surface code

IEEE Spectrum reports that AI tools are exposing long-standing flaws in legacy software, illustrated by the php2shell vulnerability class, where decades-old insecure coding patterns in PHP applications let attackers turn input into shell commands. The argument is that AI-assisted discovery and exploitation of such weaknesses is compounding an accumulated security debt from 40 years of software practices, forcing organizations to finally remediate old code.

A developer launched Hnrepos.com, a browsing site for GitHub repositories shared on Hacker News, describing it as a HackerTube-style interface for code projects. The launch was posted on Hacker News, where users are trying it out and commenting on how useful it is for discovering projects that surface there.