Hacker News: shitter

New comment by shitter in "I Found a $90k Remote Code Execution Vulnerability in Google"

shitter — Mon, 12 Oct 2026 21:41:38 +0000

GPT did the Hugging Face hack, not you (human engineers at OpenAI) :^)

New comment by shitter in "Saying 'Google It' Makes You Sound Old"

shitter — Sun, 02 Aug 2026 21:54:51 +0000

I've never heard of "Google it". I've only ever said "Input it to a web search engine".

New comment by shitter in "Texas wins court order to suspend domain name for violating age-verification law"

shitter — Sat, 18 Jul 2026 00:29:20 +0000

.onion

New comment by shitter in "Cursor 0day: When Full Disclosure Becomes the Only Protection Left"

shitter — Wed, 15 Jul 2026 00:22:04 +0000

? Doesn’t the code exec happen upon merely launching Cursor against a repository, without giving an agent any tasks? That’s clearly an issue at the Cursor application level, not some inevitable risk caused by the non-deterministic nature of LLMs. You can’t use the latter fact to excuse the former mistake

Not to mention that Cursor has an agent permissions model that this presumably sidesteps!

New comment by shitter in "Cursor 0day: When Full Disclosure Becomes the Only Protection Left"

shitter — Tue, 14 Jul 2026 21:57:16 +0000

I would file a CVE for any program that places untrusted content into PATH and invokes non-fully qualified executable names - not for the shell.

New comment by shitter in "Cursor 0day: When Full Disclosure Becomes the Only Protection Left"

shitter — Tue, 14 Jul 2026 21:50:35 +0000

Yeah, but you can easily mitigate it by searching for the real git in known system locations and using whatever you find there (or allowing the user to configure the path). I believe that's how VSCode does it

New comment by shitter in "Cursor 0day: When Full Disclosure Becomes the Only Protection Left"

shitter — Tue, 14 Jul 2026 21:44:00 +0000

Since there are no approval dialogs, it sounds like that doesn't even come into play here. That is the "gate" (to use the AI parlance) that Microsoft places on code execution in workspaces, though, and I would expect Cursor to at minimum fix this to only execute git.exe in trusted workspaces.

New comment by shitter in "Cursor 0day: When Full Disclosure Becomes the Only Protection Left"

shitter — Tue, 14 Jul 2026 21:35:39 +0000

The user's code folder? You mean the code I frequently pull from untrusted sources, unlike my .bashrc? Opening a GitHub project for review should not mean arbitrary code execution.

Of course, that ship has long sailed, for all major IDEs. Heck, VSCode SSH and devcontainer remotes allow RCE by design.

New comment by shitter in "Cursor 0day: When Full Disclosure Becomes the Only Protection Left"

shitter — Tue, 14 Jul 2026 21:29:07 +0000

And what'll the prompt say? "Do you want to run git.exe?"? I'll probably assume Cursor needs to run git but permissions got messed up somewhere and click right through that.

I haven't used Windows in a while so pardon if I'm missing something.

New comment by shitter in "Meta’s chaotic AI strategy"

shitter — Sun, 14 Jun 2026 02:15:36 +0000

Temporary in the sense that it's a stop or two away from getting laid off.

New comment by shitter in "Yes, It's Fascism"

shitter — Sun, 25 Jan 2026 22:00:25 +0000

This comment betrays a misunderstanding of history and of what fascism is and doesn't even engage with the article's points. A totalitarian fascist state does not come into being all at once; it emerges in steps that tend towards that outcome, steps which the article discusses in detail. Furthermore, that nascent fascism can be defeated through electoral means does not preclude it from being fascism.

New comment by shitter in "Man shot and killed by federal agents in south Minneapolis this morning"

shitter — Sun, 25 Jan 2026 00:00:50 +0000

> An I.C.U. nurse shot by federal agents was an American citizen with no criminal record, the city police chief said. A New York Times video analysis shows he was holding a phone, not a gun.

https://www.nytimes.com/live/2026/us/minneapolis-shooting-ic...

New comment by shitter in "White House Posts Altered Photo Showing Arrested Minnesota Protester Crying"

shitter — Fri, 23 Jan 2026 17:23:25 +0000

Call me a relic of a bygone era of seriousness and decency, but I don't think the White House should be in the business of mocking individuals online, either. But I know we're well past that point.

New comment by shitter in "Why does SSH send 100 packets per keystroke?"

shitter — Thu, 22 Jan 2026 20:02:10 +0000

Why not? If it's high-performance, it's fine.

New comment by shitter in "ICE agent fatally shoots woman in Minneapolis"

shitter — Sun, 11 Jan 2026 00:38:35 +0000

It shows no such thing. The officer got out of the way and was fine afterwards in both videos. This is a man who was angry and possibly traumatized by a prior incident involving a car. He should not have been allowed to carry a weapon

New comment by shitter in "Let's call a murder a murder"

shitter — Fri, 09 Jan 2026 21:56:54 +0000

JD Vance, man. What a mendacious piece of shit.

New comment by shitter in "ICE agent fatally shoots woman in Minneapolis"

shitter — Wed, 07 Jan 2026 22:56:26 +0000

Actually, the case law seems pretty clear in the other direction. Deadly force is not justified once an officer has evaded a vehicle that might hit them.

"Cases where police moved out of the way of moving vehicle and exercised deadly force": https://old.reddit.com/r/law/comments/1q6o4d0/comment/ny95v2...

New comment by shitter in "LLMs Are Not Fun"

shitter — Mon, 29 Dec 2025 19:50:10 +0000

I share the author's perspective that LLMs are not fun for programming. I don't use them to generate code, save for small snippets to demonstrate some concept or do something rote that I wouldn't enjoy writing myself.

However - and maybe I'm just an easily entertained simpleton - I find them really fun for exploring those random, not trivially Google-able questions that pop into my head on a daily basis, technical and otherwise. Most of my chats with ChatGPT begin with questions of this form. I keep my critical thinking cap on during the dialogue and always verify the output if it's to be used for anything serious, but I'd be lying if I said I didn't enjoy the process.

New comment by shitter in "My stages of learning to be a socially normal person"

shitter — Tue, 18 Nov 2025 01:10:12 +0000

I'm a naturally socially awkward person, due partly to personality and partly to social anxiety disorder. I don't think I have the social intelligence/agility to pull off half of these maneuvers. Just reading about the author playing different characters with tables and imagining myself in that position made me want to throw up, I'd fuck it up so badly.

New comment by shitter in "When is it better to think without words?"

shitter — Fri, 24 Oct 2025 01:55:58 +0000

You sound a little like me. I wasn't aware people thought like that until my partner told me her thoughts took the form of a constant stream of well-formed English. My default mode of thinking isn't natural language (though I can force myself to think this way, it's laborious, as the article mentions), nor images (I struggle with visualization), but more like abstract sequences of both logical connections and intuitive feelings.