Tachy0n: The Last 0day Jailbreak(blog.siguza.net)

243 points by todsacerdoti 1 year ago | 37 comments

1-Click GitHub Token Stealing via a VSCode Bug(blog.ammaraskar.com)

620 points by ammar2 4 months ago | 95 comments

A blog post describing a VSCode webview bug that lets an attacker steal a GitHub token with repo read/write access, including private repos, via a single click.

DDoSecrets publishes 410 GB of heap dumps, hacked from TeleMessage(micahflee.com)

622 points by micahflee 1 year ago | 173 comments

Blog post by Micah Lee about DDoSecrets publishing 410 GB of heap dumps hacked from TeleMessage's archive server.

GitHub Copilot CLI downloads and executes malware(promptarmor.com)

43 points by sarelta 8 months ago | 12 comments

XMPP: The Gem of Instant Messaging(adele.pages.casa)

92 points by todsacerdoti 1 year ago | 66 comments

Sourcehut account takeover via build logs (XSS in ansi2html)(blog.arusekk.pl)

136 points by arusekk 1 month ago | 27 comments

A vulnerability writeup describing a wormable XSS in SourceHut's ansi2html.py that let attackers take over accounts of users viewing injected build logs.

I hacked a dating app (and how not to treat a security researcher)(alexschapiro.com)

442 points by bearsyankees 1 year ago | 265 comments

A blog post by a security researcher describing vulnerabilities found in a dating app and the startup's poor handling of the disclosure.

Exposed DeepSeek database leaking sensitive information, including chat history(wiz.io)

608 points by talhof8 1 year ago | 423 comments

Wiz Research blog post reporting a publicly accessible DeepSeek database exposing over a million log lines, including chat history and other sensitive data.

Chat is a bad UI pattern for development tools(danieldelaney.net)

773 points by cryptophreak 1 year ago | 395 comments

Blog post by Daniel Delaney arguing that chat is a poor user interface pattern for AI-powered software development tools.

Encrypting private data and private communications is now an ethical duty(blog.tripu.info)

416 points by gasull 3 years ago | 200 comments

A personal blog essay arguing that end-to-end encrypting private data and communications has become an ethical duty, using a glass-walls analogy.

Apps SDK(developers.openai.com)

449 points by alvis 1 year ago | 363 comments

OpenAI developer documentation home for the Apps SDK, a preview framework for building apps that run inside ChatGPT using MCP servers.

South Korea introduces universal basic mobile data access(theregister.com)

338 points by saikatsg 6 months ago | 95 comments

The Register article on South Korea's scheme giving mobile subscribers unlimited 400 Kbps data after allowances expire, agreed by SK Telecom, KT and LG Uplus.