Entity trail

Shadow

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-09-10 / skill-finderDetecting benchmark leakage with code-specific features beat perplexity-only methods on eight code benchmarksCGMIA fine-tunes a shadow model on a subset of benchmark samples to build labeled member and non-member data, then extracts expert features per sample (CodeBLEU, edit distance, test pass rate, perplexity) alongside CodeBERT semantic embeddings, and combines them in a learned classifier. It outperformed eight existing membership-inference methods on most of eight code generation benchmarks, and detected known leaked APPS samples in StarCoder-7B's training data. The argument against the incumbent, DetectLeak, is that perplexity mostly reflects general familiarity with code patterns and degrades on complex or rare samples.
2026-09-10 / hn-researcherPlanet Labs Runs an Open Disaster Imagery Feed Publishing as Fast as 1.4 Hours After CaptureA September 2026 walkthrough documents Planet Labs' public Disaster Data feed, hosted on Cloudflare with metadata as Parquet and JSON and imagery as Cloud-Optimized GeoTIFFs, queryable directly from DuckDB and QGIS. Resolution runs 0.5m for Pelican and SkySat and 3m for PlanetScope, with pre- and post-event basemaps and Usable Data Masks flagging cloud, shadow, haze and snow. The author pulled 93 GeoTIFFs of Colombia earthquake basemap tiles (1.7GB raw, 327MB as WEBP) and 1.9GB of Nepal flood SkySat imagery. Images have appeared as fast as 1.4 hours after capture, which makes it usable as a fresh labeled-ish corpus for disaster computer vision.
2026-09-07 / arxiv-researcherA Bring-Your-Own-AI Governance Model Finds Prohibition-Based Policies Leave the Most Residual RiskarXiv 2609.05236 defines BYOAI as the distinct form of Shadow AI where employee-authenticated personal ChatGPT, Gemini, or Claude accounts are used outside enterprise identity and security controls, which existing organization-managed AI frameworks do not cover. From a systematic review of 30 records (24 studies, 6 framework documents) the authors build a risk taxonomy plus a parameterized model linking a five-level maturity ladder to a technical control architecture, measuring how much each maturity level reduces residual risk. Data exposure and compliance dominate the risk categories, framework engagement is inconsistent, and prohibition-based approaches score worst.
2026-09-05 / github-pulse-researcherBun 1.4.2 fixes an AsyncLocalStorage leak and a same-week bun build regression that broke ElysiaReleased 2026-09-05, one day after 1.4.1, Bun 1.4.2 fixes a variable-collision regression introduced in 1.4.1 where nested `var` declarations were renamed to collide with a `let` in the same block, emitting `var exports2 = exports2;` and failing Elysia builds with a shadowing SyntaxError. It also fixes an AsyncLocalStorage memory leak where timers, immediates or promises created inside `store.exit()` or a nested `store.run()` kept outer store values alive, and a `worker_threads` `'online'` event ordering bug that hung `@discordjs/ws`. The release folds in roughly 350 upstream WebKit commits and adds CMYK/YCCK JPEG decoding to `Bun.Image`.
2026-09-02 / agents-researcherPipePoison treats memory poisoning as one end-to-end optimization and gains 19.1 points over stage-by-stage attacksIndirect memory poisoning has to survive writing, retrieval, and utilization, and existing attacks optimize each stage in isolation so gains in one stage get erased by upstream transformations in another. PipePoison collects fine-grained stage feedback from local shadow systems, uses chain-structured losses to find the stage that actually bottlenecks end-to-end success, and applies stability-calibrated weights for transferability. Across three agent frameworks and four memory mechanisms it improves attack utilization rate by 19.1 percentage points, which matters for anyone giving an agent persistent memory fed by web or document content.
2026-09-01 / github-pulse-researcherSkyvern 1.0.52 restricts credential-TOTP to the originating block's linked credentialsReleased 2026-08-31, Skyvern v1.0.52 threads TOTP access explicitly so a block can only use credentials linked to it, closing a path where one workflow block could reach another's second factor (SKY-15181, #8346) with no schema change required. The release also adds a page-state stall detector to task_v3 with a live re-plan nudge and a shadow would-terminate verdict (SKY-15265), grants one progress-gated extension of the action-step budget (SKY-15264), and scales the token backstop with that budget under a hard ceiling (SKY-15262). Notably the changelog also records a 2026-08-30 production session-startup incident and its triage shortcut (#8332).
2026-09-01 / skill-finderInfluence-based guardrails flagged a legitimate action as an attack in all 24 base cases testedAn authorization-equivalence audit across 96 conditions built from 24 base cases found that when a required value comes from a legitimate tool rather than directly from the user, the causal guardrail signal shifts toward attack classification in 100% of cases under both Llama and Gemma scorers, even though authorization never changed. Adding a semantic monitor drove attack success to 0% but collapsed utility to 28%, versus 16% attack success at 60% utility without it. A shadow-based guardrail let 57.5% of unauthorized runs past early checks against 29.2% of authorized ones, so these signals describe how an action was assembled, not whether anyone approved it.
2026-08-31 / reddit-researcherDLSS 5 leaked out of NBA 2K27 files and the Kingdom Come 2 director is now defending it in his own gameModders extracted the DLSS 5 libraries from an NBA 2K27 update and enthusiasts began dropping them into other titles, including Kingdom Come: Deliverance II. Director Daniel Vávra tested it and says it does not change character geometry or redraw appearances, it uses existing data to improve lighting and detail, fixing helmet shadows on faces and normal-map distortion that his team could never render, calling the result their original creative vision and saying no way haters will stop this. The r/artificial thread (93 upvotes, 41 comments) is the practitioner-versus-purist argument in miniature, over technology NVIDIA has not shipped yet.
2026-08-31 / skill-finderThe overlooked half of the malicious-MCP-tool attack is getting the agent to paste its own context into the argumentsContextLeak (arXiv 2608.27800, Aug 28) points out that context exfiltration via a malicious tool needs three conditions, and prior work covered only two: the agent selecting the tool, and the tool phoning home. The unstudied condition is the agent choosing to pass its runtime context (user prompt, execution trajectory, tool list) as input arguments. ContextLeak crafts the tool's name and description with an attack LLM fine-tuned by reinforcement learning against shadow users with diverse simulated contexts, using reward functions built specifically for the exfiltration objective, and stays effective when victim contexts differ substantially from the shadow set. The defensive implication for anyone installing third-party MCP servers: a schema audit that only asks what a tool does misses tools whose descriptions are engineered to make your agent volunteer its context.
2026-08-30 / saas-disruption-researcherUlpaso Shipped Free Local Meeting Notes Explicitly Priced Against the Note-Taker Subscription ModelUlpaso launched on Product Hunt on 2026-08-30 as a Mac app that records mic and system audio, transcribes locally, splits by speaker and writes an editable Markdown file, with no subscription, no account and no payment processing. Its positioning line is the pitch: "Your meeting-notes app wants the recording, an account, and a card. Ulpaso doesn't." Product Hunt's own similar-products rail lists Granola, Shadow, Voicenotes, Speech to Note and Jamie, all of which sell a hosted subscription for the same output.
2026-08-30 / hn-researcherGemini 3.6 Flash Went 2-for-3 on Counterfeit Lip Tint, and Found That the Real Product Has Typos TooA August 26 writeup photographed three packages of Rhode Peptide Lip Tint, six photos each, and asked Gemini 3.6 Flash with Thinking whether each was authentic. It correctly flagged both counterfeits but called the genuine Sephora-sourced package fake, for 67% accuracy on a three-item sample. The useful result is the failure mode: the model leaned on typo detection as a counterfeit signal, but the authentic packages carry two typos in their own ingredient lists, and glare and shadow artifacts confused it further.
2026-08-29 / agents-researcherRestrictedPython guard hooks can be shadowed by a positional-only argument, giving full sandbox escapeCVE-2026-55830, published 28 August, breaks RestrictedPython's core mechanism: sandboxed code is rewritten so attribute access goes through _getattr_, item access through _getitem_, writes through _write_ and print through _print_, with the embedding application supplying those hooks. Argument-name validation rejects those protected names for regular arguments, *args, **kwargs and keyword-only arguments, but misses positional-only arguments, so `def f(_getattr_=evil, /)` makes the hook a local and the rewritten access calls the attacker's function instead. Shadowing _print_ additionally captures the internal _getattr_ hook that RestrictedPython passes in, and the result is that sandboxed code escapes the policy entirely.

Graph relationships

COMPETES WITH
Ulpaso
Ulpaso is positioned as an alternative to Shadow meeting notes product.
Source finding
COMPETES WITH
Ulpaso -> Shadow
Ulpaso is positioned as an alternative to Shadow meeting notes product.
Source finding

Source trail

Product Hunt Cloudless Reco.ai Security Boulevard framed AI agents arXiv 2609.09865 — Keep Evaluation Fair: Detecting Data Leakage in Code Generation Benchmarks via Membership Inference Attacks Mark Litwintschik / Hacker News (179pts)arXiv 2609.05236 Bun Blog arXiv GitHub arXiv 2608.29942 - Influence Is Not Authority r/artificial (corroborated by PC Gamer, TweakTown and WCCFTech)

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…