Spens, a new open-source tool for sandboxing and observing coding agents, launched on Hacker News, using Docker, nono and mitmproxy to create reproducible sandbox environments that capture all agent t…
Hamel Husain, a software engineer, published a blog post arguing that developers should inspect the final prompts that LLM abstraction tools like DSPy, guidance, and instructor send to language models…
A mitmproxy teardown of GitHub Copilot in VS Code revealed that the assistant's context engine shipped a secret from a .env file the user wasn't editing, bundling up to 20 files with 8 edit summaries …
A developer released trollbridge, a policy-enforced HTTP proxy designed to let coding agents operate freely while blocking unsafe requests. The tool uses deterministic allow/deny lists for most traffi…
Packet captures of xAI's Grok Build CLI 0.2.93 show the tool uploading entire Git repositories (including full history and secrets) to a Google Cloud Storage bucket named `grok-code-session-traces`, i…
Mulot, an open-source AI agent framework, uses open-weights LLMs like GLM-5.2 to drive a headless Chromium browser with a Burp-style toolkit, achieving 87% on OverTheWire Natas and 73% on Root-Me Web-…
A comprehensive survey of man-in-the-middle (MITM) proxy and HTTP interception tools has mapped the ecosystem into four major domains, benchmarking projects against the Python-based mitmproxy (43.8k s…
A developer released mitmwall, an egress Web Application Firewall for Ubuntu that uses iptables and mitmproxy to block all outbound HTTP(S) traffic except explicitly allowed routes. The tool prevents …
In August 2024, Authy discontinued its desktop app, and subsequent backend changes have prevented users from logging into older versions, making token export difficult for those not already logged in.…