Hacker News: deadliftdouche

New comment by deadliftdouche in "Project Glasswing: Securing critical software for the AI era"

deadliftdouche — Wed, 08 Apr 2026 00:58:13 +0000

I agree. There are more blogs talking about LLM findings vulnerabilities than there are actual exploitable vulns found by LLMs. 99.9% of these vulnerabilities will never have a PoC because they are worthless unexploitable slop and a waste of everyone's time.

New comment by deadliftdouche in "It is time to standardize principles and practices for software memory safety"

deadliftdouche — Fri, 07 Feb 2025 06:23:13 +0000

https://github.com/Speykious/cve-rs

New comment by deadliftdouche in "1 bug, $50k in bounties, a Zendesk backdoor"

deadliftdouche — Sat, 12 Oct 2024 14:06:21 +0000

Nice writeup and fuck Zendesk, this could have done so much damage.

New comment by deadliftdouche in "Canadian government banning Flipper Zero to combat auto theft"

deadliftdouche — Fri, 09 Feb 2024 01:39:59 +0000

https://imgflip.com/i/8f7fjl

New comment by deadliftdouche in "Try to make sudo less vulnerable to Rowhammer attacks"

deadliftdouche — Mon, 29 Jan 2024 03:19:31 +0000

I'd argue its worse than pointless, at best it does nothing and at worse it seems to make the code harder to understand and audit, which could result in more future vulnerabilities.

New comment by deadliftdouche in "Try to make sudo less vulnerable to Rowhammer attacks"

deadliftdouche — Mon, 29 Jan 2024 03:16:35 +0000

I don't understand, isn't this pointless? I could just change some other data structure or variable, hell, I'll just change the sudo input buffer size and do a stack overflow, or a memcpy size into a heap overflow, or what stops me changing a jne (Jump if Not Equal) instruction to a jg (Jump if Greater) and bypassing the if's?

Taking Local File Disclosure to the Next Level

deadliftdouche — Thu, 02 Aug 2018 10:14:51 +0000

Article URL: https://ionize.com.au/taking-local-file-disclosure-to-the-next-level/

Comments URL: https://news.ycombinator.com/item?id=17670377

Points: 1

# Comments: 0

Deserialisation Vulnerabilities

deadliftdouche — Mon, 23 Jul 2018 03:37:35 +0000

Article URL: https://ionize.com.au/deserialisation-vulnerabilities/

Comments URL: https://news.ycombinator.com/item?id=17590417

Points: 2

# Comments: 0

New comment by deadliftdouche in "Show HN: Promptui – Rich UI elements for cli prompts in Go"

deadliftdouche — Wed, 29 Nov 2017 22:25:22 +0000

I'd recommend people also check out ishell https://github.com/abiosoft/ishell I've used it in a project before and absolutely loved the API + autocomplete functionality.