Re:Rune: A native GPU-rendered Rust UI framework for macOS, ...
by CSSer on Friday November 06, 2026 @01:05PM
(#50395954)
It sounds like a black hat penetration tester's nirvana. All you have to do is open the right issue to trick the model into installing the right security vulnerability or backdoor, or better yet, a series of small security vulnerabilities that can be chained to create a tailor-made exploit. It's practically a hacker's choose-your-own adventure.
[ Parent
| on HN ]
Re:Rune: A native GPU-rendered Rust UI framework for macOS, ...
by notnullorvoid on Friday November 06, 2026 @01:13PM
(#50396071)
I suspect they'd be manually filtering which issues/features their agents attempt to fix/implement. Otherwise you end up with all sorts of features that simply make no sense for the project.
The approach is at least better than accepting slop PRs that could have backdoors injected into them.
Re:Rune: A native GPU-rendered Rust UI framework for macOS, ...
by bhouston on Friday November 06, 2026 @01:24PM
(#50396222)
I am not sure about that.
Which gate is easier to maintain?
1. Issue requests
2. PR requests.
I think in PR requests it is easier to introduce purposeful bugs or obfuscated code than it is to hide them in issues.
So I think gating on issues is easier and more secure.
Re:Rune: A native GPU-rendered Rust UI framework for macOS, ...
by sebzim4500 on Friday November 06, 2026 @01:25PM
(#50396232)
That seems a lot harder than if they accepted PRs like everyone else