1
Okta's NextJS-0auth troubles
When AI engineering fails: Dealing with hallucinations, misattribution, and broken code in an Okta/Auth0 pull request maintained by AI.
Joshua Rogers’ Scribbles
Joshua Rogers is an Australian technologist, sysadmin, security engineer, and pentester sharing long-form writeups on hacking, binary web and infra security, programming, technology, politics, and life itself.
- Popular posts
- 5
- Total points
- 1,205
- HN comments
- 652
- Rank
- #1,687 personal
Visit joshua.hu → RSS feedOn Hacker News Oct 2023 – Mar 2026
Security & Privacy 4Web & Frontend 2Tools & Productivity 1Software Engineering 1Infrastructure & DevOps 1AI & Machine Learning 1
2
No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability
A look at the messy reality of iOS vulnerabilities: which bugs get patched, which quietly linger, and the challenges of tracking real device risk over time.
3
Making Firefox's right-click not suck with about:config
A practical about:config checklist to declutter Firefox right-click menus on macOS, disabling AI/chatbot prompts, link previews, OCR, visual search, and other low-value context menu items.
4
root with a single command: sudo logrotate
Starting from the constraint that only sudo logrotate * may be run, and ending at root: abusing the log file flag to overwrite root owned scripts and ride cron to privilege escalation.
5
Hacking with AI SASTs: An overview of ‘AI Security Engineers’ / ‘LLM Security Scanners’ for Penetration Testers and Security Teams
Reviewing AI Security Engineers: How ZeroPath found 200+ bugs in curl and why AI SASTs are becoming a viable replacement for traditional tools.