8.20.25 | Exploited CodeRabbit for RCE, AGENTS.md for coding agents, Copilot broke audit logs without customer notification

8.20.25 | Exploited CodeRabbit for RCE, AGENTS.md for coding agents, Copilot broke audit logs without customer notification

This is a recap of the top 10 posts on Hacker News on Aug 20, 2025.

  • (00:00) - Intro
  • (00:21) - How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos
  • (01:40) - AGENTS.md – Open format for guiding coding agents
  • (02:58) - Copilot broke audit logs, but Microsoft won't tell customers
  • (04:15) - How to Draw a Space Invader
  • (05:13) - D2 (text to diagram tool) now supports ASCII renders
  • (06:09) - Candle Flame Oscillations as a Clock
  • (07:12) - Custom telescope mount using harmonic drives and ESP32
  • (08:29) - Without the futex, it's futile
  • (09:46) - Emacs as your video-trimming tool
  • (10:59) - Ask HN: Why does the US Visa application website do a port-scan of my network?
  • (12:10) - Outro

How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos
https://research.kudelskisecurity.com/2025/08/19/how-we-exploited-coderabbit-from-a-simple-pr-to-rce-and-write-access-on-1m-repositories/
https://news.ycombinator.com/item?id=44953032

AGENTS.md – Open format for guiding coding agents
https://agents.md/
https://news.ycombinator.com/item?id=44957443

Copilot broke audit logs, but Microsoft won't tell customers
https://pistachioapp.com/blog/copilot-broke-your-audit-log
https://news.ycombinator.com/item?id=44957454

How to Draw a Space Invader
https://muffinman.io/blog/invaders/
https://news.ycombinator.com/item?id=44956915

D2 (text to diagram tool) now supports ASCII renders
https://d2lang.com/blog/ascii/
https://news.ycombinator.com/item?id=44954524

Candle Flame Oscillations as a Clock
https://cpldcpu.com/2025/08/13/candle-flame-oscillations-as-a-clock/
https://news.ycombinator.com/item?id=44921195

Custom telescope mount using harmonic drives and ESP32
https://www.svendewaerhert.com/blog/telescope-mount/
https://news.ycombinator.com/item?id=44949895

Without the futex, it's futile
https://h4x0r.org/futex/
https://news.ycombinator.com/item?id=44951563

Emacs as your video-trimming tool
https://xenodium.com/emacs-as-your-video-trimming-tool
https://news.ycombinator.com/item?id=44953316

Ask HN: Why does the US Visa application website do a port-scan of my network?
https://news.ycombinator.com/item?id=44959073

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(589)

9.6.26 | Nitter has more instances, German rocket reaches orbit from Europe, Chrome exempts Google from data settings

9.6.26 | Nitter has more instances, German rocket reaches orbit from Europe, Chrome exempts Google from data settings

This is a recap of the top 10 posts on Hacker News on Sep 6, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:15) - Nitter has more work...

6 Sep 13min

9.5.26 | OpenAI agent message board, Fermat's Last Theorem formalized, Chromium sandbox RCE exploited

9.5.26 | OpenAI agent message board, Fermat's Last Theorem formalized, Chromium sandbox RCE exploited

This is a recap of the top 10 posts on Hacker News on Sep 5, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:18) - Discovery of a new O...

5 Sep 13min

9.4.26 | .name Termination, GPT-6 Astra, Any Human Ever life selection

9.4.26 | .name Termination, GPT-6 Astra, Any Human Ever life selection

This is a recap of the top 10 posts on Hacker News on Sep 4, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:19) - .name Termination (0...

4 Sep 14min

9.3.26 | Gemini 3.8 Flash and Cyber, Muse Spark 1.3, opt out of training data

9.3.26 | Gemini 3.8 Flash and Cyber, Muse Spark 1.3, opt out of training data

This is a recap of the top 10 posts on Hacker News on Sep 3, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:19) - Gemini 3.8 Flash and...

3 Sep 13min

9.2.26 | Claude Fable 5.1 and Claude Mythos 5.1, Ed Zitron's AI skeptic predictions, Ad Blocker for Firefox on iOS

9.2.26 | Claude Fable 5.1 and Claude Mythos 5.1, Ed Zitron's AI skeptic predictions, Ad Blocker for Firefox on iOS

This is a recap of the top 10 posts on Hacker News on Sep 2, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:19) - Claude Fable 5.1 and...

2 Sep 13min

9.1.26 | Playa Phone, bird identification system from security cameras, Terence Tao explains six essential mathematical concepts

9.1.26 | Playa Phone, bird identification system from security cameras, Terence Tao explains six essential mathematical concepts

This is a recap of the top 10 posts on Hacker News on Sep 1, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:19) - Playa Phone (01:23) ...

1 Sep 12min

8.31.26 | Creepy crawlies, careful word choice, Haiku R1/beta6 release

8.31.26 | Creepy crawlies, careful word choice, Haiku R1/beta6 release

This is a recap of the top 10 posts on Hacker News on Aug 31, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:18) - Creepy Crawlies (02...

31 Aug 13min

8.30.26 | Tether enables messaging on Linux, EVE Online transitions to Python 3, lawmakers fund Flock cameras with car insurance increase

8.30.26 | Tether enables messaging on Linux, EVE Online transitions to Python 3, lawmakers fund Flock cameras with car insurance increase

This is a recap of the top 10 posts on Hacker News on Aug 30, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:15) - Tether: iMessage, S...

30 Aug 13min

Populärt inom Vetenskap

p3-dystopia
dumma-manniskor
allt-du-velat-veta
rss-mottagningen
kapitalet-en-podd-om-ekonomi
halsorevolutionen
det-morka-psyket
ufo-sverige
medicinvetarna
sexet
bildningspodden
rss-spraket
rss-vetenskapsradion
rss-vetenskapsradion-2
paranormalt-med-caroline-giertz
vetenskapsradion
ufo-sverige-2
dumforklarat
rss-geopodden-2
barnpsykologerna