Unauthenticated remote code execution in OpenCode(cy.md)

406 points by CyberShadow 9 months ago | 135 comments

Security advisory describing an unauthenticated remote code execution vulnerability in the OpenCode AI coding assistant's local HTTP server, fixed in later versions.

Please don’t upload my code on GitHub(nogithub.codeberg.page)

295 points by modinfo 3 years ago | 423 comments

Serverless DTLS(proxylity.com)

8 points by mlhpdx 1 month ago | 5 comments

GitHub Copilot CLI downloads and executes malware(promptarmor.com)

43 points by sarelta 8 months ago | 12 comments

Show HN: Vet – A tool for safely running remote shell scripts(getvet.sh)

58 points by a10r 1 year ago | 20 comments

Anthropic says OpenClaw-style Claude CLI usage is allowed again(docs.openclaw.ai)

465 points by jmsflknr 6 months ago | 260 comments

OpenClaw documentation page for the Anthropic provider, noting that Anthropic staff said OpenClaw-style Claude CLI reuse is allowed again, alongside API key setup.

Grok(github.com)

1034 points by pierre 2 years ago | 375 comments

GitHub repository from xAI containing the open release of the Grok language model code and checkpoint loading scripts under Apache-2.0.

The path to open-sourcing the DeepSeek inference engine(github.com)

531 points by Palmik 1 year ago | 58 comments

GitHub directory in DeepSeek's open-infra-index repo with a README describing their plan for open-sourcing the DeepSeek inference engine.

Openhaystack: Build 'AirTags' – track Bluetooth devices via Apple's network(github.com)

437 points by thunderbong 1 year ago | 108 comments

GitHub repository for OpenHaystack, a framework from SEEMOO Lab for tracking personal Bluetooth devices via Apple's Find My network.

DEDA – Tracking Dots Extraction, Decoding and Anonymisation Toolkit(github.com)

78 points by greyface- 22 days ago | 9 comments

GitHub repository for DEDA, a TU Dresden toolkit to extract, decode, and anonymise the hidden yellow tracking dots printed by color laser printers.

DuckDB Doesn't Need Data to Be a Database(nikolasgoebel.com)

353 points by tosh 2 years ago | 115 comments

A blog post by Nikolas Göbel discussing how DuckDB can act as a database without storing data itself, querying external data sources directly.

OpenSSH 10.6(openssh.org)

97 points by torcete 20 days ago | 23 comments

Release notes for OpenSSH 10.6, noting many AI-assisted security bug reports, more frequent releases, and an upcoming deprecation of scp's -R flag.