HNHacker News
TopNewBestAskShowJobs

decidu0us9034

118 karma · joined February 12, 2026

submissionscomments
decidu0us9034··on MS Paint Remote Code Execution Vulnerability
Yes, it is.
decidu0us9034··on MS Paint Remote Code Execution Vulnerability
The boilerplate FAQ text is frequently wrong or incomplete. You can go through the catalog and look through some of them and see how many have multiple revisions. I think, if you want to know definitively, you have to patch diff it
decidu0us9034··on US voters roundly reject data centers in ballot measures
I think what we're seeing is that a lot of people wonder, if making the lives of wealthy people with a lot of leisure time more convenient is worth the societal tradeoff (even if they're in this category themselves)
decidu0us9034··on Microsoft and others tell crypto platform not to tokenize their stocks
Sure but wasn't the whole pitch of tokenization, RWA, all of this cycle's narrative, that crypto could function as an investment vehicle for the normie retirement account holder, that it wasn't just derivatives and speculating on short-term price movement?
decidu0us9034··on Cognitive Mercantilism: AI panic resembles fears of early capitalism
If I'm being very cynical I think people at the AI labs suspect they're going to shrink the market for productive labor but are fine with that since they'll capture a larger share of profits, as perpetual rent-seekers for all intellectual production. They also have this hope that there will imminently be a lot less of us around (they telegraph fear of this outcome, but that feels insincere).
decidu0us9034··on Cognitive Mercantilism: AI panic resembles fears of early capitalism
For many here the answer seems to be that everyone will be product manager or a capitalist (one suspects the people saying this are product managers and capitalists).
decidu0us9034··on Steal My Bitcoin CTF PoC
HITCON CTF has a realistic php2shell challenge. Think it has ended up with 0 solves so far, not sure.
decidu0us9034··on Eunice is almost here
didn't the poorer 2/3rds of humanity die in that one?
decidu0us9034··on No Signs of AI Payoff Outside the Tech Sector
If the options are 1) watch the economy become more k-shaped as my status erodes and I'm made precarious 2) drag down aggregate output but be better off relative to everyone else than in the first scenario, why would I not go with option 2 from a purely self-interested, rational perspective? I jus think this is assuming a level of selflessness most people are not capable of but maybe that's too cynical of me
decidu0us9034··on Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure
"Exploitation attempt" lacks clarity. The bot scanners are constantly generating huge volumes of weird traffic. Does anyone have a portable, reliable exploit that works in real heterogeneous conditions and not a lab setup, and is that even feasible? doesn't seem like it. llms automate development of practical exploits but don't remove every constraint that makes them hard to begin with. it feels like people are missing this, idk
decidu0us9034··on There isn't an easy exploit for this PHP vulnerability
People seem to not understand that cybercriminals are lazy, as well. They're not gonna sink a lot of effort into doing something technically impressive when there are way easier ways to generate a decent ROI. Why would they mess around with remote heap grooming when there are plenty of nday rce in widely-deployed enterprise slop just laying around, makes no sense.
decidu0us9034··on There isn't an easy exploit for this PHP vulnerability
Okay finally some sense. I felt like I was going insane seeing the freakout over this. From people who would care but a fraction if there weren't some AI angle.
decidu0us9034··on Claude Duet
Can you name some of these opportunities? I see people in this thread talking about using agents to manage their budgets, buy fancy cars and houses, contract work on their home. I think a lot of people feel like AI will permanently forclose any avenue they would have had to achieving that level of wealth, so there's a bitter irony
decidu0us9034··on PHP 8.2.35
Well they did specify "successfully." EITW is a pretty broad tag, just means attacker are probing servers. I'm not saying it's good but there are usually some pretty big caveats with remote-remote memory corruption, don't know if all the people dooming are aware of that

> Exploit portability and reliability depend on the PHP build, extensions, frontend behavior and allocator layout.

decidu0us9034··on Lula supporters protest against Meta to denounce its 'electoral interference'
People being edgy on X seems unrelated. Comment seems completely off-topic. Or are you implying Meta suppressed Lula's account because he threatened to murder Protestants? I don't get it.
decidu0us9034··on I no longer care to work on any Ruby gems so I've archived all my repositories
We have seen a huge proliferation of vibed audio plugins. Most of them are very bad or replicate things DAWs can already do. And vibed video games. If anything it has become harder for many audiences to find good software because algorithmic curation is driven by gameable engagement metrics not quality.
decidu0us9034··on I no longer care to work on any Ruby gems so I've archived all my repositories
That just makes it feel like I wasted a lot of time. I spent years eschewing social gatherings, foregoing other opportunities, and depriving myself of things I enjoy, to cultivate a set of skills. Now I feel like they are rapidly becoming largely irrelevant (vuln hunting, kind of on the leading edge of ai displacement, not sure bug bounties as we currently know them will exist in five years time). What's more I don't feel like I'm positioned to remain employed in the field. I didn't expect my status or stability to be thrown into jeopardy so rapidly. I wish I were as selfless as you. I'm not sure many people are, maybe the world would be a kinder place if they were
decidu0us9034··on The Economic Complexity of the Western Roman Empire
What does this have to do with economic complexity? Could you elaborate? You mean like child labor? What's the fraction, how small is it? I don't get it. "As a former child" is hilarious though
decidu0us9034··on Amsterdam police confiscates server left-wing ISP A/I at American request
I don't see how there's any basis for concluding that Tyler Robinson is "left-aligned." He seems pretty apolitical. He did it to defend his girlfriend's honor, or something. If you think his dating preferences make him "left-aligned," that seems more revealing of your own leanings
decidu0us9034··on Has AI tells
To be honest, if I am given any reason to suspect someone put less effort into writing something than they expect me to put into reading it, I'm not going to, if I have a choice. And it seems most prevalent in areas of life where you don't have a choice, so to me it feels like an abuse of of the social contract.
decidu0us9034··on GLM-Legal
so they eliminate your talent pipeline and cut down on billable hours? is this good?
decidu0us9034··on Cloudflare/Security-Audit-Skill
but they're very huge markdown files. look how much junk they're polluting the conext window with.
decidu0us9034··on A.I. companies are recruiting electricians and carpenters by the thousands
"Those people" who? Homebuilders? You're saying you think the cost of homebuilding should be much higher? When I listen to some of you guys it's not hard for me to see why these DCs are so unpopular
decidu0us9034··on India's surprise baby bust
I love how the original post says this happens across vastly different societies regardless of all these different variables people are offering as possible explanations. For example, in India (which this article is about), women have a much lower rate of workforce participation than other industrialized countries. I think a lot of people who are replying are men and don't understand how physically tasking and painful pregnancy is. It seems like most women are fine having two if there's a high chance they'll make it to adulthood and they have access to family planning/contraceptives. That makes sense to me. Not sure why this is so confounding to people. Not much more of an explanation needed than that lol
decidu0us9034··on I think Anthropic and OpenAI have found product-market fit
This also sounds like rich people problems. Vast majority of people with a W-2 take the standard deduction.
decidu0us9034··on I think Anthropic and OpenAI have found product-market fit
The upper decile of income earners account for more than half of all consumption in the US. Household balance sheets and wealth have never looked stronger, again when you account for all the appreciated stocks and properties owned by the upper quartile. True incomes for the lowest decile rose significantly for the first time since 1970 in 2022 and then sort of stayed flat again. Sure, statistically significantly, not "significantly" as in personally meaningful after figuring in rising consumer costs. There is a narrative where you can see all this as hugely positive but this is also largely a "vibes" based narrative. I don't know why you'd expect most people to care about what the "vibes" are like for the best off in society, that's a bit removed from their daily concerns.
decidu0us9034··on I don't think AI will make your processes go faster
Maybe for some subset of sotware (like CRM panels or something) PMs will do everything. But if you're projecting the way one sort of software (ie user-facing, business use oriented software) is developed and put to use with software writ large, then no I don't think so
decidu0us9034··on Show HN: Agentic interface for mainframes and COBOL
It sounds like they will still need to hire and train human talent who can understand the code, and evaluate and integrate outputs of AI systems that conform to the specific compliance and data retention requirements of these industries. And also people who can enforce said compliance, and a lot of other things. Sounds like a complex problem without a neat off-the-shelf solution
decidu0us9034··on Claude Design
I think a big part of the reason AI is so divisive and only declining in popularity, is because much of the discourse is shaped by mid to senior career SWEs who fantasize about putting everyone who's not a mid to senior career SWE out of work. People who want to replace everything we like with streamlined slop and want everyone we love struggling to get by. Everyone is inessential except the guy who just sits there telling Claude "can confirm, looks good ship it" who of course isn't deserving of even a paycut
decidu0us9034··on Small models also found the vulnerabilities that Mythos found
Right now, we accept false positives as long as you can sort them out. I think it's pretty typical that >99% of fuzzer runs don't result in new coverage. Of course they're far from useless without feedback but it's better to have it if you can. I guess the question is does the llm approach have lower costs for validation and triaging vs just fuzzing alone, unclear to me. Anthropic would like people to believe automation is this scary new unknown
Page 1 of 2Next →