Cloudflare's AI Psychosis(opensauce.it)

73 points by gregzeng95 2 months ago | 35 comments

IPv6 Is Hard(techlog.jenslink.net)

221 points by miyuru 1 year ago | 338 comments

Attacking UNIX Systems via CUPS(evilsocket.net)

385 points by NetBender 2 years ago | 280 comments

Security researcher evilsocket's writeup of a remote code execution attack on GNU/Linux and UNIX systems via CUPS and cups-browsed, plus notes on the disclosure process.

Getaddrinfo() on glibc calls getenv(), oh boy(rachelbythebay.com)

259 points by defrost 3 years ago | 229 comments

Ask HN: Are you interested in a text only browser that runs JavaScript?

4 points by keepamovin 1 year ago | 1 comments

The Language That Never Was(blog.celes42.com)

26 points by darthdeus 1 year ago | 1 comments

Io_uring, kTLS and Rust for zero syscall HTTPS server(blog.habets.se)

444 points by guntars 1 year ago | 138 comments

Blog post describing building an HTTPS web server in Rust using io_uring and kernel TLS to avoid system calls on the request path.

What a Hacker Stole from Me(mynoise.net)

355 points by wonger_ 1 year ago | 106 comments

A myNoise blog post by founder Stéphane describing a hacker's attack on the myNoise website, first via code-injection attempts and then a different strategy.

I could've accessed 17T Microsoft records(blog.faav.net)

287 points by luispa 27 days ago | 120 comments

A security researcher's blog post describing a Microsoft internal analytics service flaw where unchecked token signatures allowed admin access to query 17.3 trillion records.

AWS Bedrock to require sharing data with Anthropic for Mythos and future models

369 points by TomAnthony 4 months ago | 216 comments

Hacker News discussion of Anthropic requiring 30-day data retention for Mythos-class Claude models on AWS Bedrock, moving data outside AWS's security boundary.

AI agent bankrupted their operator while trying to scan DN42(lantian.pub)

1348 points by xiaoyu2006 4 months ago | 488 comments

Blog post recounting how an AI agent trying to join the DN42 hobbyist network to scan it ran up a $6531.30 AWS bill for its operator.

Data accidentally exposed by Microsoft AI researchers(wiz.io)

661 points by deepersprout 3 years ago | 212 comments

Wiz Research blog post describing how a misconfigured Azure SAS token in a Microsoft AI GitHub repository exposed 38TB of internal data, including Teams messages.