Hacker News: MrBruh

The RCE that AMD wouldn't fix

MrBruh — Thu, 11 Jun 2026 16:03:40 +0000

Related: The RCE that AMD won't fix - https://news.ycombinator.com/item?id=46906947 - Feb 2026 (173 comments)

Comments URL: https://news.ycombinator.com/item?id=48492215

Points: 322

# Comments: 123

MSI's full mailbox is leaving critical vulnerabilities unpatched

MrBruh — Mon, 11 May 2026 12:51:45 +0000

Article URL: https://mrbruh.com/msi_blackhole/

Comments URL: https://news.ycombinator.com/item?id=48094329

Points: 6

# Comments: 0

NZ Government taking 10 initiatives to safeguard undersea internet

MrBruh — Mon, 11 May 2026 12:50:14 +0000

Article URL: https://www.rnz.co.nz/news/political/594779/government-taking-10-initiatives-to-safeguard-undersea-internet-and-power-cables

Comments URL: https://news.ycombinator.com/item?id=48094308

Points: 3

# Comments: 0

Remote Code Execution Vulnerability in Fooocus

MrBruh — Fri, 08 May 2026 19:46:02 +0000

Article URL: https://mrbruh.com/fooocus/

Comments URL: https://news.ycombinator.com/item?id=48067801

Points: 2

# Comments: 0

You gave me a u32. I gave you root. (io_uring ZCRX freelist LPE)

MrBruh — Fri, 08 May 2026 19:40:39 +0000

Article URL: https://ze3tar.github.io/post-zcrx.html

Comments URL: https://news.ycombinator.com/item?id=48067734

Points: 215

# Comments: 144

Finding a RCE in my old TP-Link router

MrBruh — Thu, 30 Apr 2026 14:25:50 +0000

Article URL: https://mrbruh.com/tplink/

Comments URL: https://news.ycombinator.com/item?id=47963012

Points: 4

# Comments: 1

New comment by MrBruh in "The EU still wants to scan your private messages and photos"

MrBruh — Wed, 25 Mar 2026 20:27:03 +0000

You can directly call your representatives by looking them up here:

https://www.europarl.europa.eu/portal/en

The EU still wants to scan your private messages and photos

MrBruh — Wed, 25 Mar 2026 20:27:03 +0000

Article URL: https://fightchatcontrol.eu/?foo=bar

Comments URL: https://news.ycombinator.com/item?id=47522709

Points: 1450

# Comments: 393

The RCE that AMD won't fix

MrBruh — Thu, 05 Feb 2026 23:29:18 +0000

Article URL: https://mrbruh.com/amd/

Comments URL: https://news.ycombinator.com/item?id=46906947

Points: 373

# Comments: 173

1.4 Billion user records exposed by insecure Firebase instances in mobile apps

MrBruh — Fri, 30 Jan 2026 13:59:09 +0000

Article URL: https://mrbruh.com/firewreckv2/

Comments URL: https://news.ycombinator.com/item?id=46824442

Points: 4

# Comments: 1

New comment by MrBruh in "1.4 Billion user records exposed by insecure Firebase instances in Android apps"

MrBruh — Tue, 27 Jan 2026 22:24:57 +0000

Out of the top 1.5 Million Android apps on the Play Store, 11,126 were insecure and exposed users’ PII. In total these 11 thousand apps exposed 1.43 Billion user records. This includes 5 apps with 100 Million downloads and 10 apps with 50 Million downloads.

1.4 Billion user records exposed by insecure Firebase instances in Android apps

MrBruh — Tue, 27 Jan 2026 22:24:25 +0000

Article URL: https://mrbruh.com/firewreck2/

Comments URL: https://news.ycombinator.com/item?id=46787955

Points: 7

# Comments: 1

ASUSpicious Flaw – Users' Information Exposed Since 2022

MrBruh — Fri, 20 Jun 2025 13:26:18 +0000

Article URL: https://mrbruh.com/asus_p2/

Comments URL: https://news.ycombinator.com/item?id=44327546

Points: 73

# Comments: 11

New comment by MrBruh in "One-Click RCE in Asus's Preinstalled Driver Software"

MrBruh — Wed, 14 May 2025 00:13:31 +0000

On the black market such an exploit would be worth 200-500k USD

New comment by MrBruh in "One-Click RCE in Asus's Preinstalled Driver Software"

MrBruh — Sun, 11 May 2025 09:47:00 +0000

Nice idea, just checked it now and can confirm there was nothing suspicious in the wildcard records.

New comment by MrBruh in "[dead]"

MrBruh — Sun, 11 May 2025 06:25:38 +0000

ignore the post thx <3

New comment by MrBruh in "[dead]"

MrBruh — Sun, 11 May 2025 06:11:26 +0000

Feedback on my blog posts are always appreciated! :)

One-Click RCE in Asus's Preinstalled Driver Software

MrBruh — Sun, 11 May 2025 05:11:18 +0000

Article URL: https://mrbruh.com/asusdriverhub/

Comments URL: https://news.ycombinator.com/item?id=43951588

Points: 523

# Comments: 242

How I pwned a major New Zealand service provider

MrBruh — Mon, 24 Mar 2025 23:07:14 +0000

Article URL: https://mrbruh.com/majorprovider/

Comments URL: https://news.ycombinator.com/item?id=43466355

Points: 55

# Comments: 46

New comment by MrBruh in "900 Sites, 125M accounts, 1 Vulnerability"

MrBruh — Mon, 18 Mar 2024 13:13:47 +0000

When manually reviewing a lot of these sites it was not identifying PII that were in non-english since the automated scanner checks the variable name for known data types (e.g phone) but that would only work for English sites.