Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Anonymous GitHub account mass-dropping undisclosed 0-days

github.com

Post reply on HN
Print view View original

321–330 of 407 posts

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#321

Post by shakna »

tormeh wrote: post #221
DrewADesign wrote: post #176

Earlier quoted context omitted.

I don’t give a flying fuck what people think. Most colleges copied or adopted my (for a few semesters) school’s style guide, so LLMs are essentially copying me , and I won’t change my punctuation usage because they suck.

The purpose of good writing style has always been to signal education and class. Well, your style no longer does. The future is now.

Shakespeare was written for the masses. Hence being full of dick jokes.

Similar story for Chaucer, and so many others. I don't think good writing, things we appreciate so much it lasts generations, has much to do with signalling education or class.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#322

Post by Gigachad »

merelydev wrote: post #3

Most of the exploits are for opensource/free software. I don't know what methods where used to find these exploits but I am starting to think security through obscurity might not be a bad thing in this day and age, where someone can just let bots loose on your codebase.

Because pretty much all server software is open source. Hackers only care about attacking stuff that’s exposed to the network.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#323

Post by wafflemaker »

eichin wrote: post #202
Syntonicles wrote: post #114

Earlier quoted context omitted.

I for one am striving for clarity and couldn't care less about being confused with AI. However I've only ever used regular dashes. How do you type an em-dash? Is it OS specific? I've taken to using Emacs insert-char with a list of frequently used ones in my scratch buffer. My memory for Unicode is unreliable.

In emacs, c-x 8 RET prompts you for unicode character names (or hex) so for rare use you can just spell it out. There's also C-x 8 _ m for em dash and C-x 8 _ n for en dash. (Hit c-x 8 c-h to get a full list of those bindings, like any normal secondary map - they're about as idiosyncratic as the XCompose bindings, but you might find some of them "stick" in your head better (I personally like "C-x 8 1 / 2" better than…

>In emacs, c-x 8 RET prompts you for unicode character names (or hex)[...]

Which is super useful for hard space - non line-breaking space - so that one letter words don't appear at the end of lines.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#324

Post by Departed7405 »

tim-tday wrote: post #175
GTP wrote: post #73

Earlier quoted context omitted.

Well, it's a joke because the problem becomes apparent after you think a bit about it. The exact same reasonig can be applied to anything illegal, criminals are criminals because they don't respect the law, so you could try to say that laws are useless. Reality is, if something is illegal not only someone can be punished after the fact, but in some cases also preventive measures can be taken. Regarding the comment, i…

I mean I do actually think laws are basically useless. Good people don’t need em, bad people don’t listen to em. I guess “bad” is excessive. I regularly observe traffic laws with less rigor the your average police officer would prefer.

I think you are forgetting that laws are responsible for a good chunk of what people perceive/are educated to see as good/wrong honest/dishonest.

Sure the worst atrocities are known to be bad from Religion (10 commandments, which is a law in itself) but many aren't. Speeding, drunk driving, harassment aren't concept that are obviously wrong (as in obvious to people with no guardrails).

So laws aren't useless. The fact that most people respect them actually means they have a purpose.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#325

Post by L3viathan »

rplnt wrote: post #239
Macha wrote: post #167

Earlier quoted context omitted.

Depends on your OS. Mac is the easiest, it's just ---, Linux depends on your distro, if it uses KDE, it's --- —. Windows is a little awkward, I think you need +the code point.

I have mac, typed this --- again --- and nothing? Layout says U.S. edit: another comment gave a mac shortcut – — - <--- one of these might be it

Option-Shift-Hyphen.

Just --- only works when you have the text replacement thing on (the same thing that turns (C) into ©).

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#326

Post by Syntonicles »

eichin wrote: post #202
Syntonicles wrote: post #114

Earlier quoted context omitted.

I for one am striving for clarity and couldn't care less about being confused with AI. However I've only ever used regular dashes. How do you type an em-dash? Is it OS specific? I've taken to using Emacs insert-char with a list of frequently used ones in my scratch buffer. My memory for Unicode is unreliable.

In emacs, c-x 8 RET prompts you for unicode character names (or hex) so for rare use you can just spell it out. There's also C-x 8 _ m for em dash and C-x 8 _ n for en dash. (Hit c-x 8 c-h to get a full list of those bindings, like any normal secondary map - they're about as idiosyncratic as the XCompose bindings, but you might find some of them "stick" in your head better (I personally like "C-x 8 1 / 2" better than…

Ooh, thanks! I blindly type c-x 8 RET, then finding myself stumbling through 9 different entries for Phi, but I hadn't explored the prefixes. I just realized I could create a custom which-key entry-point with my favorites in a prefix.

Also just learned about compose key apparently, and I noticed that I can program this split keyboard I'm using to turn that into a chord, anywhere!

Then an LLM told me that I can 3D print my own custom keyboard with 32 programmable layers. Everything is an infinite rabbit hole these days, how wild.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#327

Post by Syntonicles »

wafflemaker wrote: post #323
eichin wrote: post #202

Earlier quoted context omitted.

In emacs, c-x 8 RET prompts you for unicode character names (or hex) so for rare use you can just spell it out. There's also C-x 8 _ m for em dash and C-x 8 _ n for en dash. (Hit c-x 8 c-h to get a full list of those bindings, like any normal secondary map - they're about as idiosyncratic as the XCompose bindings, but you might find some of them "stick" in your head better (I personally like "C-x 8 1 / 2" better than…

>In emacs, c-x 8 RET prompts you for unicode character names (or hex)[...] Which is super useful for hard space - non line-breaking space - so that one letter words don't appear at the end of lines.

Huh, I always wondered what that was for...

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#329

Post by microgpt »

andrepd wrote: post #62
Retr0id wrote: post #17

I took a look at the Ghidra ones (because I use Ghidra), and I'm unimpressed: https://github.com/bikini/exploitarium/blob/main/ghidra-12.1... The first requires being able to overwrite binaries in the Swift tool directory. Yes, if you overwrite binaries executed by ghidra, you can trigger code execution. This is not a surprise. The second, idk, I'm not familiar with TraceRMI (but it's probably worth noting that "RMI"…

> Yes, if you overwrite binaries executed by ghidra, you can trigger code execution. > but it's probably worth noting that "RMI" stands for Remote Method Invocation This reminds me of someone submitting a (clearly vibecoded) vulnerability report claiming to have found a way to execute arbitrary SQL. The project in question? An SQL server... https://github.com/tursodatabase/turso/pull/4322

actually that is a valid vulnerability if it wasn't in test code but the correct fix would be to enclose the table name in "" with escaping
Post reply on HN