#Cloudflare stopps http traffic completely - only #https allowed

Source: blog.cloudflare.com/https-only…

#web #www #api #software #news #encryption #internet

HTTPS-only for Cloudflare APIs: shutting the door on cleartext traffic

We are closing the cleartext HTTP ports entirely for Cloudflare API traffic. This prevents the risk of clients unintentionally leaking their secret API keys in cleartext during the initial request, before we can reject the connection at the server si…

^{The Cloudflare Blog}

O2 will Kunden im Auftrag Dritter identifizieren

Onlinehändler sollen Kundendaten über eine Schnittstelle mit der O2-Kundendatenbank abgleichen. Zur Betrugsbekämpfung.

heise.de/news/O2-will-Kunden-i…

#G #API #Handel #Mobilfunk #Netze #O #eCommerce #Telefónica #news

O2 will Kunden im Auftrag Dritter identifizieren

^{Daniel AJ Sokolov (heise online)}

#Research finds 12,000 ‘Live’ #API Keys and ßPasswords in #DeepSeek's #Training Data

Source: trufflesecurity.com/blog/resea…

#ai #technology #security #privacy #fail #password #Problem #cybersecurity #news #Software

Research finds 12,000 ‘Live’ API Keys and Passwords in DeepSeek's Training Data ◆ Truffle Security Co.

We scanned Common Crawl - a massive dataset used to train LLMs like DeepSeek - and found ~12,000 hardcoded live API keys and passwords. This highlights a growing issue: LLMs trained on insecure code may inadvertently generate unsafe outputs.

^{trufflesecurity.com}

Large Language Models (LLMs) are being distributed across many devices and platforms. Having these models available on-device can help reduce the need for sending private data to cloud-hosted systems.

At the @w3c member meeting last month in #Hiroshima 🇯🇵, Chunhui Mo (Huawei) explored what it would take to expose these LLMs to #WebApps through a Web #API and the advantages it could bring in terms of #privacy, #security and #performance.

🎬 Watch the video: youtu.be/7S60LNBAFj0