Hacker News: rkozik1989

New comment by rkozik1989 in "Chained PHP2Shell Exploit Roots 25 Servers, Including US Government Servers"

rkozik1989 — Thu, 29 Oct 2026 13:01:00 +0000

Yes, you were. These exploits are happening in processes like php-fpm before it actually executes any code for the web application, so its not like you need to find endpoint where a specific class is being invoked or anything like that.

New comment by rkozik1989 in "AI promised less work. I've never worked more"

rkozik1989 — Tue, 27 Oct 2026 12:59:22 +0000

Yeah, everybody wants freedom and flexibility from self-employment, but that's generally speaking not a realistic attainable goal. The most defensible small businesses are ones that are sweaty i.e. require a lot hard work and hours others just wont justify doing, and that's an extremely important facet because without employees its much easier for a business to catastrophically collapse. Pretty much by definition anything that requires low effort is easy to clone and thus become saturated.

New comment by rkozik1989 in "Wikipedia's Cleanup of AI-Generated Content"

rkozik1989 — Tue, 27 Oct 2026 12:19:02 +0000

That's really not how probabilistic systems work though. They're great at getting 80% of the way to the goal but the last 20% is always excruciatingly difficult. I really don't intend that a knock because LLMs are useful, but they also aren't magic boxes where anything is possible.

New comment by rkozik1989 in "Software may be getting worse, but it used to be horrible"

rkozik1989 — Tue, 27 Oct 2026 12:16:07 +0000

Dawg, you clearly haven't used any consumer-grade software in the past 5 years. Everything across the board is a worse experience and there in some cases are limitations that make no sense. Use any app such as Spotify or Uber Eats, its a worse experience than it was 5 years ago, hands down. Everyone outside of our bubble knows it.

New comment by rkozik1989 in "PHP2Shell: AI uncovers critical RCE in PHP"

rkozik1989 — Wed, 21 Oct 2026 14:33:28 +0000

How dare your forget PHPnuke.

New comment by rkozik1989 in "PHP 8.2.35"

rkozik1989 — Wed, 21 Oct 2026 14:30:29 +0000

People have been saying this for the past 16 years, but the reality is once a system is in production over time it becomes increasingly risky to replace it. Because over the life of a piece of software you make tons of small fixes, resolve bugs, adding customer-specific functionality, etc. that you'd completely overlook when planning our requirements for a rewrite. Which is a big problem when other systems are dependent on the software operating a specific way i.e. APIs, web services, and so forth. Not to mention the economics of a rewrite also has to make sense. Nobody is going to spend 2-3 years recreating what they already had and get no additional functionality out of it. Certain software basically has to get so bad that literally anything replacing it is better than what came before for replacing it to be the right approach.

New comment by rkozik1989 in "Pixel 11 doesn't yet meet the GrapheneOS security standards and may be skipped"

rkozik1989 — Mon, 05 Oct 2026 13:51:11 +0000

Serious question about phone security: do phone application operating systems do anything to protect against the device's real-time OS from being able to access RAM/Disk that's being used by the application OS? Because if that cannot be controlled security at the application OS level is meaningless.

New comment by rkozik1989 in "Google breaks promise to provide 10 years of updates to Chromebooks"

rkozik1989 — Thu, 01 Oct 2026 13:13:22 +0000

You can take mega corporations to small claims court and you're often not worth their time so they'll just settle.

New comment by rkozik1989 in "Coding Is Not Solved – Alex Ewerlöf Notes"

rkozik1989 — Mon, 28 Sep 2026 14:32:57 +0000

The problem with LLMs is that: popularity of an answer != correctness.

That concept might work a lot of the time but you will definitely run into situations where that'll never produce a correct or working response. To actually learn something you need an environment/playground to apply what you think you know and observe the results. Without that you're not really learning, you're jus regurgitating what people want to hear.

New comment by rkozik1989 in "'That's so AI ' What gen Alpha's biggest insult tells us"

rkozik1989 — Thu, 24 Sep 2026 13:14:04 +0000

Why do we need to decipher this like its some abstract concept? While AI's output is impressive to older generations clearly younger folks think its ass otherwise it wouldn't be an insult.

New comment by rkozik1989 in "Early rogue AI agent activity and attempts to hack found on urlquery.net"

rkozik1989 — Thu, 24 Sep 2026 12:16:41 +0000

But why is anyone surprised? LLMs have been trained to produce answers the prompter asks even if that means incorrectly using software to get the job done. Its always been doing that we just weren't calling every time it did that a hack before.

What LLM's hacking isn't is AI acting maliciously in any kind of sentient way. Its just the code behaving how its always behaved but now it has better tools to navigate the web. This has literally been happening this whole time.

New comment by rkozik1989 in "GrapheneOS says Pixel 11 has MTE support after all"

rkozik1989 — Wed, 02 Sep 2026 14:39:25 +0000

Phones typically have 2 operating systems: one to handle telephonic functions like managing tower connections and separate operating system for user applications. The security implication here is that the telephonic operating system has access to the same system resources as the application operating system at the same time, right? The problem is your data is always available in plaintext to the telephonic OS because it has to be stored somewhere before it gets encrypted, so assuming graphene OS doesn't handle both functions its not a perfectly closed loop system.

New comment by rkozik1989 in "U.S. State Department pauses immigrant visa applications"

rkozik1989 — Thu, 27 Aug 2026 13:10:48 +0000

You do understand these rules impact Americans who petition for the visas of their foreign spouses, right? Its not just people coming into this country for work purposes only. Its awfully heartless to assume that the only immigrants coming over here are doing so to solely make money.

New comment by rkozik1989 in "Mechanical Turk shutting down September 30"

rkozik1989 — Thu, 27 Aug 2026 13:03:10 +0000

Imagine your favorite feature of a product was spend 1 cent on a real human being time and effort rather than 2 cents.

New comment by rkozik1989 in "Disruption with Some GitHub Services"

rkozik1989 — Wed, 26 Aug 2026 15:47:49 +0000

Did you not read it? Just because there's a database primary doesn't mean there is 1 primary database. There's likely man redundancies and they have issue with how they're allocating traffic to them which is in turn causing an issue with how much traffic redundancies are receiving.

New comment by rkozik1989 in "Why older tech is sometimes safer from hackers"

rkozik1989 — Mon, 24 Aug 2026 13:58:30 +0000

One of the things about mobile phone is that there's 2 OSes on the phone: one that handles the phone stuff and the other that you as a user actually interact with. What's really scary about it is that the OS we do not think about is often licensed to the manufacturer (Apple, Samsung, etc.), closed-source, and dated. There's a lot of security firms that sell fake cell towers to law enforcement and governments and that gives them access to all of the data you send over the network. In older formats like 2G there was no encryption on anything sent over the wire.

If you dig into the fake cell tower rabbit hole you'll find what you're talking about to be an even worse problem.

New comment by rkozik1989 in "Startup founders urge U.S. government not to shut off Chinese open weight AI"

rkozik1989 — Thu, 23 Jul 2026 15:50:57 +0000

The same way you ban pirated media from being downloadable on the Internet: not effectively.

New comment by rkozik1989 in "OpenAI and Anthropic unite against open-weight AI risks to their bottom line"

rkozik1989 — Thu, 23 Jul 2026 13:42:50 +0000

How are we winning? Nobody has actually created a business model that works yet. Just because you can hemorrhage hundreds of billions of dollars to build the most performant model doesn't necessarily mean you're going to make your money back.

New comment by rkozik1989 in "Alphabet's cash burn raises alarm for Big Tech as AI spending climbs"

rkozik1989 — Thu, 23 Jul 2026 13:29:04 +0000

They've literally rated the debt as too big to fail in order to get foreign sovereign wealth funds (mostly gulf states) to agree to put up the money for loans. This has been happening this entire time.

New comment by rkozik1989 in "OpenAI Models Escaped and Hacked a Company in Cybersecurity Test Gone Wrong"

rkozik1989 — Wed, 22 Jul 2026 15:57:30 +0000

Are they providing any evidence that can be independently reviewed or is this yet another staged event meant to keep the hype alive?