Source excerpt
dsh-login：给 DeepSeek Harness Web GUI 加上登录墙与多用户隔离 前言¶ DeepSeek Harness（下称 DSH）的 Web GUI 默认不带登录，它假设只有 localhost 上有一个用户。一旦把服务绑定到 0.0.0.0——用手机访问、在局域网里共享、或交给小团队使用——同一网络内的任何人都能打开这个页面：读到全部会话、消耗你配置的模型 API key、甚至修改 host 设置。
Automatically summarized from source discussions. Sources and the full record are available below.
Evidence & timeline
Verification
Not yet verified
Maintainer response
Untriaged
Author response
No response recorded
Earliest source found so far
Unknown
Sep 8, 2026, 07:51 AM
Lifecycle
Emerging
Source scope
1 automatically linked original sources; source relationships and independence are not human reviewed
Attribution confidence · 0%
First found by this site · Sep 9, 2026, 06:01 AM
No source-to-source propagation relation recorded.
The lead source, “docs(cards): add 0.1.5-alpha.2 -> 0.1.5-rc.1 corridor card set (DSH-0.1.5-RC1, 5 cards),” says: “补上 dsh-v0.1.5-alpha.2 → dsh-v0.1.5-rc.1 这条走廊边（tag b2e3b2a0… → 183f08e9…），新增卡片集 v0.1.5-rc.1.md（DSH-0.1.5-RC1，5 张，draft / curated），并同步走廊索引、两个 SKILL 参考表与根 README 总数。.” 19 related sources are linked for comparison to determine whether they describe the same event.
The lead source, “docs(cards): v0.2.1-alpha.4 走廊卡（3 张，DSH-0.2.1-A4）,” says: “v0.2.1-alpha.4 走廊卡：3 张（DSH-0.2.1-A4-01…03），dsh-v0.2.1-alpha.3 → dsh-v0.2.1-alpha.4。独立 PR（基于 main，不叠栈；序表只加自己的 order-24 行，orders 21–23 留给 #273/#278/#279，合并后各行自然并列）。.” 1 related source is linked for comparison to determine whether they describe the same event.
The lead source, “fix(benchmark): fetch Web probe HTML from the discovered host origin,” says: “M5 and H8 exchange the bootstrap token from the URL printed by DSH, then fetch HTML from a fixed port 3080. If DSH prints a URL on another port, the probe reads a different endpoin.” 35 related sources are linked for comparison to determine whether they describe the same event.
