Forwarded from HackerNews Summary
The /o in Ruby regex stands for "oh the humanity "
🔸The /o regex modifier in Ruby causes a regular expression to be evaluated only once, even if it's inside an instance method or loop, due to the once instruction in the Ruby VM. This can lead to non-deterministic behavior and thread safety issues, making it generally not recommended to use the /o modifier.
02 Aug 2025
💬 comments
🌍 @hackernews_summary
🔸The /o regex modifier in Ruby causes a regular expression to be evaluated only once, even if it's inside an instance method or loop, due to the once instruction in the Ruby VM. This can lead to non-deterministic behavior and thread safety issues, making it generally not recommended to use the /o modifier.
02 Aug 2025
💬 comments
🌍 @hackernews_summary
Do It by Code
Winners of the International Obfuscated C Code Contest https://github.com/ioccc-src/winner
this has been going on since 1984
CVE-2025-54801: Go Fiber Crashes in BodyParser Due to Unvalidated Large Slice Index in Decoder
Impact:
- Application panic or crash on malicious or malformed input.
- Potential denial of service (DoS) via memory exhaustion or server crash.
- Lack of defensive checks in the parsing code causes instability.
#cve
When using Fiber's Ctx.BodyParser to parse form data containing a large numeric key that represents a slice index (e.g., test.18446744073704), the application crashes due to an out-of-bounds slice allocation in the underlying schema decoder.
The root cause is that the decoder attempts to allocate a slice of length idx + 1 without validating whether the index is within a safe or reasonable range. If idx is excessively large, this leads to an integer overflow or memory exhaustion, causing a panic or crash.
Impact:
- Application panic or crash on malicious or malformed input.
- Potential denial of service (DoS) via memory exhaustion or server crash.
- Lack of defensive checks in the parsing code causes instability.
#cve
Do It by Code
https://github.com/openai/harmony
OpenAI
Introducing gpt-oss
We’re releasing gpt-oss-120b and gpt-oss-20b—two state-of-the-art open-weight language models that deliver strong real-world performance at low cost. Available under the flexible Apache 2.0 license, these models outperform similarly sized open models on reasoning…
Do It by Code
.sh dig @ch.at "hello, who are you?" TXT +short
ExitCode: 0
"Hello! I\226\128\153m an AI language model created by OpenAI. How can I assist you today?"Btw there is a theory about LLMs becoming "lazy" when they are given instructions (e.g. system prompt) of a weekend's datetime (e.g. imagine you are passing it current datetime via its system prompt and today is a weekend, Sunday for example)