Hacker News: mmsc

New comment by mmsc in "Em dashes are fucking amazing"

mmsc — Fri, 24 Jul 2026 13:35:33 +0000

and here i thought "option -" was an em-dash, but no, it's an _en_-dash.

New comment by mmsc in "Introduction to Formal Verification with Lean Part 1"

mmsc — Wed, 22 Jul 2026 13:57:28 +0000

it's like proof by induction versus trying every number from 0 to infinity

New comment by mmsc in "Vulnerability reports are not special anymore"

mmsc — Wed, 24 Jun 2026 09:32:06 +0000

already exists: https://joshua.hu/comparing-redos-detection-tools. `recheck` and `redos-detector` are definitely the best. there's even an eslint plugin for the latter: https://github.com/tjenkinson/eslint-plugin-redos-detector

18 CVEs fixed in Curl 8.21.0

mmsc — Wed, 24 Jun 2026 09:13:16 +0000

Article URL: https://curl.se/mail/lib-2026-06/0026.html

Comments URL: https://news.ycombinator.com/item?id=48657187

Points: 3

# Comments: 0

New comment by mmsc in "I found 10k GitHub repositories distributing Trojan malware"

mmsc — Thu, 18 Jun 2026 13:35:23 +0000

> Another month later, GitHub support sent me an email saying that they had removed these repositories.

I recently discovered a campaign where somebody was forking very small but useful codebases, and replacing the distributable with some malware, and making the repository have better SEO with changes to the README. My case was a simple macOS application that could be used to control some Phillips LED light strip.

I reported it to GitHub and it was removed within 24 hours.

I discovered another repository like this, and they still haven't replied since (one month).

No clue how their malware reports work. I'm surprised they don't partner with some antivirus company to at least scan "releases" for malware (not repositories themselves)

New comment by mmsc in "I Hate (Most) Keyboard 'Fn' Keys"

mmsc — Wed, 10 Jun 2026 13:44:29 +0000

A missed opportunity to say you 'Fn' hate the Fn key :)

Meta Fixes Instagram AI Flaw Used in Account Takeovers

mmsc — Mon, 01 Jun 2026 09:13:46 +0000

Article URL: https://sqmagazine.co.uk/meta-fixes-instagram-ai-flaw-account-takeovers/

Comments URL: https://news.ycombinator.com/item?id=48354400

Points: 2

# Comments: 0

New comment by mmsc in "Project Glasswing: An Initial Update"

mmsc — Fri, 22 May 2026 22:39:29 +0000

Aisle has hundreds of CVEs with publicly available models: https://aisle.com/wall-of-fame

CVE-2026-42511 Breakdown: RCE in FreeBSD

mmsc — Thu, 07 May 2026 21:03:54 +0000

Article URL: https://aisle.com/blog/aisle-discovers-cve-2026-42511-a-21-year-old-freebsd-remote-command-execution-vulnerability

Comments URL: https://news.ycombinator.com/item?id=48054981

Points: 28

# Comments: 1

Finding and Fixing 24 CVEs in WeKan

mmsc — Wed, 29 Apr 2026 17:14:53 +0000

Article URL: https://aisle.com/blog/finding-and-fixing-24-cves-in-wekan-with-aisles-analyzer

Comments URL: https://news.ycombinator.com/item?id=47951378

Points: 1

# Comments: 0

New comment by mmsc in "Carrot Disclosure: Forgejo"

mmsc — Wed, 29 Apr 2026 00:06:25 +0000

https://codeberg.org/forgejo/governance/src/commit/5c07b3801...

> Failure to comply with these rules will be criticized publicly, and we reserve the right to no longer coordinate with you or your project in the future.

lol

AISLE Discovers 38 CVEs in OpenEMR Healthcare Software

mmsc — Tue, 28 Apr 2026 16:06:01 +0000

Article URL: https://aisle.com/blog/aisle-discovers-38-critical-security-vulnerabilities-in-healthcare-software-used-by-100000-providers

Comments URL: https://news.ycombinator.com/item?id=47936347

Points: 177

# Comments: 113

New comment by mmsc in "GPT‑5.5 Bio Bug Bounty"

mmsc — Sat, 25 Apr 2026 15:47:22 +0000

How is that a scam? You don't get participation awards for solving half of a puzzle...

New comment by mmsc in "Kernel code removals driven by LLM-created security reports"

mmsc — Wed, 22 Apr 2026 14:10:06 +0000

Unmaintained code is a security issue in of itself, so this is of course a net benefit.

System over Model: Zero-Day Discovery at the Jagged Frontier

mmsc — Tue, 14 Apr 2026 16:09:20 +0000

Article URL: https://aisle.com/blog/system-over-model-zero-day-discovery-at-the-jagged-frontier

Comments URL: https://news.ycombinator.com/item?id=47767511

Points: 3

# Comments: 0

New comment by mmsc in "Installing every* Firefox extension"

mmsc — Sat, 11 Apr 2026 07:45:47 +0000

The website of this blog and their connections listed are a sight to behold. I miss that version of the internet.

New comment by mmsc in "Filing the corners off my MacBooks"

mmsc — Sat, 11 Apr 2026 06:27:01 +0000

As long as it's not hydrofluoric acid...

New comment by mmsc in "Top laptops to use with FreeBSD"

mmsc — Thu, 09 Apr 2026 15:52:13 +0000

> You say "works perfectly". I do not think it means what you think it means.

Copying some files from a different machine is not that burdensome. The point is, it works.

New comment by mmsc in "Top laptops to use with FreeBSD"

mmsc — Thu, 09 Apr 2026 13:25:14 +0000

FreeBSD works perfectly on intel MacBooks if you've got one laying around: https://joshua.hu/FreeBSD-on-MacbookPro-114-A1398

New comment by mmsc in "Email obfuscation: What works in 2026?"

mmsc — Thu, 02 Apr 2026 08:53:34 +0000

> Also, a note to those who make fancy "me+someservice@somedomain.com" addresses:

Just wait until one of these companies demands an email from the registered email address of your account!