8.20.25 | Exploited CodeRabbit for RCE, AGENTS.md for coding agents, Copilot broke audit logs without customer notification

8.20.25 | Exploited CodeRabbit for RCE, AGENTS.md for coding agents, Copilot broke audit logs without customer notification

This is a recap of the top 10 posts on Hacker News on Aug 20, 2025.

  • (00:00) - Intro
  • (00:21) - How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos
  • (01:40) - AGENTS.md – Open format for guiding coding agents
  • (02:58) - Copilot broke audit logs, but Microsoft won't tell customers
  • (04:15) - How to Draw a Space Invader
  • (05:13) - D2 (text to diagram tool) now supports ASCII renders
  • (06:09) - Candle Flame Oscillations as a Clock
  • (07:12) - Custom telescope mount using harmonic drives and ESP32
  • (08:29) - Without the futex, it's futile
  • (09:46) - Emacs as your video-trimming tool
  • (10:59) - Ask HN: Why does the US Visa application website do a port-scan of my network?
  • (12:10) - Outro

How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos
https://research.kudelskisecurity.com/2025/08/19/how-we-exploited-coderabbit-from-a-simple-pr-to-rce-and-write-access-on-1m-repositories/
https://news.ycombinator.com/item?id=44953032

AGENTS.md – Open format for guiding coding agents
https://agents.md/
https://news.ycombinator.com/item?id=44957443

Copilot broke audit logs, but Microsoft won't tell customers
https://pistachioapp.com/blog/copilot-broke-your-audit-log
https://news.ycombinator.com/item?id=44957454

How to Draw a Space Invader
https://muffinman.io/blog/invaders/
https://news.ycombinator.com/item?id=44956915

D2 (text to diagram tool) now supports ASCII renders
https://d2lang.com/blog/ascii/
https://news.ycombinator.com/item?id=44954524

Candle Flame Oscillations as a Clock
https://cpldcpu.com/2025/08/13/candle-flame-oscillations-as-a-clock/
https://news.ycombinator.com/item?id=44921195

Custom telescope mount using harmonic drives and ESP32
https://www.svendewaerhert.com/blog/telescope-mount/
https://news.ycombinator.com/item?id=44949895

Without the futex, it's futile
https://h4x0r.org/futex/
https://news.ycombinator.com/item?id=44951563

Emacs as your video-trimming tool
https://xenodium.com/emacs-as-your-video-trimming-tool
https://news.ycombinator.com/item?id=44953316

Ask HN: Why does the US Visa application website do a port-scan of my network?
https://news.ycombinator.com/item?id=44959073

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(631)

10.18.26 | DeepSeek releases v4.1 Flash, Solar surpasses nuclear globally, Bleached corals thrive touching neighbours

10.18.26 | DeepSeek releases v4.1 Flash, Solar surpasses nuclear globally, Bleached corals thrive touching neighbours

This is a recap of the top 10 posts on Hacker News on Oct 18, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:17) - DeepSeek-v4.1-Flash...

18 Okt 10min

10.17.26 | Tesla Roadster, Claude reveals ECDSA origins, 90% US tasks lack AI benchmarks

10.17.26 | Tesla Roadster, Claude reveals ECDSA origins, 90% US tasks lack AI benchmarks

This is a recap of the top 10 posts on Hacker News on Oct 17, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:17) - Tesla Roadster (01:...

17 Okt 12min

10.16.26 | Muse Spark Open, Clean neural networks, Skeuomorphic Wayland Linux desktop

10.16.26 | Muse Spark Open, Clean neural networks, Skeuomorphic Wayland Linux desktop

This is a recap of the top 10 posts on Hacker News on Oct 16, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:19) - Muse Spark Open (01...

16 Okt 10min

10.15.26 | Cancer diagnosis advice, AI hacking blamed on failures, Amazon raises Internet prices

10.15.26 | Cancer diagnosis advice, AI hacking blamed on failures, Amazon raises Internet prices

This is a recap of the top 10 posts on Hacker News on Oct 15, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:17) - Things to know when...

15 Okt 10min

10.14.26 | Gemini 4 Argon, Anthropic redesigns source control, Apple HomeView

10.14.26 | Gemini 4 Argon, Anthropic redesigns source control, Apple HomeView

This is a recap of the top 10 posts on Hacker News on Oct 14, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:19) - Gemini 4 Argon (01:...

14 Okt 11min

10.13.26 | Hackers trigger European fridge defrosting, Modern Web App in C, GLM-Legal

10.13.26 | Hackers trigger European fridge defrosting, Modern Web App in C, GLM-Legal

This is a recap of the top 10 posts on Hacker News on Oct 13, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:18) - Hackers activate au...

13 Okt 11min

10.12.26 | Passkeys are a trap, Total Annihilation modernized, LLM capability understanding gap widens

10.12.26 | Passkeys are a trap, Total Annihilation modernized, LLM capability understanding gap widens

This is a recap of the top 10 posts on Hacker News on Oct 12, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:16) - Passkeys are a trap...

12 Okt 11min

10.11.26 | 2D Vehicles, The Lightbulb Computer, City building game resists development

10.11.26 | 2D Vehicles, The Lightbulb Computer, City building game resists development

This is a recap of the top 10 posts on Hacker News on Oct 11, 2026.Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights(00:00) - Intro (00:18) - 2D Vehicles (01:18)...

11 Okt 11min

Populært innen Vitenskap

fastlegen
tingenes-tilstand
romkapsel
sinnsyn
rss-nysgjerrige-norge
forskningno
dekodet-2
liberal-halvtime
rekommandert
rss-paradigmepodden
fjellsportpodden
rss-rekommandert
tidlose-historier
villmarksliv
jss
grunnstoffene
hva-er-greia-med
rss-bondevennen
tomprat-med-gunnar-tjomlid
nordnorsk-historie