Unix: An Oral History(princeton.edu)

105 points by zdw 3 years ago | 20 comments

A Brutal Sex Trade Built for American Soldiers(nytimes.com)

20 points by karaokeyoga 3 years ago | 6 comments

LK-99: The live online race for a room-temperature superconductor(forums.spacebattles.com)

489 points by fofoz 3 years ago | 492 comments

A SpaceBattles forum thread discussing claims of the LK-99 room-temperature, ambient-pressure superconductor and the online efforts to replicate it.

Discussing CNET’s content-pruning to improve SEO ranking(tedium.co)

128 points by marban 3 years ago | 61 comments

The Eleuther AI Mafia(latent.space)

70 points by swyx 3 years ago | 38 comments

Insurance companies fill their networks with ‘ghost’ therapists(seattletimes.com)

81 points by apwheele 3 years ago | 70 comments

The Chrome VRP Panel has decided to award $250k for this report(issues.chromium.org)

473 points by alexcos 1 year ago | 253 comments

Chromium issue tracker entry for an ipcz bug letting a compromised renderer duplicate a browser process handle to escape the sandbox, marked fixed.

Escaping the Chrome Sandbox Through DevTools(ading.dev)

371 points by vk6 2 years ago | 72 comments

Blog post describing how the author found CVE-2024-6778 and CVE-2024-5836, Chromium bugs letting a malicious extension escape the sandbox via DevTools, earning a $20,000 bounty.

Chromium bug bounty money tree browser(lyra.horse)

332 points by admp 2 years ago | 72 comments

An interactive tree browser that maps Chrome Vulnerability Reward Program bounty payouts to the Chromium source files changed by the corresponding fixes.

GitHub RCE Vulnerability: CVE-2026-3854 Breakdown(wiz.io)

424 points by bo0tzz 6 months ago | 89 comments

Wiz Research blog post detailing CVE-2026-3854, a critical flaw in GitHub's internal git infrastructure enabling remote code execution on GitHub.com and GitHub Enterprise Server.

OpenClaw privilege escalation vulnerability(nvd.nist.gov)

493 points by kykeonaut 6 months ago | 232 comments

NVD entry for CVE-2026-33579, a privilege escalation vulnerability in OpenClaw; the captured screenshot shows a Reddit network-policy block page instead.

RCE Vulnerability in React and Next.js(github.com)

559 points by rayhaanj 10 months ago | 214 comments

GitHub security advisory GHSA-9qr9-h5gf-34mp for a critical (CVSS 10.0) remote code execution vulnerability in React Server Components affecting Next.js, with patched versions listed.