))
8.20.25 | Exploited CodeRabbit for RCE, AGENTS.md for coding agents, Copilot broke audit logs without customer notification
Manage episode 501342911 series 3641526
เนื้อหาจัดทำโดย Hacker News Highlights เนื้อหาพอดแคสต์ทั้งหมด รวมถึงตอน กราฟิก และคำอธิบายพอดแคสต์ได้รับการอัปโหลดและจัดหาให้โดยตรงจาก Hacker News Highlights หรือพันธมิตรแพลตฟอร์มพอดแคสต์ของพวกเขา หากคุณเชื่อว่ามีบุคคลอื่นใช้งานที่มีลิขสิทธิ์ของคุณโดยไม่ได้รับอนุญาต คุณสามารถปฏิบัติตามขั้นตอนที่แสดงไว้ที่นี่ https://th.player.fm/legal
This is a recap of the top 10 posts on Hacker News on Aug 20, 2025.
How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos
https://research.kudelskisecurity.com/2025/08/19/how-we-exploited-coderabbit-from-a-simple-pr-to-rce-and-write-access-on-1m-repositories/
https://news.ycombinator.com/item?id=44953032
…
continue reading
- (00:00) - Intro
- (00:21) - How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos
- (01:40) - AGENTS.md – Open format for guiding coding agents
- (02:58) - Copilot broke audit logs, but Microsoft won't tell customers
- (04:15) - How to Draw a Space Invader
- (05:13) - D2 (text to diagram tool) now supports ASCII renders
- (06:09) - Candle Flame Oscillations as a Clock
- (07:12) - Custom telescope mount using harmonic drives and ESP32
- (08:29) - Without the futex, it's futile
- (09:46) - Emacs as your video-trimming tool
- (10:59) - Ask HN: Why does the US Visa application website do a port-scan of my network?
- (12:10) - Outro
How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos
https://research.kudelskisecurity.com/2025/08/19/how-we-exploited-coderabbit-from-a-simple-pr-to-rce-and-write-access-on-1m-repositories/
https://news.ycombinator.com/item?id=44953032
AGENTS.md – Open format for guiding coding agents
https://agents.md/
https://news.ycombinator.com/item?id=44957443
Copilot broke audit logs, but Microsoft won't tell customers
https://pistachioapp.com/blog/copilot-broke-your-audit-log
https://news.ycombinator.com/item?id=44957454
How to Draw a Space Invader
https://muffinman.io/blog/invaders/
https://news.ycombinator.com/item?id=44956915
D2 (text to diagram tool) now supports ASCII renders
https://d2lang.com/blog/ascii/
https://news.ycombinator.com/item?id=44954524
Candle Flame Oscillations as a Clock
https://cpldcpu.com/2025/08/13/candle-flame-oscillations-as-a-clock/
https://news.ycombinator.com/item?id=44921195
Custom telescope mount using harmonic drives and ESP32
https://www.svendewaerhert.com/blog/telescope-mount/
https://news.ycombinator.com/item?id=44949895
Without the futex, it's futile
https://h4x0r.org/futex/
https://news.ycombinator.com/item?id=44951563
Emacs as your video-trimming tool
https://xenodium.com/emacs-as-your-video-trimming-tool
https://news.ycombinator.com/item?id=44953316
Ask HN: Why does the US Visa application website do a port-scan of my network?
https://news.ycombinator.com/item?id=44959073
223 ตอน
แบ่งปัน
