Hacker News: azyc

New comment by azyc in "PHP2Shell: AI uncovers critical RCE in PHP"

azyc — Wed, 21 Oct 2026 18:42:39 +0000

The Wiz post says the root cause is fatal errors (mostly out of memory) leaving corrupted state behind, which "a later request or worker can reuse". So the memory disclosure looks like it depends on the same FPM worker living on into the next request.

Would a low pm.max_requests narrow that part until people can patch? It obviously wouldn't help with the OPcache type confusion, since OPcache is shared memory across workers. airtnp also points out the old-branch backport just disables session upload progress, so session.upload_progress.enabled=0 looks like the cheaper interim knob.

https://www.wiz.io/blog/php2shell-php-rce

New comment by azyc in "[dead]"

azyc — Mon, 28 Sep 2026 01:24:54 +0000

Hey everyone,

I'm building a new project and looking for an advice from builders who scaled SEO to thousands of pages in your niche.

In the niche I am working on users make 2 types of searches: - call country X from country Y - and the reverse - call country Y from country X

I checked Ahrefs and I know that both searches share almost no links in search results, which I interpret as Google ranking these separately.

Question - does Google penalize SEO of a website based on number of pages? Because if I build all the variations of call X from Y (and the inverse) it will be close to 50k pages in total. I do not want to ruin my website reputation.

Caveat to share right away: - all pages will have unique and relevant content for each an every search (this is 2026, after all) - content will not be thin (min words, keywords density and other stuff.

If you had such experience, I'd be grateful if you can share.

If you wanted to sh*tpost - you're welcome too, I don't discriminate.

New comment by azyc in "Show HN: Suparelay – Call any phone in the world from a browser tab"

azyc — Thu, 24 Sep 2026 16:14:56 +0000

irrelevant to the product above

Show HN: Suparelay – Call any phone in the world from a browser tab

azyc — Wed, 23 Sep 2026 19:24:09 +0000

I'm travelling a lot, and often need to call numbers in my home country (a telco, a bank). Surprisingly, ever since Skype died, the apps that were meant to replace it launched once and never updated

So today, I'm presenting to you - Suparelay.

It works just like your phone... (revolutionary I know): - it remembers numbers you called - it looks like... a typical phone screen - it has a keypad that works during the call, for those "press 1 for your account" menus - it costs 90% less than using your local carrier for international calls

I compared 31 popular international calling destinations (in the Americas, Europe, Asia, Africa and Oceania) against 6 legacy carriers (T-Mobile US, AT&T Prepaid US, Vodafone UK, Airtel India, Claro Brazil and China Mobile), and to my surprise, the difference is insane.

Calls start from 2 cents a minute, you pay only when somebody answers, and there is no app to install: your browser is your phone.

Try it out and tell me what you think.

Say bye to vibe-coded Skype replacements, say hi to Suparelay!

Comments URL: https://news.ycombinator.com/item?id=49821200

Points: 3

# Comments: 2

New comment by azyc in "Show HN: I built 184 free browser tools – PDF, image, dev, AI tasks, no upload"

azyc — Wed, 17 Jun 2026 19:17:47 +0000

cool stuff! How much traffic do they generate / how long did it take to get to it?

New comment by azyc in "Show HN: Coding agents can control desktop software without MCPs"

azyc — Thu, 07 May 2026 14:29:47 +0000

That's certainly an interesting and novel take. Did you benchmark how "good" it performs against something that has an MCP? Btw I didn't know local apps have MCPs?

New comment by azyc in "From Supabase to Clerk to Better Auth"

azyc — Wed, 06 May 2026 18:13:56 +0000

Lol wut? you get all of your auth data in your own db in 1 cli command. You are not tied to any on db provider. On top of that you get hundreds of auth features like oauth providers (I use it to allow users to log in via google, apple, github) and the best part it's free. Not saying Supabase and Clerk are bad, but they cost money. With better auth you pay exactly $0 for all of this.

New comment by azyc in "Talk to your project/app AI [video]"

azyc — Tue, 05 May 2026 11:11:20 +0000

Hey :) Opened the link but see "this video is not rated" gate - if you can rate it so that not logged in users can see it would be much easier for ppl. I don't have a vimeo account for example. And why vimeo and not YT?

New comment by azyc in "Test"

azyc — Tue, 05 May 2026 11:05:38 +0000

Failed successfully I would say

New comment by azyc in "Show HN: Any photos into Amazon-compliant main images"

azyc — Tue, 05 May 2026 10:54:37 +0000

That's a great idea! Checked out the website - looks good :) Why do you only limit yourself to title images though? I imagine whatever model you are using can also generate beautiful product pictures?

Who is building open-source company-wide context engine?

azyc — Tue, 05 May 2026 10:52:41 +0000

Every company wants to have a single AI brain that knows everything about the company - it's policies, it's procedures, it's data. But I bet no one wants to depend on Anthropic / OpenAI / Google for that and especially let them own the data.

So who is building an open-source AI brain that turns company data in human & AI-agent ready context?

Comments URL: https://news.ycombinator.com/item?id=48020694

Points: 2

# Comments: 2

New comment by azyc in "Lessons for Agentic Coding: What should we do when code is cheap?"

azyc — Tue, 05 May 2026 10:50:02 +0000

Stick to patterns which were painful before. For example, I recently refactored a project written in TS to use better-result instead of throwing errors. Without Claude writing out all of that boilerplate I could not have imagined transitioning to this. Right now the cost of "doing it right" is decreased so much there is no reason to ship slop / poorly thought out code.

New comment by azyc in "Show HN: Brent Price Now"

azyc — Wed, 25 Mar 2026 16:07:38 +0000

Nice idea - is there a chance you enable non-browser notifications? this would be useful for reporting jobs we run at work