News for hackers. Stuff that matters.

A comment on We pwned X, Vercel, Cursor, and Discord through a supply-chain attack. Parent comment

Re:We pwned X, Vercel, Cursor, and Discord through a supply-... by hinkley on Thursday December 18, 2025 @03:34PM (#46318272)
At least with external entities you could deny the parser an internet connection and force it to only load external documents from a cache you prepopulated and vetted. Turing completeness is a bullshit idea in document formats.
[ Parent | on HN ]
Re:We pwned X, Vercel, Cursor, and Discord through a supply-... by aidenn0 on Thursday December 18, 2025 @04:21PM (#46318935)
With SVGs you can serve them from a different domain. IIUC the issue from TFA was that the SVGs were served from the primary domain; had they been on a different domain, they would have not been allowed to do as much.
[ Parent | on HN ]
Re:We pwned X, Vercel, Cursor, and Discord through a supply-... by actionfromafar on Thursday December 18, 2025 @04:35PM (#46319105)
Postscript is pretty neat IMHO and it’s Turing complete. I really appreciated my raytraced page finally coming out of that poor HP laser after an hour or so.
[ Parent | on HN ]
Re:We pwned X, Vercel, Cursor, and Discord through a supply-... by aidenn0 on Thursday December 18, 2025 @04:39PM (#46319150)
I once sent a Sierpinski's Triangle postscript program to a shared printer. It took 90 minutes, and pissed off everybody else trying to print.
[ Parent | on HN ]
Re:We pwned X, Vercel, Cursor, and Discord through a supply-... by hinkley on Thursday December 18, 2025 @04:43PM (#46319197)
One of the very first SVG documents I encountered was a port of the PS Tiger to SVG. It loaded a lot faster than the PostScript Tiger.
[ Parent | on HN ]
Re:We pwned X, Vercel, Cursor, and Discord through a supply-... by anthk on Thursday December 18, 2025 @05:41PM (#46319841)
PostScript can emulate the ZMachine (Zork text adventures and all of infocom) with "zmachine.ps". Look it up at DDG/GG.
[ Parent | on HN ]
Re:We pwned X, Vercel, Cursor, and Discord through a supply-... by zahlman on Friday December 19, 2025 @03:36PM (#46330599)
How does it do I/O?
[ Parent | on HN ]
Re:We pwned X, Vercel, Cursor, and Discord through a supply-... by actionfromafar on Friday December 19, 2025 @06:42PM (#46332284)
A monad. It’s just a class of abstract Endor Moon or something. Probably you have to send all commands up to the current state to it. :)
[ Parent | on HN ]
Re:We pwned X, Vercel, Cursor, and Discord through a supply-... by bigfatkitten on Thursday December 18, 2025 @05:16PM (#46319591)
Sounds almost like a fun crypto mining opportunity.
[ Parent | on HN ]
Re:We pwned X, Vercel, Cursor, and Discord through a supply-... by gnerd00 on Thursday December 18, 2025 @04:41PM (#46319171)
calling Leonard Rosenthol ...
[ Parent | on HN ]