OS agent to perform harmful actions by exploiting specific APIs. For instance, MIPs embedded in desktop backgrounds or shared on social media can redirect an agent to a malicious website, enabling further exploitation. These MIPs generalise across different user requests and screen layouts, and remain effective for multiple OS agents. The existence of such attacks highlights critical security vulnerabilities in OS agents, which should be carefully addressed before their widespread adoption."

arxiv.org/html/2503.10809v1

arxiv.orgAttacking Multimodal OS Agents with Malicious Image Patches
#AI#GenerativeAI#LLMs

Are there any good tools to create API docs from a Laravel app these days? I'm thinking something that would, at least, scaffold some sort of website based on the routes under the API namespace and list their expected parameters based on the requests.

#PHP#Laravel#apis