Hacker News: mattaustinhttps://news.ycombinator.com/user?id=mattaustinHacker News RSShttps://hnrss.org/hnrss v2.1.1Wed, 29 Apr 2026 12:23:42 +0000<![CDATA[New comment by mattaustin in "Show HN: Browser Harness – Gives LLM freedom to complete any browser task"]]>it is https://github.com/browser-use/browser-use/security/advisori..., but it will also 404 until they make it public.

]]>Sun, 26 Apr 2026 02:15:11 +0000https://news.ycombinator.com/item?id=47906663mattaustinhttps://news.ycombinator.com/item?id=47906663https://news.ycombinator.com/item?id=47906663<![CDATA[New comment by mattaustin in "Show HN: Browser Harness – Gives LLM freedom to complete any browser task"]]>Its 404 because its reported to them "privately" via the "Security and Privacy" tab. It has just been ignored by them.

]]>Sun, 26 Apr 2026 02:14:23 +0000https://news.ycombinator.com/item?id=47906658mattaustinhttps://news.ycombinator.com/item?id=47906658https://news.ycombinator.com/item?id=47906658<![CDATA[New comment by mattaustin in "Show HN: Browser Harness – Gives LLM freedom to complete any browser task"]]>yes: https://github.com/browser-use/browser-use/security/advisori...

]]>Fri, 24 Apr 2026 21:16:25 +0000https://news.ycombinator.com/item?id=47895922mattaustinhttps://news.ycombinator.com/item?id=47895922https://news.ycombinator.com/item?id=47895922<![CDATA[New comment by mattaustin in "Show HN: Browser Harness – Gives LLM freedom to complete any browser task"]]>I submitted a remote code execution to the browser-use about 40 days ago. GHSA-r2x7-6hq9-qp7v I am a bit stunned by the lack of response. Any safety concerns in this project?

]]>Fri, 24 Apr 2026 17:50:09 +0000https://news.ycombinator.com/item?id=47893563mattaustinhttps://news.ycombinator.com/item?id=47893563https://news.ycombinator.com/item?id=47893563<![CDATA[WinBoat: Drive by Client RCE and Sandbox Escape]]>Article URL: https://hack.do/posts/winboat-guest-service-host-rce/

Comments URL: https://news.ycombinator.com/item?id=46641341

Points: 2

# Comments: 0

]]>Fri, 16 Jan 2026 00:11:10 +0000https://hack.do/posts/winboat-guest-service-host-rce/mattaustinhttps://news.ycombinator.com/item?id=46641341https://news.ycombinator.com/item?id=46641341<![CDATA[New comment by mattaustin in "Taking Over DigitalOcean Domains via a Lax Domain Import System"]]>I think most of the "outrage" is with the complete lack of validation and the "This is a known workflow within our platform" response more than the ban. Any plans to address the issue other than reactive bans?

]]>Sun, 28 Aug 2016 19:10:23 +0000https://news.ycombinator.com/item?id=12377964mattaustinhttps://news.ycombinator.com/item?id=12377964https://news.ycombinator.com/item?id=12377964<![CDATA[New comment by mattaustin in "Show HN: Get your local and public IP addresses in JavaScript"]]>This is the bug from goole about a year ago saying it is by design. https://code.google.com/p/chromium/issues/detail?id=333752

]]>Tue, 27 Jan 2015 02:43:50 +0000https://news.ycombinator.com/item?id=8950993mattaustinhttps://news.ycombinator.com/item?id=8950993https://news.ycombinator.com/item?id=8950993<![CDATA[Hacking Facebook with HTML5]]>Article URL: http://m-austin.com/blog/

Comments URL: https://news.ycombinator.com/item?id=1526594

Points: 2

# Comments: 0

]]>Sun, 18 Jul 2010 20:04:13 +0000http://m-austin.com/blog/mattaustinhttps://news.ycombinator.com/item?id=1526594https://news.ycombinator.com/item?id=1526594