Do It by Code
54 subscribers
713 photos
100 videos
15 files
1.24K links
We uhhhhh... do things by coding them.
Download Telegram
Winners of the International Obfuscated C Code Contest

https://github.com/ioccc-src/winner
CVE-2025-54801: Go Fiber Crashes in BodyParser Due to Unvalidated Large Slice Index in Decoder

When using Fiber's Ctx.BodyParser to parse form data containing a large numeric key that represents a slice index (e.g., test.18446744073704), the application crashes due to an out-of-bounds slice allocation in the underlying schema decoder.

The root cause is that the decoder attempts to allocate a slice of length idx + 1 without validating whether the index is within a safe or reasonable range. If idx is excessively large, this leads to an integer overflow or memory exhaustion, causing a panic or crash.

Impact:
- Application panic or crash on malicious or malformed input.
- Potential denial of service (DoS) via memory exhaustion or server crash.
- Lack of defensive checks in the parsing code causes instability.

#cve
https://vast.ai/

Why would a H200 cost less than an H100 on AWS?
.sh dig @ch.at "hello, who are you?" TXT +short
Do It by Code
.sh dig @ch.at "hello, who are you?" TXT +short
ExitCode: 0
"Hello! I\226\128\153m an AI language model created by OpenAI. How can I assist you today?"
Btw there is a theory about LLMs becoming "lazy" when they are given instructions (e.g. system prompt) of a weekend's datetime (e.g. imagine you are passing it current datetime via its system prompt and today is a weekend, Sunday for example)
1
1
Torrent download tracker

https://iknowwhatyoudownload.com/

(idk how accurate it is tho. it's definitely not "accurate" if you are using a VPN, because it's gonna show what other people who are using the same vpn as you have downloaded. which is kinda cool in its place)