Lifetime ad blocker Labor Day deal: AdGuard is $14.97

Who Can Still Push to main? An Access and Process Audit in 30 Seconds

The question is not who has push access to main — that is an access-control question, answered in the platform's settings.

• Ability to push to main is an access-control issue, not just documentation
• Direct-push ratio measures commits landing on main without merge
• Audit reveals gap between documented review process and actual commit behavior

3h ago ·dev.to

Audit Force-Pushes and Rewritten History Without a Git Server

Rewritten history is the git equivalent of a locked room being opened from the inside: nothing in the working tree looks wrong, but the record of what happened has been changed.

• Audit force-pushes require identification of rewritten history in remote repositories
• gitpulse tools help detect deviations from baseline branch ratios and commit shapes
• Weekly analytics and refactoring prioritization based on high-change hotspot files

3h ago ·dev.to

I Spent a Weekend Reading Git Internals. Here's the Tool That Came Out of It

The origin of gitpulse is a weekend I spent reading git's object model instead of building the tool I had planned. The plan was a simple commit counter; the weekend produced a different understanding.

• Git is a content-addressed store forming a graph of history, not a list of commits
• gitpulse tool reveals insights like file hotspots and commit timing patterns
• Repository analytics may not suit new projects, sole contributors, or performance evaluation

3h ago ·dev.to

Microsoft says email spammers are adopting ASCII smuggling, an AI prompt injection tactic used to hide malicious instructions, to evade email platform filters (Dan Goodin/Ars Technica)

A clever technique used to hide malicious prompts in attacks on AI agents has been adopted by spammers to evade filters …

2h ago ·arstechnica.com

Modelo pronto: carta de autorização para auditoria de segurança (escopo + regras de engajamento)

Toda auditoria começa por um documento que quase ninguém tem pronto: a autorização por escrito . Sem ela, você não testa — e com ela, o cliente leva a sério.

2h ago ·dev.to

I Built a Database in Rust With Zero Dependencies (and What the Standard Library Quietly Gave Me)

TL;DR — I built a small database in Rust for a 72-hour hackathon with one rule: no third-party packages allowed. Just the language and nothing else.

• Developer built zdb, a key-value database in Rust with zero dependencies
• Implemented checksum (CRC-32) to detect data corruption
• Used Rust's standard library for lock files and command-line options

2h ago ·dev.to