Home Assistant token secrets in cleartext
Token secrets remain unexpired after password changes and are stored in cleartext.
Stories per day · 30 days
2 RSS
Relatedanthropic1business-models1claude-code1cleartext1data-pipeline1developer-tools1home-assistant1indic1nvidia1openai1open-data1pretraining1
11 stories, newest first · one card per story
Stories tagged #tokens
Claude Code status line reportedly consumes 15-20% of tokens
The claim appears only as a Hacker News title; the linked gist body was not included.
Hacker News asks why OpenAI sells tokens instead of starting firms
Commenters cite token revenue, a shorter runway, specialization, and limits on models running businesses.
Scaling Indic Pretraining: 2.8 Trillion Tokens and an Open Data Generation Pipeline
NVIDIA describes scaling Indic pretraining to 2.8 trillion tokens with an open data pipeline.
AI agent teams waste massive tokens for barely measurable quality gains, research finds
Vals AI finds agent teams cost up to 5.1x more than solo agents for almost no quality gain.
13
MixTok: Adaptive Visual Tokenization with Global 1D Tokens and Sparse 2D Refinement
MixTok mixes compact 1D tokens with sparse 2D refinement for budgeted visual tokenization.
Spending on AI Is Becoming Almost Impossible for Businesses to Budget
A Wall Street Journal report says AI token costs are becoming nearly impossible for businesses to budget.
Rethinking Long-Video Efficiency: A Joint Allocation Perspective on Frames, Pixels, and Front-End Latency
LoHi pairs dense low-resolution video with sparse high-resolution frames, raising long-video accuracy and cutting decode latency.
How device code phishing gives scammers access to your account
Device code phishing tricks users into approving a real OAuth sign-in, handing attackers account tokens.
3
CISA and NIST Issue Guidance to Protect Cloud Identity Tokens
CISA and NIST published Interagency Report 8587 with voluntary guidance to harden cloud identity tokens against theft, forgery, and lateral movement.
Protecting Tokens and Assertions from Forgery, Theft, and Misuse: Implementation Recommendations for Agencies and Cloud Service Providers
NIST and CISA publish final interagency report with implementation guidance for protecting tokens and assertions from forgery and misuse.