Signals

2026-08-17 / deepseek-harness

Nothing authenticates the Web UI, and the code fence says so in its own comment

Edited by Michael Ruescher

The documented way to run this harness starts a web interface on a loopback port. The request-trust module is the fence, and it is candid in its own header comment about what it does not do. Carried with it because it compounds: a plugin is an unsandboxed in-process module with no permission declaration, and a public topic for third-party plugins already exists, so the install-a-plugin path and the unauthenticated-local-surface path are live at the same time.

What this changes for operators

  • Do not expose that port. Loopback-only is the entire access control, so any tunnel, container port mapping, or reverse proxy in front of it is the whole security boundary.
  • Treat a third-party plugin as code you are running in-process with no declared permissions, because that is what it is. Read it before you install it.

Signal metadata

Source findings

Run: 2026-08-17-weekly-digest-2026-08-10_2026-08-17-frontier-v0

Schema: bitter.frontier_signals.v0 / ID: 2026-08-17-deepseek-web-ui-unauthenticated

Research evidence and publication history are open in the repository.