Habr•October 8, 2026•🇷🇺Translated from Russian

Luna Decisions Integration with n8n for Real Estate Listing Parsing: Workflow Architecture, Limitations and Open Questions

A technical deep-dive published on a developer platform examines the architecture of an n8n workflow designed to parse and monitor real-estate listings. The author stresses that the article is neither a customer case study nor a deployment report, but rather a transparent discussion of integration patterns, comparison logic, and the potential role of Luna Decisions API.

The minimal viable contour begins with a Telegram bot trigger or cron schedule that calls an HTTP Request node to fetch listings. Data then passes through Hata_Normalizer to produce flat records containing ad_id, link, price in USD and local currency, room count, area, floor, building year, district, address and publication time. Previous state is read from Google Sheets, which simultaneously serves as a human-readable dashboard and persistent storage.

The core Dispatcher node compares incoming items against the stored snapshot. New advertisements receive the label “НОВИНКА”, price reductions are tagged with the exact drop amount and a coarse bucket, while items absent from the latest full scan are marked “ПРОДАНО/СНЯТО”. The author notes several practical safeguards: null prices must be excluded from calculations, publication dates must be validated, and missing links should be stored as null rather than fabricated URLs.

After the Dispatcher writes both the updated vitrine and an event journal, a Build_Prompt node assembles statistics and filtered events for a conventional language model that produces a human-readable Telegram summary. The author argues that this textual summary is useful for periodic review, yet insufficient when the goal is to trigger separate notifications; a machine-readable decision is required instead.

The discussion then turns to OpenAI GPT-6 Luna Decisions and its Decisions API, which returns typed scores (noul, choice, score) together with a shared state object. The writer proposes inserting an experimental branch that feeds only price-change events possessing valid numeric deltas to the new endpoint, records the model response, and applies a fallback to the existing rule-based path if the call times out or returns an error. No automatic notifications are generated from the experimental branch during the initial test phase.

Several open questions are posed to the community: whether the additional latency and cost of a dedicated Decisions API are justified compared with ordinary structured outputs or simple numeric thresholds; how to handle partial crawls that falsely mark listings as removed; and whether currency-origin data and multi-observation price history should be supplied before any model is asked to classify a price movement.

Related articles

Habr•Other

TLS Fingerprinting Explained: From Handshakes in TLS 1.2/1.3 to JA3, JA4, HTTP/2 Analysis and uTLS Evasion

The article provides an in-depth examination of how TLS handshakes reveal client identity even before any HTTP data is sent. It traces the evolution from early SSL versions developed by Netscape to modern TLS 1.3, highlighting how elliptic curve cryptography and AEAD ciphers reduced latency while increasing observability challenges for defenders. Detailed breakdowns show why JA3 hashes became unreliable due to GREASE randomization and extension ordering changes, prompting the shift to the more robust JA4+ family that uses sorted, GREASE-resistant blocks for stable fingerprints. The piece also covers HTTP/2 fingerprinting signals and practical tools such as uTLS in Go for mimicking browser TLS stacks and Finch for traffic analysis. Real Wireshark captures of Client Hello packets to GitHub illustrate how Cloudflare and WAF systems detect scripted clients despite matching User-Agent headers. Overall, the content serves as both a historical overview and a hands-on guide for security engineers working on bot mitigation and traffic obfuscation.

Habr•Other

Centralized Secret Management: Comparing Eight Tools for DevOps and Spring Boot Applications

The article examines the challenges of managing secrets such as passwords, API tokens, and SSH keys across development, CI/CD pipelines, and production environments. It explains how centralized secret registries solve issues like scattered .env files, outdated credentials, and lack of audit trails while emphasizing that delivery mechanisms to applications must be chosen separately. Key concepts including static versus dynamic credentials, leases, rotation, and machine identities are defined to help teams implement least-privilege access. The review compares Infisical, HashiCorp Vault, OpenBao, Doppler, 1Password CLI, Bitwarden Secrets Manager, Passbolt, and Yandex Lockbox across deployment models, offline support, and integration options. Special attention is given to CLI run commands that avoid plaintext files, Spring Cloud Vault integration, and the trade-offs between SaaS convenience and self-hosted control. Practical recommendations focus on separating developer and machine access as well as development and production environments.

AntiMalware•Other

Opera Rolls Out Local AI Processing via WebAI Standard in Opera One Browser

Opera has introduced an early implementation of WebAI, a proposed web standard that enables websites and extensions to run AI models directly on the user's device instead of relying on remote servers. The feature debuts in Opera One and will later expand to Opera GX and Neon. Supported models include Google's Gemma as well as Apple's local foundational model on compatible Mac hardware, with no vendor lock-in. Key capabilities cover text generation, content classification, and analysis of relationships between information fragments. Developers gain the ability to add AI features without building server infrastructure or incurring per-query cloud costs, while users avoid subscriptions to external AI services. All processing occurs locally on an opt-in basis, keeping data off cloud providers, although performance depends on the device's hardware capabilities.

Securitylab•Other

Russian Prosecutor's Office Withdraws Lawsuit Against Timur Turlov and Freedom Holding Corp.

The Tverskoy District Court in Moscow terminated proceedings after the Russian Prosecutor General's Office withdrew its administrative claim against Timur Turlov and several related entities. The court accepted the refusal on October 15, 2026, lifted all previously imposed asset restrictions, and ended the case without examining the merits. The original claim sought to seize hundreds of millions of dollars in assets, declare the defendants an extremist organization, and ban their activities in Russia. No reasons for the sudden withdrawal were provided during the preliminary hearing. The decision prevents the Prosecutor General's Office from refiling the same claim against the same parties on identical grounds under Russian administrative procedure rules. Freedom Holding Corp. stated it has no operations or assets in Russia and expressed surprise at the original filing. Timur Turlov, who holds Kazakh citizenship and serves as FIDE president, was listed among the defendants alongside Freedom Holding Corp., Freedom Finance Europe Ltd., and W-Empirical Holding Corp.