HNHacker News
TopNewBestAskShowJobs

Operyl

4,273 karma · joined June 9, 2013

I’m Elizabeth, a Jill of Many Trades. Opinions are my own unless otherwise said.
submissionscomments
Operyl··on GitLab Security Incident: Attempted Exploitation of CVE-2026-97229
Atlassian products (Jira Server) are no longer supported, and their more Enterprise offering dies in 2029, so everything is ending up in their cloud now yeah.
Operyl··on Dayjob: Tax – evaluating AI agents on 50 professional tax assignments
> my now former CPA

Assume yes, fired.

Operyl··on PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 out
There are backports already.
Operyl··on Security advisory: Critical remote code execution vulnerabilities, update now
Look, at the end of the day, every major security researcher is going "oh shit" and no amount of tweaks to your configuration is going to limit the blast radius in a way that will actually matter. You're going to need to update PHP, that's the _only_ solution to this problem.
Operyl··on Security advisory: Critical remote code execution vulnerabilities, update now
The current PoC in the public gets there via that method, and even then you don't need to call system() alone to cause hell on a host...
Operyl··on Security advisory: Critical remote code execution vulnerabilities, update now
If your PHP application accesses a database, you've got exfiltration, it doesn't matter in this case. Unless your PHP application is just echoing non sensitive data (i.e. rendering md files)...
Operyl··on Security advisory: Critical remote code execution vulnerabilities, update now
I can guarantee you that it's not because someone left system() enabled, it's much lower than that.
Operyl··on Security advisory: Critical remote code execution vulnerabilities, update now
I love the "affects PHP... 6" given we never had an official 6 release haha.
Operyl··on Security advisory: Critical remote code execution vulnerabilities, update now
It's a RCE bug, it does not matter if you disable php functions. It's not arbitrary PHP execution, it's an exploit chain resulting in arbitrary code execution.
Operyl··on Tell HN: 2x PHP RCE CVEs with CVSS 10.0 Incoming
I don't see any details of the vulnerability leaked except "code execution"...?
Operyl··on Upcoming Critical PHP Security Release
Where?
Operyl··on XCancel service is suspended until further notice
My municipality does! Guess what they still don't really use... most of it still ends up on X exclusively.
Operyl··on XCancel service is suspended until further notice
The biggest frustration for a lot of people is that their municipalities use Twitter almost exclusively to communicate with their constituents, it _sucks_. I've pleaded and begged my city and county to have some other form of communication, in addition to Twitter/X, to mass distribute information.
Operyl··on Getting phpBB 1.4.4 working in Docker
It is pretty easy to do plugins and custom themes in Discourse, most look the same just because the UX is good enough and we don't live in an era of hyper customization that early 2000s forums did. A good example of a pretty customized Discourse install is the Blizzard forums: https://us.forums.blizzard.com/en/blizzard/ and Unreal: https://forums.unrealengine.com/categories?tag=unreal-engine
Operyl··on LibreOffice breaks download records after declaring it has no AI features
A woman can dream!
Operyl··on LibreOffice breaks download records after declaring it has no AI features
God, I'm hoping that this phraseology changes with the new CEO, I am so tired of that overused statement haha.
Operyl··on EVE Online moves to Python 3
Especially given, you know, the minority share that Deepmind bought a few months back haha.
Operyl··on Microsoft Edge is about to lock out older ad blockers, just like Chrome did
Welp, once this happens I’ll just migrate over to Firefox. I tried for one day to browse the internet without an ad blocker and I just couldn’t, it was awful.
Operyl··on ZCode – Harness for GLM-5.2
It's all fun and games until the model is smart enough to figure out privilege escalation, i.e. a lot of people don't realize Docker enabled on a regular user is enough for privilege escalation if you "follow the tutorials."
Operyl··on Apple is about to make Hide My Email useless
That's actually a common scam that happens, too. It's a constant problem in my city, and while I already have the app downloaded on my phone others do not and find themselves getting nasty bills in the mail months later.
Operyl··on Valve says it's ready to launch the Steam Machine this summer
I really just want the Frame, I'm already convinced (before the price hikes) that the Steam Machine was going to be way too high based on their comments to press.
Operyl··on 1Password Is Down
This is destroying me, none of my web browser extensions will talk with the local 1password application. Why the fuck does it need to talk to the internet to talk to my local application? Argh!
Operyl··on Ask HN: What Are You Working On? (April 2026)
Haha! I did something similar, and went as far as integrating a label printer (ZQ620) and use a TC53 with the barcode scanner to sub organize quickly :x.
Operyl··on News publishers limit Internet Archive access due to AI scraping concerns
They already are, I've been dealing with Vietnam and Korea residential proxies destroying my systems for weeks, I'm growing tired. I cannot survive 3500 RPS 24/7.
Operyl··on Fix the iOS keyboard before the timer hits zero or I'm switching back to Android
I feel like I’m the only one without major issues here. The autocorrect works, the keys I tap are right. Going to Android with the Android Keyboard drives me nuts.
Operyl··on The Target forensics lab (2024)
Target does tend to build cases, up to a certain point, so as to not waste LE time. But it’s not as much as people tend to think. If you steal a candy bar or a loaf of bread it’s just not worth it, but more? A TV? Yes.
Operyl··on Show HN: Tailsnitch – A security auditor for Tailscale
Sadly not a whole lot you can do. You could try and gain some legitimacy by getting your recipe added to homebrew but otherwise no clue. I wasn't laughing at it at the author, more so just the irony of the situation.
Operyl··on Show HN: Tailsnitch – A security auditor for Tailscale
This tool makes providing evidence for SOC2 slightly easier, and I do wish I had had this when I started my SOC2 journey at $dayJob.
Operyl··on Show HN: Tailsnitch – A security auditor for Tailscale
Hahaha, I love it. But also, a security tool you're going to be using against your core infrastructure should probably not be a random binary that you also tell users to strip quarantine off of to use: `sudo xattr -rd com.apple.quarantine`. Sigh at the state of running stuff on macOS sometimes.

All joking aside, this looks great. Is there a plan to allow for "custom checks" with custom rules users create? Think of "never should happen" access from a to z, etc.

Operyl··on Shai-Hulud Returns: Over 300 NPM Packages Infected
Did you try putting it in your global config file?

Windows: ~/AppData/Local/pnpm/config/rc

macOS: ~/Library/Preferences/pnpm/rc

Linux: ~/.config/pnpm/rc

Page 1 of 34Next →