News for hackers. Stuff that matters.

mattaustin

Re:Incident with Actions and Pages on Tuesday May 26, 2026 @12:48PM (#48282290)
Running a company without a CEO is really starting to show..
Re:MIT: 20% drop in incoming graduate students on Thursday May 14, 2026 @12:58PM (#48138031)
Just a reminder MIT's endowment funds totaled $27.4 billion, excluding pledges
Re:MIT: 20% drop in incoming graduate students on Thursday May 14, 2026 @12:58PM (#48138027)
Just a reminder MIT's endowment funds totaled $27.4 billion, excluding pledges.
it is https://github.com/browser-use/browser-use/security/advisori..., but it will also 404 until they make it public.
Its 404 because its reported to them "privately" via the "Security and Privacy" tab. It has just been ignored by them.
I submitted a remote code execution to the browser-use about 40 days ago. GHSA-r2x7-6hq9-qp7v I am a bit stunned by the lack of response. Any safety concerns in this project?
I think most of the "outrage" is with the complete lack of validation and the "This is a known workflow within our platform" response more than the ban. Any plans to address the issue other than reactive bans?
This is the bug from goole about a year ago saying it is by design. https://code.google.com/p/chromium/issues/detail?id=333752