Recent submissions

Comment · 1 month ago
Before LLMs “just-patch-anyway” was a viable strategy because of the low volume. Now it’s amplified so much that taking that approach can introduce instability when the vulnerability was not even exploitable in your usage.

Take the recent example of Copy/Fail (CVE-2026-31431) if you were to evaluate it against your k8s seccomp and noticed that the argument to the syscall socket of AF_ALG is not allowed, then the vuln is not reachable in your pods.

I’ve not used this tool (I plan to check it out), but I think contextual evaluation of CVEs is important in modern times.

Comment · 1 month ago
I thought mcsweeneys did satire?
Comment · 4 months ago
What is this? It frames it like facts then you realize it’s just some religious agenda
Comment · 5 months ago
That’s all they got?!
Comment · 6 months ago
There’s people still using x?!
Comment · 9 months ago
What’s the reason these always get flagged? Is there something inaccurate?
Comment · 10 months ago
Aww was hoping this would be a Peter Thiel immortality quest story :/
Comment · 11 months ago
I sure hope there’s an anti-debug framework called Durin’s Bane?
Comment · 1 year ago
Oh noes, what do I call my Apple TV now?
Comment · 1 year ago
“Welcome to the party, pal!”
Comment · 1 year ago
Comment · 1 year ago
> I'm gonna need you to go ahead and RTO.
Comment · 1 year ago
This is the one worth watching, it’s a total scam and PayPal is fine with it apparently.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton