mufeedvh

9 ms·

1.
Finding six Nginx vulnerabilities with open models(winfunc.com)
2 points by mufeedvh 2mo ago|0 comments
2.
The React2Shell Story(lachlan.nz)
225 points by mufeedvh 4mo ago|47 comments
3.
Hacking the old HackerNews codebase(winfunc.com)
2 points by mufeedvh 5mo ago|0 comments
4.
by mufeedvh 5mo ago
This is a good idea. Will incorporate false-positive rates into the rubric from the next run onwards. At winfunc, we spent a lot of research time taming these models to eradicate false-positive rates (it's high!) so this does feel impo
5.
N-Day-Bench – Can LLMs find real vulnerabilities in real codebases?(ndaybench.winfunc.com)
91 points by mufeedvh 5mo ago|29 comments
6.
by mufeedvh 6mo ago
thank you! :)
7.
by mufeedvh 6mo ago
Funny you mention that, because yes, a combinator-style encoding is probably a cleaner fit for the “only six colors constraint than my stack machine. I hacked together a tiny SKI-flavored M&M reducer as a proof of concept: B=S, G=K, R=I
8.
by mufeedvh 6mo ago
Yes, for messy real-world photos a lightweight CNN would probably outperform the deterministic decoder, but I’d still use it in a hybrid pipeline with classic CV for blob detection and deterministic logic for reconstructing the actual progr
9.
by mufeedvh 6mo ago
Yes! Just make sure to take a photo on a plain white surface is all. With: uv run mnm decompile path/to/photo.png --mode photo
10.
by mufeedvh 6mo ago
Author of this silly project here! Sharing a bit of backstory on why I decided to work on this; Firstly, “for fun” but primarily because I felt like I started losing the childlike wonder/whimsy I once had with programming. So I started
11.
I made a programming language with M&Ms(mufeedvh.com)
5 points by mufeedvh 6mo ago|0 comments
12.
How a single typo led to RCE in Firefox(kqx.io)
3 points by mufeedvh 7mo ago|0 comments
13.
The Recent 0-Days in Node.js and React Were Found by an AI(winfunc.com)
2 points by mufeedvh 8mo ago|0 comments
14.
New Vulnerability in React Server Components – CVE-2026-23864(vercel.com)
3 points by mufeedvh 8mo ago|0 comments
15.
by mufeedvh 3y ago
Yes, this just depends on the model you're using. Small-medium size codebases would fit inside Claude's 200K context window and Gemini 1.5 has a 1M context window which would essentially fit 99% of codebases. For reference: - The
16.
by mufeedvh 3y ago
Merged, thank you! :)
17.
by mufeedvh 3y ago
For small codebases, you can run this tool on the entire directory and it would generate a well-formatted Markdown prompt detailing the source tree structure, and all the code. You can then upload this document to either GPT or Claude model
18.
Show HN: Code2prompt – Generate LLM prompts from your codebase(github.com)
4 points by mufeedvh 3y ago|7 comments
19.
by mufeedvh 3y ago
I have made a simple CLI utility[0] with this purpose in mind. It scans your entire filesystem for README.md and FUNDING.yml files for a set of donation/sponsor links and tag it with the associated repo (No HTTP calls, just the assumpt
20.
Nobody’s on the Ball on AGI Alignment(forourposterity.com)
3 points by mufeedvh 3y ago|2 comments
21.
Security in the age of LLMs(mufeedvh.com)
42 points by mufeedvh 4y ago|6 comments
22.
by mufeedvh 4y ago
Thanks! :) It currently does gzip compression by default. Compression modes for specific files sounds interesting, I will definitely get around to implementing that.
23.
by mufeedvh 4y ago
Backstory: What started as a personal project to quickly host some web pages turned into a rabbit hole of yak shaving and that is how I ended up making Binserve. I automated the steps I usually take to host static pages into this project wh
24.
Show HN: Binserve – Fast single-binary static web server(github.com)
2 points by mufeedvh 4y ago|3 comments
25.
by mufeedvh 5y ago
Hello HN, I made a small CLI utility that walks your filesystem to find dependencies you use that are seeking donations. It does so by parsing FUNDING.yml and README files which almost every project embed their support links. It can export
26.
Show HN: Paydept – Shows every dependency you use that are seeking donations(github.com)
1 points by mufeedvh 5y ago|1 comments
27.
by mufeedvh 5y ago
TLDR; Just a fun little project of mine that born out of an idea to utilize Gist as a blogging platform, I hope you find it useful. All I wanted to do was write a blog but got completely distracted on choosing a static site generator or a b
28.
Show HN: Gisture – A blog generator based on GitHub Gist(github.com)
2 points by mufeedvh 5y ago|1 comments