Help Net Security دوشنبه ۱۱ آبان ۱۴۰۵ · ۰۹:۳۰

Byoky: Open-source wallet for AI API keys

Byoky is an open-source wallet for AI API keys, available as a Chrome and Firefox extension and as iOS and Android apps. Users store their keys for OpenAI, Anthropic, Google Gemini and other providers in it, encrypted on their own device. Apps that want those keys ask the wallet for access, and the wallet sends each request to the provider itself. The app gets a session token. The key stays in the wallet. Byoky goes…

Cloud Security Mobile Development Open Source App & Web Security Identity & Access Security

Read the full article at Help Net Security Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

Help Net Security دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۰:۳۹

DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work

Deepseek released a research prototype of dsh-superagent, a coding agent that does work on a GitHub repository for you. Who can ask for work The agent gets to work in two situations: an allowed user asks for something, or a rule your team wrote covers it. You can also open up a chat or GitHub scope, and then anyone in it can request work just by mentioning the agent. A message, comment or quoted document … More → The…

Programming & Languages Open Source

Source

Help Net Security دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۰:۰۰

The first ten lines of a command policy for AI coding agents

In this Help Net Security interview, Vinay Thakker, CTO of KloudStax, explains how to set identity, credentials, and network limits for AI agents. He argues that agents should run under their own identity, with the person’s identity attached when acting on someone’s behalf. He covers where credential proxies go wrong, what the first ten lines of a command policy for a coding agent should say, and how to stop data fro…

Source

Help Net Security دوشنبه ۱۱ آبان ۱۴۰۵ · ۰۹:۰۰

Product showcase: Trust Onion uses rotating codewords to verify callers

Trust Onion is a free app that gives trusted groups three rotating codewords to check who they are communicating with. It also includes signed selfies, message checks, and callback requests. It is available for macOS, iOS, and Android. I tested the iPhone app with an older person, exploring setup and the tools available when a call or message raises concerns. Verification matters when someone asks for money, access,…

Phishing Mobile Development Operating Systems

Source

Help Net Security دوشنبه ۱۱ آبان ۱۴۰۵ · ۰۸:۳۰

Ransomware gang talked AI agents into doing much of its dirty work

The group behind the Aur0ra ransomware has been using AI agents to move through victim networks, collect credentials and work its way up to domain administrator access, according to Sophos. AI-assisted intrusion workflow (Source: Sophos) The company, which tracks the group as GOLD OGRE, recovered artifacts from the Cursor AI coding assistant in late August that show the attackers handing the agents VPN logins, proxy…

Malware & Threats Ransomware

Source