... session. On the control side, session proposals are never applied silently: they land in a review inbox and your team accepts or rejects each one. By default, the agent even asks you in chat before drafting one. Does the secrets scanner also check files that are generated or modified indirectly by the coding agent? Yes, in two ways: Files the agent edits directly are scanned at the end of the session. If the agent commits during the session, the scan ... ... also covers the full git diff of those commits, so files generated or modified indirectly (codegen, scripts, shell commands) are included too. Upstream, the secret

... minute check for anyone who receives signed webhooks. Find the line where your code reads the signing secret from the environment. Then find out what happens to a request when that variable is not set at all. I expected the answer to be that everything fails. That is what a missing secret

... that the intense launch phase is behind us, it s time for some fun . They say nobody reads Microsoft Store descriptions anymore and they are probably right. So instead of a standard update, I hid a highly creative, clever secret message directly inside the app. I wanted to create a genuine challenge for this community, so you will need plenty of curiosity, creativity, and a keen eye for detail to uncover it. The Grand Prize: The first person to discover ... ... hidden message and email us the solution wins a free TIM PG Royal Lifetime License . Bonus for the fastest hunters: Even if you aren't the first to find the secret

... Well, after this post, they probably won t be that secret anymore. But there are still a few things not everyone knows about:  1. Get hunted by someone with a strong audience. Even if you already have a lot of followers yourself, getting hunted by someone who also has a strong audience can help you reach more people on launch day. If your launch gets featured, your followers can receive notifications, as well as the followers of the hunter ... ... Live-stream your launch. This is still pretty rare, but I ve seen makers do it, usually on X (e.g. Sandra did it @sandradjajic and Max @_maxblade ) It can turn your launch into an event. What other secret

... built something weird: an ashtray for digital secrets. Throw the password in, light it once, and watch it go. No smoke. No evidence. Just a little click and it s gone. Why this exists People still email passwords, paste keys in Slack, and trust we ll delete it later. That trust is why things get leaked. BurnLink flips the script: make sharing fast, then make the trace disappear. What it does (in plain terms) Encrypts in your browser the server ... ... tiny story (so it lands): At 2AM my pager screamed. A contractor who should ve been gone still had prod API keys. I rotated keys, cursed, and by 3AM I d hacked together something that let me share a secret

... building: For the past year I kept hitting the same wall using AI agents. The second you give an agent a real password or API key to do anything useful log into a dashboard, call an internal API that secret is now in its logs, traces, and LLM context. Everywhere the agent goes, the secret

... recurring issue we ve been seeing with Supabase setups is not the database itself, but how credentials are managed across environments. The common pattern looks something like: credentials stored in .env files or secrets managers multiple environments (dev, staging, prod) manual propagation or duplication across those environments It works, but over time it seems easy for things to drift: a key gets rotated in one environment but not others a redeploy misses an env var credentials get misconfigured during setup ... ... migration We ve seen this cause failures that have nothing to do with application logic, just the surrounding setup. A few approaches we ve come across: .env files per environment + validation checks before deploy centralized secrets

... collaborative and productive environment. It offers participants the freedom to move around the meeting space (designed as various maps, some inspired by games and some based off of actual office blueprints). Nonilion is a distraction free google s meet alternative, with perplexity ai, multi participant screen share, interactive multi participant games, file sharing, custom characters and more. Nonilion is free to use for all the users and also offers a pro plan for meetings that required custom room names ... ... writers, video editors and front-end developers to focus and work in collaboration. Two or more groups talking over each other or sharing screens at the same time resulted in other groups to sit and just watch. As an alternative