Opera Rolls Out Local AI Processing via WebAI Standard in Opera One Browser
Opera has released an early version of support for WebAI, a proposed web standard designed to let websites and browser extensions run generative AI models directly on the user's computer rather than sending data to remote servers.
The implementation first appears in Opera One, with plans to bring the same capabilities to Opera GX and Neon in the future. According to the company's official announcement, WebAI works with multiple models, including Gemma from Google. On compatible Apple hardware it also supports Apple's own local foundational model, and the standard deliberately avoids tying users to any single provider.
Available functions include text generation, content classification, and analysis of connections between different pieces of information. By moving inference to the local device, developers can add these features without maintaining their own server-side AI infrastructure or paying for every cloud request. End users likewise do not need a subscription to an external AI service.
Activation is voluntary. Because all computations happen on the device, data processed by the local model never leaves the computer for a cloud provider. The trade-off is increased load on the user's hardware, with performance varying according to the capabilities of the installed CPU, GPU, and available memory.
Related articles
TLS Fingerprinting Explained: From Handshakes in TLS 1.2/1.3 to JA3, JA4, HTTP/2 Analysis and uTLS Evasion
The article provides an in-depth examination of how TLS handshakes reveal client identity even before any HTTP data is sent. It traces the evolution from early SSL versions developed by Netscape to modern TLS 1.3, highlighting how elliptic curve cryptography and AEAD ciphers reduced latency while increasing observability challenges for defenders. Detailed breakdowns show why JA3 hashes became unreliable due to GREASE randomization and extension ordering changes, prompting the shift to the more robust JA4+ family that uses sorted, GREASE-resistant blocks for stable fingerprints. The piece also covers HTTP/2 fingerprinting signals and practical tools such as uTLS in Go for mimicking browser TLS stacks and Finch for traffic analysis. Real Wireshark captures of Client Hello packets to GitHub illustrate how Cloudflare and WAF systems detect scripted clients despite matching User-Agent headers. Overall, the content serves as both a historical overview and a hands-on guide for security engineers working on bot mitigation and traffic obfuscation.
Centralized Secret Management: Comparing Eight Tools for DevOps and Spring Boot Applications
The article examines the challenges of managing secrets such as passwords, API tokens, and SSH keys across development, CI/CD pipelines, and production environments. It explains how centralized secret registries solve issues like scattered .env files, outdated credentials, and lack of audit trails while emphasizing that delivery mechanisms to applications must be chosen separately. Key concepts including static versus dynamic credentials, leases, rotation, and machine identities are defined to help teams implement least-privilege access. The review compares Infisical, HashiCorp Vault, OpenBao, Doppler, 1Password CLI, Bitwarden Secrets Manager, Passbolt, and Yandex Lockbox across deployment models, offline support, and integration options. Special attention is given to CLI run commands that avoid plaintext files, Spring Cloud Vault integration, and the trade-offs between SaaS convenience and self-hosted control. Practical recommendations focus on separating developer and machine access as well as development and production environments.
Russian Prosecutor's Office Withdraws Lawsuit Against Timur Turlov and Freedom Holding Corp.
The Tverskoy District Court in Moscow terminated proceedings after the Russian Prosecutor General's Office withdrew its administrative claim against Timur Turlov and several related entities. The court accepted the refusal on October 15, 2026, lifted all previously imposed asset restrictions, and ended the case without examining the merits. The original claim sought to seize hundreds of millions of dollars in assets, declare the defendants an extremist organization, and ban their activities in Russia. No reasons for the sudden withdrawal were provided during the preliminary hearing. The decision prevents the Prosecutor General's Office from refiling the same claim against the same parties on identical grounds under Russian administrative procedure rules. Freedom Holding Corp. stated it has no operations or assets in Russia and expressed surprise at the original filing. Timur Turlov, who holds Kazakh citizenship and serves as FIDE president, was listed among the defendants alongside Freedom Holding Corp., Freedom Finance Europe Ltd., and W-Empirical Holding Corp.
RWB Infra x Security Meetup Shares Recordings on GitLab Scaling, Kubernetes Bare Metal, Vault PKI and DevSecOps Platforms
On October 3 in Moscow, RWB held the Infra x Security Meetup that combined infrastructure and information security tracks. Infrastructure speakers covered scaling GitLab CE under growing load, trade-offs in developing the DCIM data center management product, building centralized PKI with Vault, and operational challenges of running Kubernetes on bare metal servers. Security speakers discussed scaling DevSecOps from pipeline scanning to an ASPM platform, vulnerability management tools that reduced remediation time, protecting data without a single perimeter using Identity × Data × Context × Policy, and automating access control across one thousand systems in under 90 seconds. All presentations were recorded and the videos plus slides are now publicly available on YouTube and VK. The event highlighted practical engineering decisions made by RWB teams while operating large-scale internal platforms.