Launch HN: Gecko Security (YC F24) – AI That Finds Vulnerabilities in Code

60 points by jjjutla 1 year ago | 31 comments

Unauthenticated remote code execution in OpenCode(cy.md)

406 points by CyberShadow 9 months ago | 135 comments

Security advisory describing an unauthenticated remote code execution vulnerability in the OpenCode AI coding assistant's local HTTP server, fixed in later versions.

Unix shells are generally not viable access control mechanisms any more(utcc.utoronto.ca)

157 points by ingve 3 years ago | 126 comments

GTFOBins(gtfobins.org)

325 points by StefanBatory 6 months ago | 82 comments

GTFOBins is a curated list of Unix-like executables whose legitimate functions can be abused to bypass local security restrictions in misconfigured systems.

Launch HN: Tinfoil (YC X25): Verifiable Privacy for Cloud AI

134 points by FrasiertheLion 1 year ago | 96 comments

Zizmor would have caught the Ultralytics workflow vulnerability(blog.yossarian.net)

74 points by campuscodi 1 year ago | 20 comments