Hacker News Reader

Comment by john_strinlai | Hacker News Reader

i keep seeing mentions of the video, but is it still available anywhere?

https://x.com/k_firsov/status/2112641845926989944

Song is Petite Meller - High Forever (Marlon Hoffstadt Remix). Which is annoyingly catchy

wow, okay. yes, that really does look like a "my first PoC" video made by an early teenager. hard to believe that this was produced by a company that wants to be taken seriously.

thanks.

Any idiot can create their own company. For example, I have one :)

they claim 60 full time employees

Any idiot can work for any idiot that starts a company!

All very well known security researchers with decades of experience. I agree the anime/song is unprofessional but somehow that stuff is normalized in security/hardware labs.

I wish people would name this idiotic company, I can't see Twitter here and all people are talking about is a childish video they made. I don't ever want to do business with said company, ever.

They're apparently not trustworthy, and behave as children.

calif.io

It's Calif. They're named in the post.

>As a result of the leak and pre-announcement around 20:00 UTC, Calif, one of the security firms that had reported the issues mistakenly published a video. It showed their proof of concept working against a number of targets and revealed a few additional, though limited, details about the vulnerabilities.

You can see the same demo video on their site: https://calif.io/php2shell/#php-5-4-0-rce

If anything this is further justification for why these patches need to be kept under wraps.

This industry is full of immature children who cannot keep their mouths shut for 24 hours. They have no clue what massive coordination this requires.

These 'immature children' have discovered the exploit, so good luck keeping it under wraps from themselves.

There do seem to be the perpetual problem with the field of computer security that only insufferable and immature kids matter, due to discrete math adjacent nature of computer science, and yet they also legitimately can't be trusted, or does it not... unless LLMs do change everything.

The management class is certainly itching to ditch the remaining nerds.

That gif is a segment from Shukusei!! Loli Kami Requiem by Shigure Ui, the illustrator-VTuber-singer, FWIW...

1: https://youtu.be/Ci_zad39Uhw?t=15

https://media.infosec.exchange/infosec.exchange/cache/media_...

Definitely archiving this, lol.

lmao, these are funny af

https://x.com/k_firsov/status/2112641845926989944

Reply on news.ycombinator.com