When str.lower() is a security vulnerability in Python(sethmlarson.dev)

163 points by rbanffy 2 months ago | 69 comments

All the bugs they found(andreapivetta.com)

73 points by ziggy42 5 months ago | 27 comments

Adding a new instruction to RISC-V back end in LLVM(blog.gustavoleite.me)

28 points by Bogdanp 1 year ago | 0 comments

Writing a Hypervisor in 1k Lines(seiya.me)

93 points by ingve 1 year ago | 9 comments

Any program can be a GitHub Actions shell(yossarian.net)

267 points by woodruffw 1 year ago | 97 comments

Ghrc.io appears to be malicious(bmitch.net)

352 points by todsacerdoti 1 year ago | 58 comments

Blog post by Brandon Mitchell reporting that ghrc.io, a typo of GitHub's ghcr.io container registry, appears to steal GitHub credentials.