Earlier quoted context omitted.
What about all the virtual machine zero days?
Buy a VM in the cloud?
But what about all the zero days in the payment processors ("buy")?
Anonymous GitHub account mass-dropping undisclosed 0-days
311–320 of 407 posts
Re: Anonymous GitHub account mass-dropping undisclosed 0-days
#312I want to rush to git clone, but as things are, the odds are extremely high that this kind of things that are too good to be real are honeypots and something there will compromise your machine or make your llm start working for someone else...
You can just download the zip over HTTPS
What if it's leveraging a zero day in your zip or https library?
Re: Anonymous GitHub account mass-dropping undisclosed 0-days
#313Earlier quoted context omitted.
That’s one school of thought. Law as a tool to punish those who have committed a prohibited act, mostly reactive. Others consider law a way of encoding the group’s existing rules and norms. In that view, making something illegal or mandatory is not a prerequisite for punishment: it’s the actual main point. The threat of punishment is meant for those not deterred from an act by the simple fact it is illegal (and the t…
> Law as a tool to punish those who have committed a prohibited act You're thinking of criminal law. And it's not just some group's rules and norms - there already exists familial or social group punishment for that. Criminal law is prosecuted by the State . It's the code of conduct of the society you exist in. If you want a thought experiment for what life would be like without organised society, read Leviathan Henc…
> You're thinking of criminal law. And it's not just some group's rules and norms - there already exists familial or social group punishment for that. Criminal law is prosecuted by the State. It's the code of conduct of the society you exist in.
What I meant is more about why and how laws come to be, which depends on what we think they’re for. Hobbes’ point of view is one. Locke and Rousseau had different opinions.
For example, one can view criminal law as a punishing tool, like gp, whose only purpose is to punish the act once discovered. You criminalise duels to punish duelists because murder is bad and no murder or attempted murder should go unpunished, and associate a great punishment because murder is a very bad thing.
But you can also criminalize duels to prevent or reduce the incidence of duels, and associate a great punishment to it to deter your stupid hot-heated young nobles from going around each other. Still criminal law, but this time both as social engineering and deterrence.
It’s been a long time since I read Hobbes. Should definitely go back to it.
Re: Anonymous GitHub account mass-dropping undisclosed 0-days
#314Earlier quoted context omitted.
My feeling is that my writing doesn't sound anything like an LLM, so if someone thinks I'm an LLM because I used an em-dash, that's on them. That, or I royally screwed up and need to do a better job as a writer. At least with today's LLMs.
hmm maybe if we wait longer, LLMs will learnt to be like "none-em-dashers", and we "em-dashers" will prevail?
Em-dashes and "it's not X. It's Y" seem to be in most LLMs writing style purposefully so they can have detection tools.
Just so academia can claim some level of detectability
Re: Anonymous GitHub account mass-dropping undisclosed 0-days
#315I took a look at the Ghidra ones (because I use Ghidra), and I'm unimpressed: https://github.com/bikini/exploitarium/blob/main/ghidra-12.1... The first requires being able to overwrite binaries in the Swift tool directory. Yes, if you overwrite binaries executed by ghidra, you can trigger code execution. This is not a surprise. The second, idk, I'm not familiar with TraceRMI (but it's probably worth noting that "RMI"…
The bigger takeaway is someone that smart is pissed off and dropping their shit with zero warning... but hey, that's just like, my opinion man.
Approaching the maintainers would be ideal but time-consuming. Disclosing it like this is neutral I guess. Better than selling it in the darknet.
I do wonder though: if you can tell the AI to search for vulns, can't you also tell it to contact the right maintainer for each one found?
Re: Anonymous GitHub account mass-dropping undisclosed 0-days
#316Earlier quoted context omitted.
Yes, big pet peeve of the new world. Every em dash is apparently an AI trigger. Back in my day, they were a sign of great respect within my people.
The thing is, in lots of contexts you cant easily type em dashes. Google docs will convert “—-“ to an emdash but simple text inputs wont. So when you see one in that context you have to consider the explanation. They copy pasted an em dash specifically, they drafted in Google docs, they know the unicode keyboard shortcut, etc. None of these are safe assumptions. And if it’s markdown you know it wasnt drafted in Googl…
in macos it is trivial to input em dash in any context
Re: Anonymous GitHub account mass-dropping undisclosed 0-days
#317The only thing with a worse inflation story in 2026 than the United States Dollar is the Zero Day.
Used to be a zero day got you unauthorized access to a computer system with no warning.
Now it might not even get a maintainer to do a patch when they're bored.
Re: Anonymous GitHub account mass-dropping undisclosed 0-days
#318It seems like we are watching the newest form of the script kiddie evolve in real time (no offense intended towards the author, everyone starts out young). It's going to be interesting whether this evolves into its own thing or just ends up being the same old dynamics but with a new set of tools.
Re: Anonymous GitHub account mass-dropping undisclosed 0-days
#319I took a look at the Ghidra ones (because I use Ghidra), and I'm unimpressed: https://github.com/bikini/exploitarium/blob/main/ghidra-12.1... The first requires being able to overwrite binaries in the Swift tool directory. Yes, if you overwrite binaries executed by ghidra, you can trigger code execution. This is not a surprise. The second, idk, I'm not familiar with TraceRMI (but it's probably worth noting that "RMI"…
A glance at the nmap one seems potentially high severity. It might be a nothing in practice, but it being around parser code means the chances of preparing something to jump around are pretty high. There'd be a certain irony being able to reverse shell anyone doing an nmap scan. If i had infinite tokens i'd throw claude on writing an exploit and dig through the history who made it possible because - if we take a mome…
>There'd be a certain irony being able to reverse shell anyone doing an nmap scan.
Every TV / movie hacker has known about this.
Re: Anonymous GitHub account mass-dropping undisclosed 0-days
#320Earlier quoted context omitted.
Yea, that's what's confusing. some of these are like lower level slop but some are like genuine criticals. Floci, libssh2, c-ares, FFmpeg, and the PHP one are all LEGIT./ The Ghidra one for example, not so much. I cant help but wonder if this was halfway completed research folder and they just published it as is
PHP one is at best a moderate-level bug in SOAP client which I don't see any realistic way to exploit (the whole convoluted setup in the POC assumes PHP execution access, which begs the question why bother if you already can execute arbitrary code?) - does not look like "genuine critical" at all.
Critical is an overstatement but it userland PHP execution does not equate to native process control. There are many situations where an attacker may have constrained PHP execution, gadget execution, template or plugin execution, deserialization reachability, or a sandboxed context, but not arbitrary native code execution or arbitrary memory write. Definitely impactful