@vintcessun: A pure Go LLM privacy gateway that redacts PII/secrets in milliseconds—already in production. Two-layer detection: structured PII via regex (email, phone, ID, bank card), secrets/credentials via gitleaks rules plus Shannan entropy as fallback. Key design: no NER (avoids latency), only irreversible redaction; Go's native regexp is RE2, linear time with no backtracking risk.
Summary
Introduces a pure Go LLM privacy gateway that uses two-layer detection (regex and gitleaks rules) to redact PII and secrets in milliseconds without additional models/GPU, already in production.
View Cached Full Text
Cached at: 06/22/26, 07:40 AM
A pure Go LLM privacy gateway, millisecond-level PII/secret sanitization — already in production.
Two-layer detection: structured PII via regex (email, phone, ID number, bank card), secrets/credentials using gitleaks rules plus Shannan entropy as a fallback.
Key design: no NER (to avoid latency), only irreversible masking; Go’s native regexp is RE2 — linear time with no backtracking risk.
If you’re integrating with an LLM gateway and want to avoid introducing extra models/GPUs, this architecture is worth a look.
Similar Articles
@vintcessun: An 8-stage vulnerability discovery agent that runs on a Claude subscription, essentially a reproduction of the Cloudflare Project Glasswing paper. Multiple narrow agents + intentional disagreement verification + reachability gating, breaking down 'which piece of code can actually be exploited by an attacker' into 8 precise steps. Recon uses Opus to decompose tasks, H…
Introduces an 8-stage vulnerability discovery agent based on Claude subscription, reproducing the core ideas of the Cloudflare Project Glasswing paper. It uses multiple narrow agents, intentional disagreement verification, and reachability gating to break down exploit analysis into precise steps, without the need for API keys.
@XAMTO_AI: Damn, just discovered a site-recon tool called Web-Check, and it's completely free! Just drop any URL in, and it strips the target site down to the bone—unsettlingly like doxxing: DNS records all laid out, server architecture exposed, frameworks, CMS, plugins—nothing stays hidden, open ports, historical snapshots…
Web-Check is a free, open-source website reconnaissance tool. Enter a URL and it extracts DNS records, server architecture, frameworks, CMS, open ports, subdomains, and more—ideal for developers and security researchers.
@seclink: 1. Agent security has evolved from an academic topic to an industry reality: FFmpeg zero-day ($1,000 cost) + Chrome 429 patch + OpenAI Lockdown Mode + OWASP framework — the security supply chain is being reshaped by AI Agents. 2.…
AI Agent security has moved from an academic topic to an industry reality, involving FFmpeg zero-day vulnerabilities, Chrome 429 patch, OpenAI Lockdown Mode, and the OWASP framework; meanwhile, Agent payment standards are becoming a battlefield for infrastructure, with Visa stablecoin settlement competing with traditional card networks.
Created a free tool to check what PII your LLM prompts are leaking before they hit the provider
A free tool has been released to help users detect personally identifiable information (PII) leaking from their LLM prompts before they reach the provider's servers.
@Lonely__MH: WTF—this is the ‘A-team’? Guangdong Mobile drops HTTPS, ships API keys in plain HTTP
Guangdong Mobile’s Token Plan ditches HTTPS for plain HTTP, sending API keys in the clear and igniting security alarms.