Restructuring GitHub's bug bounty program(github.blog)

47 points by soheilpro 3 months ago | 22 comments

How GitHub gave every repository a durable owner(github.blog)

76 points by ascertain 3 months ago | 25 comments

Sign in as anyone: Bypassing SAML SSO authentication with parser differentials(github.blog)

282 points by campuscodi 1 year ago | 111 comments

Gaining kernel code execution on an MTE-enabled Pixel 8(github.blog)

277 points by gulced 2 years ago | 46 comments

Disrupting supply chain attacks on NPM and GitHub Actions(github.blog)

77 points by nyku 2 months ago | 26 comments

Auf Wiedersehen, GitHub – CEO Steps Down(github.blog)

115 points by ben_hall 1 year ago | 60 comments

We used an AI agent to fix an open-source bug. Someone asked to ban us(github.com)

9 points by maxcr 1 month ago | 2 comments

A GitHub pull request to the VisiData project submitted using an AI agent to fix a bug, which drew a request to ban the contributors.

How we hacked McKinsey's AI platform(codewall.ai)

420 points by mycroft_4221 7 months ago | 168 comments

CodeWall blog post describing how its autonomous offensive agent found vulnerabilities in McKinsey's internal AI platform Lilli.

AOSP Source Releases Are So Late Developers Disassemble Libraries to Report Bugs(github.com)

450 points by tharen 12 days ago | 220 comments

GitHub issue in android/ndk reporting a bionic bug where wcscspn()/wcspbrk() treat every wchar_t >= 0x100 as a match on Android 17 builds.

RCE Vulnerability in React and Next.js(github.com)

559 points by rayhaanj 10 months ago | 214 comments

GitHub security advisory GHSA-9qr9-h5gf-34mp for a critical (CVSS 10.0) remote code execution vulnerability in React Server Components affecting Next.js, with patched versions listed.

AI agent opens a PR write a blogpost to shames the maintainer who closes it(github.com)

747 points by wrxd 8 months ago | 581 comments

A closed GitHub pull request to matplotlib by user crabby-rathbun proposing to replace np.column_stack with np.vstack().T for performance.

Android phones will soon reboot themselves after sitting unused for three days(arstechnica.com)

386 points by namanyayg 1 year ago | 317 comments

Ars Technica article reporting that a Google update will make Android phones automatically reboot after three days unused, improving security.