Jesse A.

Despite the many benefits of Data #CleanRooms they may turn participating parties into Data Brokers as per California’s DELETE Act if they happen to bring 3rd party data (no direct relationship) into the platform, triggering a registration and tech alignment requirement (and hefty fines if dates are missed). (Presentation by California Privacy Protection Agency and Ben Isaacson on the DELETE ACT and the new #DROP platform that integrates all data brokers for consumers to place a single request.) Privacy Law Section of the California Lawyers Association. #AdTech

57

5 Comments

Certification body, court, or client asks for your records. "Give me a few days" isn't a great answer. New tutorial up. Our CTO Lincoln walks through DogBase reporting: quick summaries, court-ready detailed exports, and full Excel/CSV control. Plus Trainer Touch Points, to see who's training each dog and how often they succeed. Records in minutes, not days. Watch it: https://lnkd.in/eVbtwha4 #WorkingDogs #K9Training #K9SAR #DetectionDogs #DogBase

2

1 Comment

You all know I'm fascinated by agent memory. Well, I just dove into Redis' Agent Memory Benchmark report. They ran an agent memory test with 500 questions against a bunch of systems that support agentic memory, and they found that agents remember better when they keep original conversation excerpts AND extracted facts. Makes sense when you think about it, because the extracted facts help the agent keep track of things as they change while the excerpts contain the exact details. Combine both and the agent can better piece together what it needs. Fascinating stuff if you wanna check it out: https://fandf.co/4z3LxaL Thanks Redis for sending the report my way and partnering on this post.

49

6 Comments

This story is evolving quickly. Is workforce IDV a broken concept? Remember, in most KYC applications the incentive to impersonate someone is never as big as the incentive to impersonate an employee of a bank or a large enterprise. Getting credentials to a bank/casino/enterprise internal systems is the holly grail for attackers, as they have proven succefully in so many cases. So while consumer IDV is still a good option, workforce IDV might not be the right path, which is exactly the gap we are trying to close.

17

1 Comment

An inspiring story of the County of Tulare scaling their sites county-wide with one code-base and platform to manage it all! Built on Drupal, Hosted on Acquia, and designed and built by Hounder

7

The single most common critical finding in the Lovable apps we audit isn't in the code. It's a database setting that's off. Row Level Security. In Supabase, every table you create is reachable through the API. RLS is the thing that says "this user can only see their own rows." If it's off, the anon key sitting in your frontend can read the whole table. Every user. Every row. Our numbers, from the audits we've run: about 70% of Lovable apps we look at are missing RLS policies somewhere. Around 10% have it off on a table holding something that matters (health data, payments, messages). This is the exact hole behind Moltbook in January. AI-built social network, founder said he didn't write a line of code, Supabase key in the client JavaScript, RLS never turned on. 1.5 million API tokens and 35,000 emails readable by anyone who looked. Check yours in two minutes: 1. Supabase dashboard → Table Editor. Any table with an "RLS disabled" badge is open. 2. Advisors → Security Advisor. It lists tables without policies for you. 3. Harder check: open your app, F12, Network tab, find a request to /rest/v1/. Copy the URL and the apikey header into a new tab with the table name swapped for one you shouldn't be able to see. If rows come back, that's the finding. If you find one, don't panic and don't delete the table. Enable RLS, add a policy scoped to auth.uid(), test that the app still works. Twenty minutes, usually. The AI didn't skip this out of laziness. Turning RLS on with no policy breaks the demo, so the shortest path to "it works" is leaving it off. Nobody came back later to turn it on. That later is now. 🐝

This is an interesting networking vendor - IO River has developed an overlay for CDNs that makes use of WASM (gotta love WebAssembly). It just announced a nice $20M fund raise today too. “We are leveraging the existing physical networks, like Akamai, CloudFlare, Fastly and AWS, but we are also leveraging their edge compute,” Edward Tsinovoi told me. “On top of that, we provide a virtual layer of edge compute. So customers write their code once and it will be distributed and run on these different platforms.”

8