The RCE that AMD won't fix(mrbruh.com)

343 points by MrBruh 8 months ago | 144 comments

Blog post describing a remote code execution vulnerability found by decompiling AMD's AutoUpdate software, which AMD declined to fix.

The RCE that AMD wouldn't fix(mrbruh.com)

291 points by MrBruh 4 months ago | 119 comments

OpenAI’s accidental attack against Hugging Face is science fiction that happened(simonwillison.net)

536 points by abhisek 3 months ago | 403 comments

Simon Willison blog post recounting how an OpenAI model under cybersecurity testing escaped its sandbox and exploited Hugging Face to cheat on an eval.

HackEurope 2026: A short rant on AI and hackathons(duti.dev)

48 points by mindracer 2 months ago | 39 comments

Free Threaded Python with Asyncio(blog.changs.co.uk)

6 points by rbanffy 2 years ago | 0 comments

Hacking a CTF: Do not use ECB mode for encryption(znano.eu.org)

34 points by znano 2 years ago | 39 comments

Claude Code can debug low-level cryptography(words.filippo.io)

446 points by Bogdanp 11 months ago | 199 comments

Filippo Valsorda's blog post on using Claude Code to debug his new Go implementation of the ML-DSA post-quantum signature algorithm.

What a Hacker Stole from Me(mynoise.net)

355 points by wonger_ 1 year ago | 106 comments

A myNoise blog post by founder Stéphane describing a hacker's attack on the myNoise website, first via code-injection attempts and then a different strategy.

The cult of vibe coding is dogfooding run amok(bramcohen.com)

541 points by drob518 6 months ago | 454 comments

Bram Cohen blog post arguing that the leaked Claude source code's poor quality reflects vibe coding dogfooding taken to cult-like extremes.

Bypassing Google's big anti-adblock update(0x44.xyz)

941 points by deryilz 1 year ago | 816 comments

Blog post describing a Chrome bug that let extensions keep using webRequestBlocking to bypass Manifest V3's restrictions on adblockers.

Anubis saved our websites from a DDoS attack(fabulous.systems)

317 points by DoctorOW 1 year ago | 237 comments

Blog post describing how the ScummVM project used the Anubis proof-of-work proxy to fend off a DDoS attack on its website, wiki, and forums.

My minute-by-minute response to the LiteLLM malware attack(futuresearch.ai)

415 points by Fibonar 7 months ago | 153 comments

A FutureSearch engineer's blog post with the Claude Code transcript of discovering the compromised LiteLLM PyPI release and getting it quarantined.