wrhn

Amsozzer

Joined 3 months ago

Karma
3
Submissions
12
Member since
Jul 13
Full Stack Software Engineer at FYC Labs | TypeScript, React, Next.js, React Native, Node.js, PostgreSQL | C++ (HTTP framework in vcpkg), Python, LLMs
View on Hacker News

Recent submissions

Comment · 8 days ago
I doubt it
Comment · 8 days ago
Good intuition, but the enforcement mechanism is a substring blocklist (both "rm -fr /" and "base64 -d | sh" work), and tainting will not work since the model outputs an entirely new string to use as an argument for the tool. It is worth reading the CaMeL paper from DeepMind.
Comment · 10 days ago
makes sense, will release the docs. thanks!
Comment · 10 days ago
Since I have to go through a bunch of php repos today at work I ended up releasing a CLI tool that automates that process by listing out the steps you need to take to stay away from the vulnerability. Here's the link incase it helps anyone https://github.com/Amsozzer1/php2shell-repo-audit
Comment · 10 days ago
Hey guys,

I have a long day tomorrow auditing all our php websites and so I wrote a simple CLI tool that finds every place php version is mentioned in a repo eg (Dockerfile tags, compose/k8s images, setup-php in CI, .tool-versions, distro php packages, composer) and flags the end of life branches now.

Floating tags and distro packages can't be labelled deterministically since the tool only reads the files right now so they get labelled "check manually"

I will also update the package as soon as the fixes drop with the updated versioning which will not require anything on the users end (no updates required)

Till then check out npx php2shell-repo-audit . https://github.com/Amsozzer1/php2shell-repo-audit

Comment · 1 month ago
Hey guys, I made an open source AMS system for Bambu Labs 3d printers. Their AMS are egregiously expensive and have a hard limit of 16 by chaining 4 AMS which can cost upwards of $1400. I reverse engineered their MQTT commands and automated the process of a human swapping the filament by using stepper motors. It supports unlimited spools (max 16 spools per esp32). Currently its a desk project meaning I have not yet done the 3d modeling and finalized the circuitry yet but I am able to automate filament swaps all by passing in a .3mf file from bambu's own software. Next steps are making a shell for it and finalizing some of the component list for the release.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton