THE ASTER BLOG / A CLOSER LOOK
AI moves fast. Make sense of what matters.
News, useful tools, and practical ideas for the code you ship.
THE READING ROOM
Latest dispatch
7 stories to explore
Short reads. Original sources.A model that can answer in a million tokens, a federal probe into two AI labs, an open model that writes exploits almost as well as Claude, and a $22 billion voice company. Here’s what happened and why it matters if you build with AI.
Your webhook is a doorman who signs for any package from anyone in a delivery vest. A URL isn’t a password, and “payment succeeded” is just JSON anyone can type. Here’s how to make the doorman check signatures, why the check “kept failing”, and the three moves that close the hole.
Anything that starts with NEXT_PUBLIC_ or VITE_ ships to every visitor. Here’s how to find a leaked key in two minutes, move it to the server with copy-paste code, and rotate it properly if it already reached GitHub.
A deadpan Frenchman shadowboxing around Paris picked up hundreds of thousands of followers in two weeks. Then people noticed his hair never moved, and a coin showed up in his bio. Here’s what’s reported, how this kind of video is made, and how to spot the next one.
Your API key can be perfectly safe on the server and you can still get a bill you can’t pay. If your AI route has no login, no rate limit and no spending cap, anyone can use it on your card. Here’s how to close the pump.
Your Supabase key is public by design. Row Level Security is the only thing standing between it and every row of your users table. Here’s how to turn it on, write policies that work, and prove it as a stranger.
A faster, cheaper Claude, a flagship model pulled over safety, a conference all about agents, and voice cloning in 10 seconds. Here’s what happened and why it matters if you build with AI.
Try a different search or browse all posts.
Your reading list is saved in this browser. No account needed.
YOUR FEED, WITH A LITTLE MORE CONTEXT
Catch the short version on your favorite platform.
Come back here for the details and sources.
