Lookonchain APP

App Store

Vercel targets long-term API keys: labels them "insecure" by the end of the year, set to remove entirely next year.

52 minutes ago

Beating AI Express: Vercel announced it will phase out long-term static keys from its Marketplace. Starting November 30, third-party services that still rely on long-term keys and do not support Vercel OIDC authentication will be marked as "insecure". By January 2027, non-compliant providers will be delisted, with Vercel’s own APIs and native integrations required to follow the same standards. Long-term keys are non-expiring credentials, often stored in environment variables to enable apps or AI Agents to access services like databases. If leaked, attackers can exploit them indefinitely. Vercel’s OIDC, by contrast, allows programs to obtain short-lived credentials based on their own identity, with restricted access scopes and permissions. After credentials expire, the SDK automatically refreshes them, and caching reduces extra requests, eliminating the need for developers to manually rotate keys repeatedly. Vercel has faced such risks before: in April this year, third-party AI tool Context.ai was hacked, letting attackers breach Vercel’s internal systems and access some customers’ environment variables. The company only announced full remediation on October 16. Vercel also disclosed that past key rotation efforts consumed thousands of engineering hours. The company surveyed over 1,000 SaaS providers and found only 8.4% support the more secure authentication method. Long-term keys are widely used for their simplicity, while short-lived credentials are safer but more complex to configure and may increase network latency. Vercel is mitigating these costs via SDK and automatic caching, and using Marketplace listing eligibility to push providers to adopt more secure authentication practices.

Relevant content

Binance to distribute cash dividends to holders of tokenized securities of ASML and Nokia.

Binance announced it will distribute cash dividends to holders of tokenized securities ASMLB and NOKB, which track ASML Holding (ASML) and Nokia (NOK), via its bStocks product. After deducting applicable withholding taxes, fees, and other costs, the net dividend will be reinvested to purchase additional or fractional shares of the underlying securities. Eligible users will receive distributions in the form of ASMLB or NOKB tokens. The eligibility snapshot is scheduled for 00:00 UTC on October 27. Binance will suspend the 1:1 conversion service between ASML and Nokia stocks and their corresponding bStocks tokens at 23:30 UTC on October 26, as well as ASMLB and NOKB token deposits and withdrawals. These services will resume after the dividend distribution is completed. Trading pairs NOKB/USDT and ASMLB/USDT remain unaffected. Binance reminded that bStocks are tokenized securities, which do not grant holders direct ownership of the underlying listed company’s stocks, and are only offered to eligible users in approved jurisdictions.

1 seconds ago

Bitcoin Core is adjusting its security policy, with some vulnerabilities to be patched and disclosed immediately.

Bitcoin Core is revising its security vulnerability disclosure policy, as large language models (LLMs) have significantly lowered the threshold for discovering certain software flaws. Bitcoin Core developer Antoine Poinsot said Thursday on the Bitcoin Developers Mailing List that for vulnerabilities easily uncovered via simple LLM prompts, delayed disclosure no longer provides sufficient protection and instead delays the release of fix versions. Under the new policy, for easily discoverable vulnerabilities, Bitcoin Core will roll out fixes as quickly as possible for all still-maintained major versions, and release corresponding security advisories simultaneously. Other vulnerabilities will still be disclosed in phases based on severity: low-severity flaws will be made public two weeks after the major version containing the fix is released; medium and high-severity vulnerabilities are typically disclosed two weeks after the last affected version ends its maintenance. Critical vulnerabilities that severely impact Bitcoin’s core security will follow a separate process. AI-assisted security research is bringing new pressures to the Bitcoin ecosystem. This August, the Bitcoin Red Team reported nearly 5,000 potential issues found across 390 projects; Core Lightning developers also urged node operators to upgrade software or take it offline temporarily after receiving multiple AI-generated vulnerability reports. The policy adjustment aims to shorten the exposure window of easily exploitable vulnerabilities and accelerate the delivery of fix versions.

1 seconds ago

Elon Musk donated over $445 million during this U.S. midterm election cycle, and injected an additional $77 million into America PAC in October.

According to filings with the U.S. Federal Election Commission (FEC), Elon Musk injected $77 million into the super political action committee (super PAC) America PAC he supports in the first two weeks of October, bringing his total donations for this election cycle to over $445 million, making him one of the largest individual donors to a super PAC in U.S. political history. America PAC spent $43 million during the same period, ending with a cash balance of $46.5 million. Since August, the organization has allocated $43.2 million to voter outreach and get-out-the-vote efforts, and spent $8.8 million on digital media and text messaging services. The funds are primarily directed to key congressional races in states including Texas, Ohio, and Michigan, with spending on Texas Senate races being particularly prominent. Additionally, Musk donated $158 million to the Senate Leadership Fund, which supports Republican Senate candidates, in September. As the U.S. midterm elections approach, both major parties are ramping up financial contributions; as of the end of the third quarter, Trump, the Republican Party, and congressional super PACs backing Republican candidates have raised a total of $2.1 billion, exceeding the $1.3 billion raised by Democratic-aligned organizations.

1 seconds ago

Inside Story: OpenAI Fires 3 Security Researchers Amid Leak Investigation Involving External Audit Partner

Beating AI Insight Flash: OpenAI fired three security researchers at the end of September for violating sensitive information management rules. The Wall Street Journal disclosed more details on October 22: the company suspected the three of leaking model architecture secrets to external security expert Ryan Greenblatt, and demanded they unlock their personal phones. Investigators found that some of the chat logs between the researchers and Greenblatt on Signal had auto-delete enabled. A week later, the three were summoned to a meeting and fired simultaneously. Greenblatt had participated in OpenAI’s external security investigations, and one of the fired researchers was responsible for collaborating with external security agencies. All three denied leaking secrets, stating the dismissal was likely related to their advocacy for AI safety oversight. One of them also claimed he was fired for accidentally opening an executive email he had access to. OpenAI denied retaliation, emphasizing the dismissal stemmed from violations uncovered in internal investigations, not employees raising safety concerns. However, the company did not release full details of the violations, and the three researchers said they never received a written explanation.

1 seconds ago

Trade.xyz launches JIO Pre-IPO perpetual contract trading

Trade.xyz announced on social media that the pre-IPO perpetual contract (IPOP) market for JIO is now live. Each JIO unit corresponds to one common share of Jio Platforms Limited, quoted in US dollars. Currently, JIO operates as a pre-IPO market reflecting expected share prices, and is set to convert to a standard XYZ perpetual contract after Jio Platforms’ IPO. Post-IPO, oracles will convert the underlying stock’s rupee price to US dollars at the prevailing USD/Indian rupee exchange rate. Jio Platforms provides digital connectivity and services in India.

1 seconds ago

Samsung’s Taylor 1 wafer fab has launched follow-up equipment investment, ramping up efforts to achieve 2-nanometer mass production.

According to a South Korean media report on October 23, Samsung Electronics has launched follow-up equipment investment at its No. 1 wafer fab in Taylor, Texas, completing the final pre-mass production phase of setup. This facility is Samsung’s first wafer foundry mass production line in the U.S., targeting 20,000 wafers per month of 2-nanometer capacity by the second half of next year. Samsung has recently ordered equipment, initially to meet a monthly capacity of around 6,000 wafers, with the equipment arriving gradually. The No. 1 fab broke ground in 2022, with Samsung’s total investment reaching approximately $37 billion. It is scheduled to begin operations by the end of 2026 and start mass production of EUV-based 2-nanometer chips from 2027. Samsung’s 2-nanometer yield has risen from around 60% earlier this year to roughly 80%, meeting mass production requirements. In terms of orders, the fab has secured full 2-nanometer orders before launch, with clients including Tesla’s AI5 and AI6 chips, Broadcom’s communication chips, and Arm’s smart device chips. Samsung and Tesla signed a $16.5 billion long-term supply contract in July 2025, valid through the end of 2033. Expansion plans do not stop here. Samsung plans to break ground on Taylor’s No. 2 fab in early November, which will be 1.5 times the size of the No. 1 facility, targeting mass production of 2-nanometer chips by 2030. Samsung’s total investment in central Texas exceeds $37 billion, and the U.S. CHIPS and Science Act has approved up to $4.745 billion in direct subsidies. The competitive landscape remains to be tested. TrendForce data shows TSMC held a 72.5% global wafer foundry revenue share in the second quarter of this year, while Samsung accounted for 5.9%. The Taylor fab’s capacity ramp and yield stability will determine whether Samsung can convert its order momentum into a market share recovery.

1 seconds ago

Popular tokens

BitcoinEthereumHyperliquidSolanaTRONBNBTetherAaveXRPPepeFartcoinOndoJupiterUniswapBonkPendleEthenaArbitrumAvalancheLidoChainlinkPolygonDogecoinCardano