News for hackers. Stuff that matters.

A comment on We pwned X, Vercel, Cursor, and Discord through a supply-chain attack. Parent comment

Re:We pwned X, Vercel, Cursor, and Discord through a supply-... by Sohcahtoa82 on Thursday December 18, 2025 @05:06PM (#46319467)
XXE should have never existed.

Whoever decided it should be enabled by default should be put into some sort of cybersecurity jail.

[ Parent | on HN ]
Re:We pwned X, Vercel, Cursor, and Discord through a supply-... by GoblinSlayer on Friday December 19, 2025 @11:54AM (#46328008)
It's no different from links to googlesyndication in offline html docs.
[ Parent | on HN ]