Do It by Code

Heads up, there is a 1-day full MikroTik RCE chain against SSH being used in the wild. Patch was released yesterday, so if you have a MikroTik router with ssh open on the internet, it may already be compromised. Detection guidance and IOCs courtesy of @CERT_Polska_en https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/

Posted by Costin Raiu, 10 hours ago

#rce #ssh

21 viewsedited 06:56

Do It by Code

what in the world

Posted by Hunter Bown, 1 hour ago

Related to Vanderbilt investigation

19 viewsedited 07:02

One shotted with GPT6 Astra

I now have a fork of UEVR where I can play any UE game within a volumetric window!

This actually renders the game in 3D - meaning, two real game cameras, not some depth map bullshit. Everything looks right

This is an alternative (and more comfortable IMO) way to play most 2D->VR hacked games as there’s no motion sickness, and no need to redesign the UI and interaction systems

Needs a lot more polish before I publish it but OMG IT WORKS!

Posted by Azad Balabanian, 7 hours ago

A similar project: elliotttate/UEVR-6DOF-Window

27 viewsedited 07:06

Do It by Code

Government Rails Site Hit Hours After CVE Patch
Article, Comments

TL;DR: A critical Ruby on Rails ActiveStorage RCE vulnerability was patched on a government site late at night. Just eight hours later, attackers tried exploiting it; likely using a public proof of concept released within hours of the fix. The patch worked, so the site was not compromised, despite continued probing throughout August. Main lesson: critical security updates must be deployed within hours, because attackers can reverse-engineer patches almost immediately

25 viewsedited 07:33

Do It by Code

idk how they RL'd Astra but it seems to LOVE writing markdown documents everywhere.

this reminds me of the Opus 4.5 or even the Sonnet 4.5 era almost a year ago where they made (slop) markdown docs for fucking everything. not a fan of this one.

Posted by Josh, 10 hours ago

especially if you use the trigger word "investigate"
it will write a REPORT
enjoy your 300 lines of markdown describing why the telegram macos app is using so much ram right now

21 viewsedited 20:44

Do It by Code

We are aware of a security incident on @Liquid_BTC. Purported white-hat hackers have withdrawn ~4,000 BTC (~$320 million) from the Liquid Federation wallet. The @Blockstream team is working on contacting them on-chain with a signed message.

What we know so far is that the funds were withdrawn via the SideSwap PAK (Peg-out Authorization Key), but that key was not compromised, nor were any others.

Exchanges have been notified and have already paused (or will pause) LBTC deposits and withdrawals. Other Liquid assets such as USDT, DePix, and RWAs are unaffected by this security incident.

Bridge nodes have been temporarily disabled, so no new transactions can be submitted to the network. Effectively, the Liquid sidechain is paused until this issue is resolved.

Liquid wallets will be impacted, and we're sorry for any inconvenience. Federation members are actively working on resolving this so we can restore normal network activity.

You can monitor the situation via @mempool's http://liquid.network site below:

https://mempool.space/address/bc1qdlld6antmv4xug242ed83q7k4rqw50cwfns38szx4qu2f4jwaxxsuhwxxr

Posted by Liquid Network 🌊, 3 hours ago

27 viewsedited 23:50

Do It by Code

Re: LLMs as a Cognitive Virus

I love this line of thinking but the framing comes across to me as a bit inflammatory and uncharitable. Just about anything involved in the exchanged of ideas can be viewed as a virus! That is because, when viewed from an evolutionary biology perspective, ideas are the cognitive equivalent of genes (in fact, this is where the term meme comes from).

There's a whole field, evolutionary memetics, dedicated to this. Cultural values, marketing, religion, social media, education, propaganda, etc. can all be viewed quite naturally through this lense. Even the terms we use in every day language (eg, going "viral") seem to intuitively grasp this.

Is my friend a virus for recommending me their favorite book? Well, yes I guess, but that's kind of just how ideas work. Just my two cents

Murfalo, 22 hours ago

27 views00:36

Do It by Code

Show HN: Stuxnet – A reconstructed source code of the infamous cyber-weapon
Article, Comments

GitHub

GitHub - Sadpainy/Stuxnet: Stuxnet, Here reproduced by me, Only researchs for educations purposes. It set work on Windows XP and…

Stuxnet, Here reproduced by me, Only researchs for educations purposes. It set work on Windows XP and Windows 7 only. - Sadpainy/Stuxnet

21 views23:29

Do It by Code

I've factored the RSA keys of a Certificate Authority from the 90s

The author explores the security of RSA cryptography, noting that small keys can be factored on a modest desktop computer and some old root certificates are still vulnerable.

comments

20 viewsedited 05:57

Do It by Code

It appears OpenAI is claiming its AI just solved Navier-Stokes, the 3rd most famous unsolved math problem in the world.

It's one of the 7 Millennium Prize Problems, with a $1 million bounty.

(The only two more famous ones are the Riemann Hypothesis and P vs NP)

DRAMA: The mathematician who spent a year on this (with AI) says OpenAI raced to the finish after his work leaked to them, then pressured him to drop his co-author, who works at Anthropic

To be clear, what's actually verified is the mathematician's result on Navier-Stokes next-door neighbor problem. OpenAI's proof of the real thing hasn't been revealed yet, and OpenAI hasn't responded to the accusations

Here's Fable 5.1's summary:

Posted by AI Notkilleveryoneism Memes ⏸️, 2 hour ago

34 viewsedited 09:56

Do It by Code

I resigned from Anthropic today. I spent the last three years doing pretraining research at both OpenAI and Anthropic. Neither company is acting responsibly. They are racing straight to self-improving superintelligence and gambling with our lives. More thoughts below.

Posted by Jacob Coxon, 12 hours ago

198 views12:17

Do It by Code

Do not underestimate the power of this technology. These will soon be superhuman systems that can hack anything, revolutionize any field overnight, and acquire real power and resources. We have all witnessed the progress in each of these domains, and progress is not slowing.

Posted by Jacob Coxon, 12 hours ago

173 views12:18

Do It by Code

The people building AI earnestly believe that it could kill us all by the end of the decade. This is not a marketing stunt. If anything, many executives and senior researchers will couch their phrasing in the press to sound sensible - but I hear the same people express fear privately. No other human activity poses this level of danger.

Posted by Jacob Coxon, 12 hours ago

185 views12:18

Do It by Code

GPT3 writing code. A compiler from natural language to code.
People don't understand — this will change absolutely everything. We're decoupling human horsepower from code production. The intellectual equivalent of the discovery of the engine. https://player.vimeo.com/video/426819809

Posted by Flo Crivello, 6 years ago

22 views19:30

Do It by Code

>WSJ publishes about anthropic researcher quitting BEFORE he announces he's quitting
>account had minimal followers & activity before, his post is instantly picked up and reaches 100m+ views
>multiple democrat politicians repost & quote post along a very coherent line
>news further picked up by most mainstream media & reach non-US markets too

excellent coordinated information environment manipulation on top of latent organic sentiment

Posted by orph, 3 hours ago

182 views23:36

Do It by Code

Posted by Jessica Nutt, 18 hours ago

42 views13:56

Do It by Code

Huggingfaces security txt after the openai incident 😭

Posted by Zachi, 3 hours ago

https://huggingface.co/security.txt

207 viewsedited 14:28

Do It by Code

lovely time to be owning an Android device

Posted by 安坂星海 Azaka || VTuber, 1 day ago

https://source.android.com/docs/security/bulletin/2026/2026-09-01

29 viewsedited 06:06

Do It by Code

I spent $220 on Google app ads. 60% of the installs were robots
Article, Comments