XZ backdoor: "It's RCE, not auth bypass, and gated/unreplayable."(bsky.app)

1207 points by junon 2 years ago | 743 comments

Bluesky post by Filippo Valsorda sharing preliminary analysis that the xz backdoor enables gated, unreplayable RCE via a hooked RSA_public_decrypt verifying an Ed448 signature.

Show HN: First Claude Code client for Ollama local models(github.com)

30 points by SerafimKorablev 9 months ago | 14 comments

1M people have joined Bluesky in the last day(bsky.app)

71 points by davidbarker 1 year ago | 52 comments

Building Local-First Flutter Apps with Riverpod, Drift, and PowerSync(dinkomarinac.dev)

33 points by kobieps 1 year ago | 17 comments

If you're curious why every username is a domain, it's because users are sites(bsky.app)

54 points by consumer451 2 years ago | 38 comments

Bluesky Reaches 10M Accounts(bsky.app)

157 points by Kye 2 years ago | 75 comments