Recent submissions

Comment · 11 days ago
I wanted to figure out just how exploitable php2shell and http2shell were in practice, so I've created two purposely vulnerable web apps: https://brotli2bitcoin.com & https://php2bitcoin.com with a standard production config -- pop an RCE and find the flag to claim the $1K BTC

And to make it interesting, I setup a live stream showing every single attack attempt happening live https://www.youtube.com/watch?v=w7_EJWqRzvw

Have fun!

Comment · 1 month ago
FYI you can spin up 4xH200s at ~$9/hr on spot. Just ask Codex and it'll do it end to end.
Comment · 8 months ago
Thanks for the suggestion, will look into it.
Comment · 8 months ago
We’re pretty new! :) They didn’t want to provide comment on our post but they did offer comment via The Register.
Comment · 8 months ago
Comment · 1 year ago
I think this is true for deeply complex problems, but For everyday tasks an LLM is infinitely “better”.

And by better, I don’t mean in terms of code quality because ultimately that doesn’t matter for shipping code/products, as long as it works.

What does matter is speed. And an LLM speeds me up at least 10x.

Comment · 5 years ago
Comment · 5 years ago
Comment · 5 years ago
What year is it?
Comment · 5 years ago
Eh, BlockCypher are based in CA. Court order could force them to sinkhole any API requests to that wallet.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton