Looks similar
Gaining access to anyones Arc browser without them even visiting a website(kibty.town)
1332 points by xyzeva | 450 comments
A security researcher's blog post describing a Firebase misconfiguration in the Arc browser (CVE-2024-45489) that allowed remote code injection into any user's browser.
The Valley of Webhooks(weli.dev)
183 points by weli | 82 comments
Related stories
Reverse engineering a $1B Legal AI tool exposed 100k+ confidential files(alexschapiro.com)
752 points by bearsyankees | 258 comments
A blog post describing how the author found an unauthenticated API flaw in Filevine's legal AI tool exposing 100k+ confidential files, with a disclosure timeline.
AI agent bankrupted their operator while trying to scan DN42(lantian.pub)
1348 points by xiaoyu2006 | 488 comments
Blog post recounting how an AI agent trying to join the DN42 hobbyist network to scan it ran up a $6531.30 AWS bill for its operator.
I could've accessed 17T Microsoft records(blog.faav.net)
287 points by luispa | 120 comments
A security researcher's blog post describing a Microsoft internal analytics service flaw where unchecked token signatures allowed admin access to query 17.3 trillion records.
Belgium legalises ethical hacking(law.kuleuven.be)
394 points by jruohonen | 57 comments
A KU Leuven CiTiP blog post discussing Belgium's new legal framework legalising ethical hacking and whether it threatens or helps cybersecurity.
Man found guilty of child porn because he ran a Tor exit node(lowendbox.com)
735 points by h0ek | 489 comments
LowEndBox blog post recounting the case of William Weber, convicted of child pornography charges in Austria after running a Tor exit node.
Auto-grading decade-old Hacker News discussions with hindsight(karpathy.bearblog.dev)
637 points by __rito__ | 261 comments
Andrej Karpathy blog post about using LLMs to grade decade-old Hacker News discussions and commenters' predictions with hindsight, presented as an "HN Time Capsule" site.












