runtimepanic

6 ms·

1.
by runtimepanic 2mo ago
I agree but this one have 1.6m downloads
2.
by runtimepanic 2mo ago
I didn't know about the 2023 case. Why didn't they remove it back in 2023 then :D
3.
Analysis: Popular Chrome Extension ModHeader Exfiltrates User Data(aydinnyunus.github.io)
15 points by runtimepanic 2mo ago|4 comments
4.
by runtimepanic 3mo ago
I found verified, live credentials leaking from Microsoft, Google, Red Hat, Grafana, and LlamaIndex in public GitHub repositories.
5.
by runtimepanic 5mo ago
I found a Content-Type spoofing vulnerability in the image upload functionality of parisneo/lollms (CVE-2026-5728). https://aydinnyunus.github.io/about/ #security #websecurity #infosec #appsec #cve #python #bugbou
6.
Show HN: Cursor skill for Claude Code's /loop scheduler(gist.github.com)
1 points by runtimepanic 6mo ago|0 comments
7.
If Nobody Reads Code, Why Not Write in Assembly? So Here's Redis in Assembly(aydinnyunus.github.io)
5 points by runtimepanic 7mo ago|0 comments
8.
by runtimepanic 7mo ago
Correct. I meant assembly that assembles to machine code
9.
by runtimepanic 7mo ago
True, it's assembly. I wrote it that way to make it more readable :D
10.
LLMs Don't Read Code. Neither Do I. So I Wrote Redis in Machine Code(gist.github.com)
4 points by runtimepanic 7mo ago|4 comments
11.
by runtimepanic 8mo ago
Interesting idea. One thing I’m curious about is where we draw the line between improving clarity and actively trying to disguise authorship. Tools like this make sense for reducing awkward phrasing, but they also raise questions about tran
12.
by runtimepanic 8mo ago
A Cross-Site Scripting (XSS) vulnerability has been identified in the html2pdf.js library. The vulnerability exists due to unsanitized user input being directly assigned to the innerHTML property. This allows attackers to execute arbitrary
13.
by runtimepanic 9mo ago
Nice work. Client-side stripping is especially important for privacy, since you don’t have to trust a server with the original image. I ran into a similar problem from the opposite angle and ended up building ExifLooter. It focuses on disco
14.
by runtimepanic 9mo ago
I’ve tried both and ended up preferring a hybrid. IDEs are great when the AI understands project context, types, and refactors across files, but they can also nudge you into accepting changes too passively. CLI feels more deliberate. You th
15.
by runtimepanic 9mo ago
If you’re tracking signals around geopolitical events, there’s a quirky one a few folks like to watch: the Pentagon Pizza Index. It’s a real-time dashboard that monitors pizza shop activity near the Pentagon as an informal indicator of unus
16.
by runtimepanic 9mo ago
I’m not suggesting it’s “nothing” or minimizing it. Just that in the first hours after explosions, reports are often incomplete or wrong. Past cases show everything from industrial accidents, gas explosions, ammo depots, infrastructure fail
17.
A Game's Memory: Reverse Engineering Mount and Blade: Warband(aydinnyunus.github.io)
1 points by runtimepanic 9mo ago|1 comments
18.
by runtimepanic 9mo ago
Game hacking opens a window into how games store and manage data in memory. By understanding memory manipulation, you can modify in-game values, experiment with game mechanics, and gain deeper insights into how software works at a low level
19.
by runtimepanic 9mo ago
Hard to draw conclusions from early reports like this. Situations involving explosions tend to generate a lot of noise before verified facts emerge, especially in politically tense environments. Best to wait for confirmation on cause, scale
20.
by runtimepanic 9mo ago
Lovely piece of digital archaeology. Reverse-engineering a Classic Mac era device is equal parts patience and respect for old constraints. What stood out to me is how much implicit knowledge was baked into drivers back then, timing assumpti
21.
by runtimepanic 9mo ago
Nice idea and clean execution. One question though: where does the “AI” add durable value beyond a rules engine plus a decent questionnaire? For workout planning, constraints and progression logic often matter more than free-form generation
22.
by runtimepanic 9mo ago
SmarterMail Build 9406 and earlier is vulnerable to arbitrary file upload. An unauthenticated attacker can upload arbitrary files to any location on the mail server, potentially enabling remote code execution.
23.
Critical (CVSS 10) tagged CVE-2025-52691 affecting SmarterMail software(github.com)
1 points by runtimepanic 9mo ago|1 comments
24.
by runtimepanic 9mo ago
“IDEsaster” is a good term, because most of the risk isn’t in the model but in the ambient authority we casually hand to agents. An AI that can read repos, write code, run tests, hit package managers, and access secrets is effectively a jun
25.
by runtimepanic 9mo ago
The title is doing a lot of work here. What resonated with me is the shift from “writing code” to “steering systems” rather than the hype framing. Senior devs already spend more time constraining, reviewing, and shaping outcomes than typing
26.
by runtimepanic 9mo ago
This is the kind of curiosity that leads to the most interesting findings. Hotels are a perfect storm of shared networks, opaque vendor integrations, and “it just works” assumptions. A mysterious UDP stream could be anything from Chromecast
27.
by runtimepanic 9mo ago
Subtle but important bug. This is a good example of how “is valid” checks in crypto are rarely as simple as they sound. Accepting points outside the prime-order subgroup can quietly undermine higher-level assumptions, even if no immediate e
28.
by runtimepanic 9mo ago
Nice write-up. Bluetooth on Kindle always felt like a black box, and this does a great job of peeling it open layer by layer. The mix of firmware analysis, protocol reverse engineering, and practical constraints of embedded devices is espec
29.
by runtimepanic 9mo ago
This is the nightmare scenario for live-service games: once the integrity of progression and bans is compromised, trust evaporates fast. Rolling back “billions of credits” is easy compared to undoing random bans.
30.
by runtimepanic 9mo ago
Clean, readable, and refreshingly boring in the best possible way. Sometimes a calendar should just… be a calendar. Bookmarking this for 2026.

More ›