惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

D
DataBreaches.Net
V
Vulnerabilities – Threatpost
C
CERT Recently Published Vulnerability Notes
Google DeepMind News
Google DeepMind News
GbyAI
GbyAI
Y
Y Combinator Blog
T
Threatpost
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Project Zero
Project Zero
Engineering at Meta
Engineering at Meta
MongoDB | Blog
MongoDB | Blog
MyScale Blog
MyScale Blog
Security Latest
Security Latest
T
Threat Research - Cisco Blogs
量子位
I
Intezer
Simon Willison's Weblog
Simon Willison's Weblog
C
Cybersecurity and Infrastructure Security Agency CISA
L
Lohrmann on Cybersecurity
L
LINUX DO - 最新话题
The Register - Security
The Register - Security
T
Tailwind CSS Blog
爱范儿
爱范儿
Google DeepMind News
Google DeepMind News
T
Troy Hunt's Blog
Stack Overflow Blog
Stack Overflow Blog
Cloudbric
Cloudbric
S
Secure Thoughts
The GitHub Blog
The GitHub Blog
T
The Blog of Author Tim Ferriss
L
LangChain Blog
Recorded Future
Recorded Future
小众软件
小众软件
www.infosecurity-magazine.com
www.infosecurity-magazine.com
T
Tor Project blog
人人都是产品经理
人人都是产品经理
F
Full Disclosure
O
OpenAI News
Webroot Blog
Webroot Blog
A
Arctic Wolf
TaoSecurity Blog
TaoSecurity Blog
P
Privacy & Cybersecurity Law Blog
Jina AI
Jina AI
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
雷峰网
雷峰网
Microsoft Security Blog
Microsoft Security Blog
H
Heimdal Security Blog
B
Blog RSS Feed
Vercel News
Vercel News

EINDEX's Blog

2024-ending #1 Mid-Autumn Festival improving-your-code-review-process-with-semgrep webmentions semgrep-with-custom-rules
2
EINDEX · 2025-10-18 · via EINDEX's Blog

I recently migrated my blog from Ghost to a new Astro-based system using the Pure Theme. A key benefit of this move was consolidating my separate English site and Chinese site into a single platform.

This transition was primarily motivated by the looming expiration of my Digital Ocean VPS. Coupled with Astro’s significant maturation over the past two years and some available time while job seeking, it felt like the perfect opportunity to rebuild.

Familiar features like webmentions, security.txt, and comments will be making a comeback. I’m also excited to integrate new functionalities such as llm.txt support and ActivityPub in the future.

Recent Finding#

Deepwiki#

DeepWiki is an intelligent tool designed to help developers quickly understand open-source code repositories. It can generate documentation-like wiki pages for your GitHub repository with a single click and allows you to ask questions directly about the codebase.

I tested DeepWiki with my Logseq Copilot Chrome extension repository, and it impressively generated diagrams for architecture, logic, and flow, along with highlighting key features. This tool shows great promise for security reviews, including threat modeling, security code reviews, and system audits. Its output could even provide valuable context for tools like STRIDE-GPT to conduct more in-depth analysis.

MCP Security Risks#

The linked article highlights that MCP servers often have excessive permissions and capabilities, introducing significant potential security risks.

Getting Started With Embeddings#

This article explains the working principles of embedding models.