frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Data-only attacks are easier than you think (2024)

https://www.usenix.org/publications/loginonline/data-only-attacks-are-easier-you-think
11•segfaultbuserr•1h ago

Comments

gumby•29m ago
> Data-only attacks ... have long been considered too sophisticated and niche to pose a practical threat.

I thought the whole point of fuzzing was an example of finding data-only attacks.

segfaultbuserr•8m ago
Corrupting program memory via malicious input data is known as a code-execution attack, not a data-only attack. The fuzzed program crashes because its executable code got overwritten directly by the input, or it got overwritten indirectly by the logic when it tries to process bad data. An exploit involves injecting external code, or overwriting memory addresses to change the original logic flow to do something else.

A data-only attack would be an attack that reuses the original logic by only corrupting data inputs (such as a file path), without injecting code or changing logic.

Terr_•8m ago
> The attack effectively modifies only the arguments of the execve syscall

I feel this checklist of shell-tools [0] is relevant, although the focus is more on how setuid is dangerous because you might not know the fancier arguments someone could supply.

> GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.

[0] https://gtfobins.org/

GPT-6 Sol and Luna

https://openai.com/index/introducing-gpt-6-sol-and-luna/
1353•OfficialTurkey•11h ago•657 comments

Claude Opus 5.5

https://www.anthropic.com/claude-opus-5-5
1362•km144•12h ago•869 comments

Transit rewards (Waymo pays you to take the train)

https://waymo.com/blog/2026/09/transit-rewards/
49•raybb•2h ago•32 comments

Data-only attacks are easier than you think (2024)

https://www.usenix.org/publications/loginonline/data-only-attacks-are-easier-you-think
12•segfaultbuserr•1h ago•3 comments

OpenAI GPT–6 Astra breaks Enigma message that has resisted solution since 2005

https://www.cryptocellar.org/bgac/the-mvueh-break.html
610•sohkamyung•15h ago•373 comments

'We hacked the FBI:' Hackers say they have data on all FBI employees

https://www.404media.co/we-hacked-the-fbi-hackers-say-they-have-data-on-all-fbi-employees/
508•spenvo•11h ago•358 comments

Microsoft killed FoxPro in 2007. Anyway, here's FoxPro revived

https://foxscript.org/
245•boredjohnny•8h ago•154 comments

ReBarUEFI: Resizable BAR for almost any UEFI system

https://github.com/xCuri0/ReBarUEFI
105•nateb2022•2d ago•35 comments

What California is learning from solar panels built over irrigation canals

https://www.kqed.org/science/2002033/heres-what-california-is-learning-from-solar-panels-built-ov...
167•Jtsummers•1d ago•254 comments

No Easy Fix for Bogus Respondents in Online Opt-In Polls

https://www.pewresearch.org/methods/2026/08/27/no-easy-fix-for-bogus-respondents-in-online-opt-in...
10•luu•1d ago•0 comments

SAML: A fractal of bad design

https://blog.trailofbits.com/2026/09/21/saml-a-fractal-of-bad-design/
194•aray07•10h ago•119 comments

Claude Opus 5.5 Intelligence, Performance and Price Analysis (Max)

https://artificialanalysis.ai/models/claude-opus-5-5
261•theanonymousone•12h ago•77 comments

How did AMD Ryzen get 50% faster in two years?

https://lemire.me/blog/2026/09/18/how-did-amd-ryzen-get-50-faster-in-two-years/
264•ibobev•4d ago•100 comments

WordPress: Unauthenticated path traversal leading to conditional RCE

https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp
170•vntok•12h ago•90 comments

Pentagon says overreliance on AI contributed to missile strike on Iran school

https://www.bloomberg.com/graphics/2026-iran-school-attack/
526•devonnull•10h ago•257 comments

MUNI Heritage Weekend in San Francisco

https://daniel.lawrence.lu/blog/2026-09-20-muni-heritage-weekend/
182•plun9•2d ago•48 comments

Unreal Agent

https://unreallabs.ai/blog/unreal-agent/
151•trollied•10h ago•93 comments

The current balance of power in open models

https://www.interconnects.ai/p/the-current-balance-of-power-in-open
64•gmays•7h ago•21 comments

Delta: Highly available, strongly consistent storage using chain replication (2022)

https://engineering.fb.com/2022/05/04/data-infrastructure/delta/
10•grep_it•1d ago•0 comments

The Softness of Metal

https://psyche.co/turning-points/his-frailty-made-ozzys-final-gig-true-heavy-metal
11•NaOH•1d ago•2 comments

OpenAI is well positioned to fast-follow Jev

https://arcturus-labs.com/blog/2026/09/21/will-openai-eat-jevs-lunch/
275•JohnBerryman•14h ago•199 comments

People hooked on vapes try a new way to quit: cigarettes

https://www.bloomberg.com/news/articles/2026-09-18/to-quit-vaping-some-are-starting-to-smoke
139•alephnerd•1d ago•145 comments

Show HN: JevBench, a reproducible benchmark for typed decision models

https://benchmarkheaven.com/jev-models
84•florianstandhar•16h ago•20 comments

Obscura: VPN that can't log your activity

https://obscura.com/#faq-technical
103•Flimm•9h ago•86 comments

Native apps written in TypeScript and CSS

https://github.com/geastack/examples
98•arbayi•9h ago•34 comments

Markdown in /src

https://htmx.org/essays/markdown-in-src/
107•perrygeo•1d ago•54 comments

Side-stepping the Secretary Problem, unwittingly

https://www.evalapply.org/posts/side-step-secretary-problem-hiring/index.html
67•pvdebbe•1d ago•12 comments

George Lucas Returns to Earth, Bearing Gifts

https://commonedge.org/george-lucas-returns-to-earth-bearing-gifts/
97•surprisetalk•1d ago•57 comments

Apple has added persistent 'ads' to iOS, and it's driving users crazy

https://www.techradar.com/phones/iphone/i-wish-apple-would-just-stop-that-crap-apple-has-added-pe...
668•MC995•14h ago•492 comments

16-bit Intel 8088 chip (c. 1985)

https://allpoetry.com/16-bit-Intel-8088-chip
114•rbanffy•12h ago•14 comments