DEV Community

Damiano profile picture

Damiano

Software engineer from Ticino, Switzerland. Full stack: Nuxt/Vue, TypeScript, Python. Building small local-first AI tools.

Joined Joined on 
A Stealer With a Triage Analyst: VOLTA Outsources the Reading to an LLM

A Stealer With a Triage Analyst: VOLTA Outsources the Reading to an LLM

Comments
4 min read
The handshake only proves the leaf: LXD's CVSS 10.0 certificate mix-up

The handshake only proves the leaf: LXD's CVSS 10.0 certificate mix-up

Comments
5 min read
The Sandbox Held. The Mail Slot Didn't: One ChatGPT Share Link to Account Takeover

The Sandbox Held. The Mail Slot Didn't: One ChatGPT Share Link to Account Takeover

Comments
4 min read
GitLab Was Patched, the Server Was Still Vulnerable: CVE-2026-97229 Lives in Ruby

GitLab Was Patched, the Server Was Still Vulnerable: CVE-2026-97229 Lives in Ruby

Comments
5 min read
Your PDF says AES-256. The key had 9 bits of entropy

Your PDF says AES-256. The key had 9 bits of entropy

1
Comments
5 min read
CVE-2026-97631: A 16-Year-Old Buffer Overflow That Runs Before Your Defenses Do

CVE-2026-97631: A 16-Year-Old Buffer Overflow That Runs Before Your Defenses Do

Comments
6 min read
One Token Leaked 155 AI Responses: Inside Cloudflare's GLM-5.3 KV Cache Exposure

One Token Leaked 155 AI Responses: Inside Cloudflare's GLM-5.3 KV Cache Exposure

Comments
6 min read
The Brotli flaw is in .NET now: Microsoft's out-of-band patch, and the self-contained trap

The Brotli flaw is in .NET now: Microsoft's out-of-band patch, and the self-contained trap

Comments
4 min read
HTTP2Shell: the Brotli decoder in your HTTP stack is critical, and your scanner won't flag it

HTTP2Shell: the Brotli decoder in your HTTP stack is critical, and your scanner won't flag it

Comments
5 min read
PHP2Shell: AI turned a decade-old flaw into an exploit in hours

PHP2Shell: AI turned a decade-old flaw into an exploit in hours

Comments 1
3 min read
Banks just found AI agents inside customer accounts, and they can't tell what the agents are allowed to do

Banks just found AI agents inside customer accounts, and they can't tell what the agents are allowed to do

Comments
3 min read
Python 3.10 just went end-of-life, and my stdlib-only tool doesn't care

Python 3.10 just went end-of-life, and my stdlib-only tool doesn't care

Comments
3 min read
Stablecoins just got their rulebook - and the paperwork that follows can't go into a chatbot

Stablecoins just got their rulebook - and the paperwork that follows can't go into a chatbot

1
Comments
3 min read
A failed validation is a feature: designing the error path your users actually see

A failed validation is a feature: designing the error path your users actually see

Comments
3 min read
A 1B model doesn't read your letter: the unglamorous layer between documents and local AI

A 1B model doesn't read your letter: the unglamorous layer between documents and local AI

1
Comments
3 min read
AI fatigue is real. So is the tiny local model doing one private task

AI fatigue is real. So is the tiny local model doing one private task

Comments
3 min read
The letter you can't paste into a chatbot: explaining official mail with a local 1B model

The letter you can't paste into a chatbot: explaining official mail with a local 1B model

1
Comments 2
3 min read
Call a local model from plain Python: no SDK, no dependencies

Call a local model from plain Python: no SDK, no dependencies

Comments
2 min read
Your TypeScript types disappear at runtime: validating data at the edges of a Nuxt app

Your TypeScript types disappear at runtime: validating data at the edges of a Nuxt app

Comments
2 min read
Let the model explain, let the code count: a local LLM helper for Swiss administrative letters

Let the model explain, let the code count: a local LLM helper for Swiss administrative letters

Comments
3 min read
loading...