Urgent.News

What's breaking now, across thousands of outlets.

Tech

WEEK 4, GHOST PROOF

This is a submission for the Hacktoberfest Open-Source AI Challenge Week 4: Ghost in the Machine What I Built GhostProof โ€” an AI-powered fact checker and code reviewer. It verifies factual claims against live web evidence and reviews codebases for security risks, hardcoded credentials, and potential flaws. It brings two essential developer tools into one platform. Demo ๐Ÿš€ Live Demo Code ๐Ÿ’ป GitHubโ€ฆ

Week 4 of the Hacktoberfest Open-Source AI Challenge featured an innovative project called GhostProof. This AI-powered tool serves as both a fact checker and code reviewer, designed to enhance the security and reliability of developer tools. The system boasts the ability to verify factual claims against live web evidence and scrutinize codebases for potential security risks, hardcoded credentials, and other flaws.

By integrating two essential developer tools into a single platform, GhostProof offers a comprehensive solution for developers.

The project was crafted using React, TypeScript, and Vercel serverless APIs. At its core, Gemma 4 acts as the primary AI engine, responsible for fact-checking and code reviews. In instances where the primary model encounters unavailability, Gemini 2.5 Flash serves as a reliable fallback. Additionally, the tool incorporates JSZip for browser-side ZIP inspection, ensuring thorough code analysis.

GhostProof's commitment to deterministic scanning is noteworthy. This feature detects and masks potential secrets before passing the data through AI analysis, thereby bolstering the tool's security measures. Furthermore, the system integrates a web evidence search, providing sources to substantiate fact-checking claims, thereby adding a layer of credibility to its outputs.

Open innovation plays a critical role in the development of tools like GhostProof. Leveraging open-weight models such as Gemma 4 not only makes AI experimentation more accessible but also empowers developers with greater flexibility in integrating AI into real-world applications. The GhostProof project embodies this spirit of open innovation, showcasing how open AI can be harnessed beyond simplistic chat interfaces.

This submission was recognized as part of the prize categories for the Hacktoberfest Week 4 challenge, emphasizing the significance of open-source contributions in advancing AI technology.

Written by urgent.news from Dev.to's reporting โ€” not their text. Machine-written โ€” may contain errors; check the original before relying on it.

Read the original at dev.to โ†’

More in Tech

How to Split Large STL & 3MF Files for Small Print Beds Without Slicing Errors

Every desktop 3D printer eventually hits a physical ceiling: build volume. An Ender 3 caps out around 220 ร— 220 ร— 250 mm; a Prusa MINI or Bambu Lab A1 mini restricts you to an 180 mm cube.

  • Check usable build volume, subtract 8-10 mm from each axis
  • Use STL Splitter tool to preserve mesh topology without re-meshing
  • Align cut planes along natural body lines, avoid thin walls

What are you doing this weekend?

Feel free to tell what you plan on doing this weekend and even ask for help or feedback. Please keep in mind itโ€™s more than OK to do nothing at all too!

Three holes in a green CI, and a lock for the free plan

What this is about. On a site we worked on recently, the test pipeline went green across the board, and we looked into what green actually covered. Three things turned out not to be covered at all.

  • Three issues uncovered in green CI: missing tests, schema mismatches, and lack of wait mechanism.
  • Tests added to CI to address missing tests and schema mismatches.
  • Script implemented to wait for green CI status in private, free plan repository.

One week after PHP2Shell: attacked in the wild, and now a Linux kernel flaw on top

On 21 October the PHP team released emergency updates for two critical flaws, CVE-2026-109618 and CVE-2026-109619 (โ€œPHP2Shellโ€). Back then the question was how fast you could patch.

  • PHP released emergency updates for PHP2Shell flaws on 21 October
  • Linux kernel flaw CVE-2026-46300 allows root access exploitation
  • Combined threat can compromise servers and all associated sites and secrets

More from Friday 30 October โ†’