Hacker News: Ohmec

New comment by Ohmec in "There isn't an easy exploit for this PHP vulnerability"

Ohmec — Thu, 22 Oct 2026 12:10:38 +0000

The problem is, by and large, that AI has drastically reduced time to exploitation of vulnerabilities that modern CVEs are often under-representing their severity. If you've worked in security this year, it's been a march of vulnerability after vulnerability and everyone is waiting for the next big one that exposes your systems.

The fact that this particular CVE doesn't have an easily exploitable path has meant very little, historically, in the modern threat landscape. AI has proven it's able to pull off chaining multiple exploits that are very difficult or hard to pull off, but a machine does not care for "ease" or "difficulty".

All that is to say, the security community is currently a little gun-shy, but with good reason.

New comment by Ohmec in "A new spam policy for “back button hijacking”"

Ohmec — Tue, 14 Apr 2026 13:53:42 +0000

You probably use old.reddit and a legacy app, right?

New comment by Ohmec in "Yt-dlp: External JavaScript runtime now required for full YouTube support"

Ohmec — Thu, 13 Nov 2025 03:51:42 +0000

There's probably scripts you can add to your ubo to combat this.

New comment by Ohmec in "PSF has withdrawn $1.5M proposal to US Government grant program"

Ohmec — Tue, 28 Oct 2025 05:20:57 +0000

Inverting the privilege pyramid does not make for a balanced and healthy system.